Issues appeared after uninstalling mumble-server-web...

Discussion in 'General' started by Nioubee, Apr 19, 2013.

  1. Nioubee

    Nioubee New Member

    Good morning everyone,

    There is now some month that my old ISPConfig server is not running correctly, i tried different solution on the web but didn't find something working.

    Basically, like the title said, i've installed mumble server, which installed the mumble-server-web package, everything was working, but a day i wanted to move all my clients except one from this server, so... i uninstalled all un-necessary packages i installed after ISPConfig and it crashed Apache2.

    When starting Apache2 i get this :
    Code:
    [email protected]_server:/var/log/apache2# /etc/init.d/apache2 start
    Starting web server: apache2[Fri Apr 19 10:05:30 2013] [warn] NameVirtualHost 109.203.40.81:80 has no VirtualHosts
    [Fri Apr 19 10:05:30 2013] [warn] NameVirtualHost MY.WAN.IP.ADDRESS:443 has no VirtualHosts
    [Fri Apr 19 10:05:30 2013] [warn] NameVirtualHost *:443 has no VirtualHosts
    [Fri Apr 19 10:05:30 2013] [warn] NameVirtualHost *:80 has no VirtualHosts
    (98)Address already in use: make_sock: could not bind to address [::]:80
    (98)Address already in use: make_sock: could not bind to address 0.0.0.0:80
    no listening sockets available, shutting down
    Unable to open logs
    Action 'start' failed.
    The Apache error log may have more information.
     failed!
    The problem is that /var/log/apaache2/error.log is empty ! if i look the the archives the last error is from 1st march..

    Ive found on Google this topic : http://www.howtoforge.com/forums/archive/index.php/t-52247.html

