Hi my Ubuntu 8.04 LTS, perfect server guide, has been working like a charm except for a few minor troubles. Today, 24th, the mail is down users can receive but end (SMTP is down or very busy). The server is really slow, no ssh, no login, just like:
No idea if is a hacking because cannot see the logs but after reading the forum it seem so. I'd a big and expensive firewall so I cannot really know what´s happening.
So I'll probably need a way to move all data to another server, but there's no easy way to do that.
I'd moved the server to another room and rechecked, but still seems too slow, the last change I'd made is change MAXPERIP from 20 to 80 and MAXDAEMONS from 40 to 80. The server is a Dual Core with 2 GB RAM.
Update: I've disconnected the server from LAN/WAN is very slow at booting jutst before showing " Starting ISPConfig systemm..." and "/root/ispconfig/httpd/bin/apachectl startssl: httpd started" and after that. No user asked. Normally the server could boot in less than 5 mins now it takes several hours. The HDD led activity is really busy so I know that computer is really working.
Btw heavy CPU and RAM using, no process showed at top so it must be a Daemon, tried with imapd, postfix, it seems MySQL related because shows an error with mysql stop (ERROR 1045 (28000) : aCCESS DENIED FOR USER ROOT'@'LOCALHOST') and mysqld shows unable to lock ./ibdata1 error: 11... It could be hacked?