PDA

View Full Version : Mail and ftp broke with vps reconfigured


Ryanmt
12th June 2009, 18:14
I was victim of the hacking that happened to vaserv.com.
http://www.theregister.co.uk/2009/06/08/webhost_attack/
As a result all the vps's were reconfigured.. im not really sure what they did to mine but something had to be fixed on it.

Now proftpd wont start

ryanmt@vps:/var/log$ sudo /etc/init.d/proftpd restart
* Stopping ftp server proftpd [ OK ]
* Starting ftp server proftpd - IPv4 getaddrinfo 'vps.axoc.co.uk' error: Name or service not known
- warning: unable to determine IP address of 'vps.axoc.co.uk'
- error: no valid servers configured
- Fatal: error processing configuration file '/etc/proftpd/proftpd.conf'
[fail]
ryanmt@vps:/var/log$


and outgoing mail wont send. Mail.log

Jun 12 06:29:43 vps postfix/error[32391]: 6681E370671: to=<xx@xx.com>, relay=none, delay=21542, delays=21502/40/0/0.01, dsn=4.4.3, status=deferred (delivery temporarily suspended: Host or domain name not found. Name service error for name=gmail.com type=MX: Host not found, try again)
Jun 12 06:29:43 vps postfix/error[32377]: C7E47370698: to=<xx@xx.com>, relay=none, delay=134942, delays=134902/40/0/0.01, dsn=4.4.3, status=deferred (delivery temporarily suspended: Host or domain name not found. Name service error for name=gmail.com type=MX: Host not found, try again)
Jun 12 06:29:43 vps postfix/error[32385]: 48D0C7B86BC: to=<xx@xx.com>, relay=none, delay=147542, delays=147502/40/0/0.01, dsn=4.4.3, status=deferred (delivery temporarily suspended: Host or domain name not found. Name service error for name=gmail.com type=MX: Host not found, try again)
Jun 12 06:29:43 vps postfix/error[32391]: 1762182804E: to=<xx@xx.com>, orig_to=<xx@xx.com>, relay=none, delay=33983, delays=33943/40/0/0.01, dsn=4.4.3, status=deferred (delivery temporarily suspended: Host or domain name not found. Name service error for name=gmail.com type=MX: Host not found, try again)


What can cause this problem? Do i need to tell them to reconfigure something else on my vps?

No configuration chances have been made and it has been working for a long time previously.

Ryanmt
12th June 2009, 23:25
Edited my hosts file as it had been changed.

ryanmt@vps:~$ sudo /etc/init.d/proftpd restart
* Stopping ftp server proftpd [ OK ]
* Starting ftp server proftpd vps.axoc.co.uk - 78.110.167.28:21 masquerading as 78.110.167.28
[ OK ]

Is this the correct message, ive not seen the masquerading thing before

hosts file - "78.110.167.28 vps.axoc.co.uk vps"

till
13th June 2009, 09:56
Do you have any lines with "MasqueradeAddress" in your proftpd.conf file?