    Till suggested a "netstat -tap", this is my output :
    Code:
    [email protected]_server_domain_tld:/var/log/apache2# netstat -tap
    Connexions Internet actives (serveurs et établies)
    Proto Recv-Q Send-Q Adresse locale          Adresse distante        Etat        PID/Program name
    tcp        0      0 localhost:spamd         *:*                     LISTEN      1902/spamd.pid
    tcp        0      0 *:sunrpc                *:*                     LISTEN      930/portmap
    tcp        0      0 *:ftp                   *:*                     LISTEN      21186/pure-ftpd (SE
    tcp        0      0 beavernet.hostin:domain *:*                     LISTEN      6599/named
    tcp        0      0 localhost:domain        *:*                     LISTEN      6599/named
    tcp        0      0 *:munin                 *:*                     LISTEN      8024/munin-node
    tcp        0      0 *:5109                  *:*                     LISTEN      1614/istatd
    tcp        0      0 *:ssh                   *:*                     LISTEN      4371/sshd
    tcp        0      0 localhost:953           *:*                     LISTEN      6599/named
    tcp        0      0 *:smtp                  *:*                     LISTEN      5606/master
    tcp        0      0 localhost:10024         *:*                     LISTEN      2941/amavisd (ch12-
    tcp        0      0 localhost:10025         *:*                     LISTEN      5606/master
    tcp        0      0 *:mysql                 *:*                     LISTEN      21065/mysqld
    tcp        0      0 *:43370                 *:*                     LISTEN      23754/rpc.statd
    tcp        1      0 localhost:45736         localhost:mysql         CLOSE_WAIT  2941/amavisd (ch12-
    tcp        0      0 beavernet.hostin:sunrpc 208.234.39.19:743       ESTABLISHED 930/portmap
    tcp        1      0 localhost:35888         localhost:mysql         CLOSE_WAIT  3523/amavisd (ch12-
    tcp        0     52 beavernet.hosting-v:ssh client125.40.jpne:50973 ESTABLISHED 20245/sshd: blacky
    tcp6       0      0 [::]:imap2              [::]:*                  LISTEN      6455/couriertcpd
    tcp6       0      0 [::]:http-alt           [::]:*                  LISTEN      7477/apache2
    tcp6       0      0 [::]:www                [::]:*                  LISTEN      7477/apache2
    tcp6       0      0 [::]:tproxy             [::]:*                  LISTEN      7477/apache2
    tcp6       0      0 [::]:ftp                [::]:*                  LISTEN      21186/pure-ftpd (SE
    tcp6       0      0 [::]:domain             [::]:*                  LISTEN      6599/named
    tcp6       0      0 [::]:ssh                [::]:*                  LISTEN      4371/sshd
    tcp6       0      0 ip6-localhost:953       [::]:*                  LISTEN      6599/named
    tcp6       0      0 [::]:smtp               [::]:*                  LISTEN      5606/master
    tcp6       0      0 [::]:https              [::]:*                  LISTEN      7477/apache2
    tcp6       0      0 [::]:imaps              [::]:*                  LISTEN      6472/couriertcpd
    tcp6       0      0 [::]:pop3s              [::]:*                  LISTEN      6500/couriertcpd
    tcp6       0      0 [::]:pop3               [::]:*                  LISTEN      6483/couriertcpd
    tcp6      17      0 beavernet.hostin:tproxy relay.luxoptica.c:51200 CLOSE_WAIT  -
    tcp6     224      0 beavernet.host:http-alt relay.luxoptica.c:51196 CLOSE_WAIT  -
    tcp6      33      0 beavernet.hosting:https relay.luxoptica.c:51056 CLOSE_WAIT  -
    tcp6      10      0 beavernet.hosting:https relay.luxoptica.c:51175 CLOSE_WAIT  -
    tcp6      10      0 beavernet.hostin:tproxy relay.luxoptica.c:51183 CLOSE_WAIT  -
    tcp6      42      0 beavernet.host:http-alt relay.luxoptica.c:50929 CLOSE_WAIT  -
    tcp6      18      0 beavernet.hostin:tproxy relay.luxoptica.c:50906 CLOSE_WAIT  -
    tcp6      13      0 beavernet.hosting:https relay.luxoptica.c:50891 CLOSE_WAIT  -
    tcp6      45      0 beavernet.hostin:tproxy relay.luxoptica.c:51021 CLOSE_WAIT  -
    tcp6      61      0 beavernet.hosting:https relay.luxoptica.c:52708 CLOSE_WAIT  -
    tcp6     224      0 beavernet.hosting:https relay.luxoptica.c:51194 CLOSE_WAIT  -
    tcp6     154      0 beavernet.hostin:tproxy relay.luxoptica.com:361 CLOSE_WAIT  -
    tcp6       9      0 beavernet.hostin:tproxy relay.luxoptica.c:49803 CLOSE_WAIT  -
    tcp6      61      0 beavernet.hostin:tproxy relay.luxoptica.c:51230 CLOSE_WAIT  -
    tcp6     161      0 beavernet.hosting:https relay.luxoptica.c:50858 CLOSE_WAIT  -
    tcp6      91      0 beavernet.host:http-alt relay.luxoptica.c:53097 CLOSE_WAIT  -
    tcp6      33      0 beavernet.host:http-alt relay.luxoptica.c:51036 CLOSE_WAIT  -
    tcp6      15      0 beavernet.hostin:tproxy relay.luxoptica.c:51191 CLOSE_WAIT  -
    tcp6       7      0 beavernet.hosting:https relay.luxoptica.c:51094 CLOSE_WAIT  -
    tcp6      13      0 beavernet.host:http-alt relay.luxoptica.c:51170 CLOSE_WAIT  -
    tcp6      19      0 beavernet.host:http-alt relay.luxoptica.c:50732 CLOSE_WAIT  -
    tcp6      12      0 beavernet.host:http-alt relay.luxoptica.c:51220 CLOSE_WAIT  -
