Ultra Slow server no connection or console

Discussion in 'Installation/Configuration' started by wontolla, Dec 24, 2010.

  1. wontolla

    wontolla New Member

    Hi my Ubuntu 8.04 LTS, perfect server guide, has been working like a charm except for a few minor troubles. Today, 24th, the mail is down users can receive but end (SMTP is down or very busy). The server is really slow, no ssh, no login, just like:


    No idea if is a hacking because cannot see the logs but after reading the forum it seem so. I'd a big and expensive firewall so I cannot really know what´s happening.

    So I'll probably need a way to move all data to another server, but there's no easy way to do that.

    I'd moved the server to another room and rechecked, but still seems too slow, the last change I'd made is change MAXPERIP from 20 to 80 and MAXDAEMONS from 40 to 80. The server is a Dual Core with 2 GB RAM.

    Any help?.

    Update: I've disconnected the server from LAN/WAN is very slow at booting jutst before showing " Starting ISPConfig systemm..." and "/root/ispconfig/httpd/bin/apachectl startssl: httpd started" and after that. No user asked. Normally the server could boot in less than 5 mins now it takes several hours. The HDD led activity is really busy so I know that computer is really working.

    Btw heavy CPU and RAM using, no process showed at top so it must be a Daemon, tried with imapd, postfix, it seems MySQL related because shows an error with mysql stop (ERROR 1045 (28000) : aCCESS DENIED FOR USER ROOT'@'LOCALHOST') and mysqld shows unable to lock ./ibdata1 error: 11... It could be hacked?
    Last edited: Dec 24, 2010
  2. wontolla

    wontolla New Member

    Still very slow, I'm going to change my server for remote hosting. Damn my server was really useful.

    Any help?.
  3. till

    till Super Moderator Staff Member ISPConfig Developer

    Daemons show up with top as well. If you have a high load but no processes show up, then you should scan your server with chkrootkit and rkhunter to rsure that It is not hacked.
  4. wontolla

    wontolla New Member

    Chkrootkit says I have 2 hidden process from ps command and a possible LKM Trojan.

    I'll need to stop those process, surely they are wasting the CPU, to exstract all the info and make a new server.

    RKHunter shows



    RKHunter shows no rootkit, just those warnings......
    Last edited: Dec 29, 2010
  5. wontolla

    wontolla New Member

    The server is still very busy so I'm installing another server, which files should I copy to restore the emails?.
  6. falko

    falko Super Moderator ISPConfig Developer

  7. wontolla

    wontolla New Member

    Thanx, trouble is server 1 is down, I cannot make a backup less try to sync the data. I'm going extract the HDD and connect to another computer to read the files, but I need to know which ones.
  8. falko

    falko Super Moderator ISPConfig Developer

    If you use Maildir, the Maildir directories with all emails are in each user's homedir.
  9. wontolla

    wontolla New Member

    I'm using the perfect server guide so no idea. I'd tried imapsync but I got rejected at destination server, strange but is a vmware virtual machine, I'll dig a real one and install ISPConfig 3 and retry.

    Btw if I make a backup from ISPConfig 2, how do I restore it?, can I restore the backup in ISPConfig 3?
    Last edited: Jan 3, 2011
  10. wontolla

    wontolla New Member

    Wow, server started to work, CPU is OK and everything works, I need to move all data to another server, BCK does not copy emails, so what now?
  11. falko

    falko Super Moderator ISPConfig Developer

    Is IMAP running on the server, or just POP3? Did you get an error message?
  12. wontolla

    wontolla New Member

    The message is about the supported authentication at destination server. None of the methods are available. So my idea is keep the server running and make an ISPConfig 3 server and then migrate all the data using imapsync if there is not other way available.
  13. falko

    falko Super Moderator ISPConfig Developer

    Well, there's still the way of copying all Maildir directories manually to the new server.

Share This Page