    tcp6      24      0 beavernet.hostin:tproxy relay.luxoptica.c:51221 CLOSE_WAIT  -
    tcp6      13      0 beavernet.hostin:tproxy relay.luxoptica.c:51174 CLOSE_WAIT  -
    tcp6      45      0 beavernet.hosting:https relay.luxoptica.com:630 CLOSE_WAIT  -
    tcp6      19      0 beavernet.hosting:https relay.luxoptica.c:50973 CLOSE_WAIT  -
    tcp6      15      0 beavernet.hosting:https relay.luxoptica.c:51186 CLOSE_WAIT  -
    tcp6     118      0 beavernet.hostin:tproxy relay.luxoptica.c:51150 CLOSE_WAIT  -
    tcp6     176      0 beavernet.hostin:tproxy relay.luxoptica.c:55830 CLOSE_WAIT  -
    tcp6      14      0 beavernet.host:http-alt relay.luxoptica.c:50962 CLOSE_WAIT  -
    tcp6      61      0 beavernet.host:http-alt relay.luxoptica.c:51446 CLOSE_WAIT  -
    tcp6     169      0 beavernet.hostin:tproxy relay.luxoptica.c:51161 CLOSE_WAIT  -
    tcp6     118      0 beavernet.hosting:https relay.luxoptica.c:51134 CLOSE_WAIT  -
    tcp6      89      0 beavernet.hostin:tproxy relay.luxoptica.c:51128 CLOSE_WAIT  -
    tcp6      12      0 beavernet.hostin:tproxy relay.luxoptica.c:51209 CLOSE_WAIT  -
    tcp6      89      0 beavernet.hosting:https relay.luxoptica.c:50789 CLOSE_WAIT  -
    tcp6       7      0 beavernet.host:http-alt relay.luxoptica.c:51079 CLOSE_WAIT  -
    tcp6      89      0 beavernet.host:http-alt relay.luxoptica.c:51105 CLOSE_WAIT  -
    tcp6       5      0 beavernet.hostin:tproxy relay.luxoptica.c:50939 CLOSE_WAIT  -
    tcp6      23      0 beavernet.host:http-alt relay.luxoptica.c:50794 CLOSE_WAIT  -
    tcp6       9      0 beavernet.hosting:https relay.luxoptica.c:53938 CLOSE_WAIT  -
    tcp6      19      0 beavernet.hostin:tproxy relay.luxoptica.c:50733 CLOSE_WAIT  -
    tcp6       7      0 beavernet.hostin:tproxy relay.luxoptica.c:51091 CLOSE_WAIT  -
    tcp6     176      0 beavernet.host:http-alt relay.luxoptica.c:55499 CLOSE_WAIT  -
    tcp6     153      0 beavernet.hostin:tproxy relay.luxoptica.com:933 CLOSE_WAIT  -
    tcp6      19      0 beavernet.hostin:tproxy relay.luxoptica.c:51269 CLOSE_WAIT  -
    tcp6      17      0 beavernet.host:http-alt relay.luxoptica.c:51208 CLOSE_WAIT  -
    tcp6      45      0 beavernet.hostin:tproxy relay.luxoptica.com:888 CLOSE_WAIT  -
    tcp6      17      0 beavernet.hosting:https relay.luxoptica.c:51205 CLOSE_WAIT  -
    tcp6      19      0 beavernet.hosting:https relay.luxoptica.com.:96 CLOSE_WAIT  -
    tcp6     224      0 beavernet.hostin:tproxy relay.luxoptica.c:50864 CLOSE_WAIT  -
    tcp6      33      0 beavernet.hostin:tproxy relay.luxoptica.c:51045 CLOSE_WAIT  -
    tcp6      24      0 beavernet.host:http-alt relay.luxoptica.c:51229 CLOSE_WAIT  -
    tcp6      15      0 beavernet.host:http-alt relay.luxoptica.c:51188 CLOSE_WAIT  -
    tcp6      45      0 beavernet.hosting:https relay.luxoptica.c:51029 CLOSE_WAIT  -
    tcp6     442      0 beavernet.hosting:https relay.luxoptica.c:50915 CLOSE_WAIT  -
    tcp6      12      0 beavernet.hosting:https relay.luxoptica.c:51213 CLOSE_WAIT  -
    tcp6      91      0 beavernet.hostin:tproxy relay.luxoptica.c:61606 CLOSE_WAIT  -
    tcp6     176      0 beavernet.hosting:https relay.luxoptica.c:54750 CLOSE_WAIT  -
    tcp6      15      0 beavernet.host:http-alt relay.luxoptica.c:51063 CLOSE_WAIT  -
    tcp6       5      0 beavernet.host:http-alt relay.luxoptica.c:50987 CLOSE_WAIT  -
    tcp6      45      0 beavernet.host:http-alt relay.luxoptica.c:51008 CLOSE_WAIT  -
    tcp6      23      0 beavernet.hosting:https relay.luxoptica.c:50728 CLOSE_WAIT  -
    tcp6     169      0 beavernet.hosting:https relay.luxoptica.c:51151 CLOSE_WAIT  -
    tcp6      54      0 beavernet.hosting:https relay.luxoptica.c:51163 CLOSE_WAIT  -
    tcp6      23      0 beavernet.hostin:tproxy relay.luxoptica.c:50969 CLOSE_WAIT  -
    tcp6      91      0 beavernet.hosting:https relay.luxoptica.c:61719 CLOSE_WAIT  -
    tcp6      10      0 beavernet.host:http-alt relay.luxoptica.c:51178 CLOSE_WAIT  -
    tcp6      23      0 beavernet.hosting:https relay.luxoptica.c:51003 CLOSE_WAIT  -
    tcp6       5      0 beavernet.hosting:https relay.luxoptica.c:50952 CLOSE_WAIT  -
    tcp6       9      0 beavernet.host:http-alt relay.luxoptica.c:56706 CLOSE_WAIT  -
    tcp6      19      0 beavernet.host:http-alt relay.luxoptica.c:55784 CLOSE_WAIT  -
    tcp6      15      0 beavernet.hostin:tproxy relay.luxoptica.c:51068 CLOSE_WAIT  -
    tcp6     118      0 beavernet.host:http-alt relay.luxoptica.c:51138 CLOSE_WAIT  -
    tcp6      15      0 beavernet.hosting:https relay.luxoptica.c:51073 CLOSE_WAIT  -
    tcp6      54      0 beavernet.host:http-alt relay.luxoptica.c:50901 CLOSE_WAIT  -
    tcp6      23      0 beavernet.host:http-alt relay.luxoptica.c:50863 CLOSE_WAIT  -
    tcp6      23      0 beavernet.hostin:tproxy relay.luxoptica.c:51002 CLOSE_WAIT  -
    tcp6      19      0 beavernet.hosting:https relay.luxoptica.c:62795 CLOSE_WAIT  -
    tcp6      24      0 beavernet.hosting:https relay.luxoptica.c:51225 CLOSE_WAIT  -
    tcp6      45      0 beavernet.host:http-alt relay.luxoptica.com:215 CLOSE_WAIT  -
    tcp6      54      0 beavernet.hostin:tproxy relay.luxoptica.c:50795 CLOSE_WAIT  -
    tcp6     169      0 beavernet.host:http-alt relay.luxoptica.c:51156 CLOSE_WAIT  -
    Is my server, somewhat, infected by a relay ? :eek:

    I did too a rootkit check, the result :

    Code:
    System checks summary
    =====================
    
    File properties checks...
        Files checked: 132
        Suspect files: 2
    
    Rootkit checks...
        Rootkits checked : 244
        Possible rootkits: 0
    
    Applications checks...
        All checks skipped
    
    The system checks took: 3 minutes and 40 seconds
    
    All results have been written to the log file (/var/log/rkhunter.log)
    
    One or more warnings have been found while checking the system.
    Please check the log file (/var/log/rkhunter.log)
    
    
    
    [09:58:37] /usr/bin/perl                                     [ Warning ]
    [09:58:37] Warning: The file properties have changed:
    [09:58:37]          File: /usr/bin/perl
    [09:58:37]          Current hash: 400681f383f4a2b63d4615a8d7ad53c2a685e3da
    [09:58:37]          Stored hash : be5055e1642bec794804ebf8668a1554864d218b
    [09:58:37]          Current inode: 1848777    Stored inode: 1856355
    [09:58:37]          Current file modification time: 1362591932 (06-mar-2013 18:45:32)
    [09:58:37]          Stored file modification time : 1361046751 (16-fév-2013 2132:31)
    
    
    [09:58:41] /usr/bin/sudo                                     [ Warning ]
    [09:58:41] Warning: The file properties have changed:
    [09:58:41]          File: /usr/bin/sudo
    [09:58:41]          Current hash: 26c7d604ed60097726bf82bfa548b7e5639d7dd0
    [09:58:41]          Stored hash : 014084e376619d291814cc638891b5d39e559e54
    [09:58:41]          Current inode: 1837911    Stored inode: 1838860
    [09:58:41]          Current size: 144772    Stored size: 144740
    [09:58:41]          Current file modification time: 1362598702 (06-mar-2013 20:38:22)
    [09:58:41]          Stored file modification time : 1337794468 (23-mai-2012 19:34:28)
    This server is running Debian Squeeze 6.0.7 i386, all services seems to be running from "htop" but apache2 can't be started. This server is still used by a backup (FTP)

    Hope someone can help me..
    Thanks
     
  2. Nioubee

    Nioubee New Member

    Do not read this, i feel dumb

    I feel dumb, just did " killall apache2 && /etc/init.d/apache2 start " and it worked.

    Mods: you can close this thread.
     

Share This Page