Hi folks, sorry about the downtime. If you haven't already heard, the TIB server was hacked in to by a Brazilian cracker, who defaced all files on the web server beginning with "index" (which included php and wml files). Thanks to a quick SMS from monkeyson I shut the server down before any more damage could be done, but that's just the start of the troubles.
The short version goes like this:
- Sysadmin gets tonsillitis, unavailable for a week
- Big drive with all the web sites on won't mount, and data has to be recovered
- Backup server wasn't quite ready (onboard NIC didn't work under Linux, one of the hard drives was doing weird stuff)
- 13GB of data had to be copied on to the server over a 1Mb pipe, but was running at a mere 5KB/sec at one point (routing problems)
- Where full backups for sites weren't available, pages had to be recovered, remade, made up, or uploaded over by hand
- Then came the fun part of configuring the server and finding out why nothing worked, and write many programs to fix permissions, file extensions etc.
- Oh, and I had a fairly miserable holiday somewhere in between.
Anyway, hopefully this server is much more robust - the old server probably got hacked because I didn't pay enough attention to security patches, but as we're using some servers at work with the same OS I should get warnings as part of the day job. It's back in the Chichester office as London hasn't really worked out - same heat and power problems, but taking a week to go fetch the thing, fix it, then take it back. So, please, no Slashdotting or the boss will kill me! :)
|
We're back! |
|
rich (16:40 19/8/2004) moss (16:46 19/8/2004) moss (16:46 19/8/2004) andypoole (17:13 19/8/2004) rich (17:22 19/8/2004) andypoole (17:22 19/8/2004) andypoole (17:27 19/8/2004) pvigay (00:54 20/8/2004) monkeyson2 (10:19 20/8/2004) andrew (12:30 20/8/2004) rich (12:33 20/8/2004) tribbles (14:43 20/8/2004) andrew (15:39 20/8/2004) andrew (15:42 20/8/2004) rich (17:18 20/8/2004) andrew (01:14 21/8/2004) jmb (03:21 21/8/2004) rich (06:16 21/8/2004) mavhc (10:56 21/8/2004) andrew (12:28 21/8/2004) Phlamethrower (13:22 21/8/2004) ilcook (10:49 22/8/2004) Revin Kevin (22:48 22/8/2004)
|
|
Richard Goodwin |
Message #93132, posted by rich at 16:40, 19/8/2004 |
Dictator for life
Posts: 6828
|
System clock was wrong for a start ;) As such, I laugh at your attempt to get first post :P |
|
[ Log in to reply ] |
|
John Hoare |
Message #93133, posted by moss at 16:46, 19/8/2004, in reply to message #93132 |
Posts: 9348
|
Erm, second post :-) |
|
[ Log in to reply ] |
|
John Hoare |
Message #93134, posted by moss at 16:46, 19/8/2004, in reply to message #93133 |
Posts: 9348
|
Ho! |
|
[ Log in to reply ] |
|
Andrew Poole |
Message #93135, posted by andypoole at 17:13, 19/8/2004, in reply to message #93134 |
Posts: 5558
|
aww It was the first though ;) |
|
[ Log in to reply ] |
|
Richard Goodwin |
Message #93136, posted by rich at 17:22, 19/8/2004, in reply to message #93135 |
Dictator for life
Posts: 6828
|
getting further down the list though... |
|
[ Log in to reply ] |
|
Andrew Poole |
Message #93137, posted by andypoole at 17:22, 19/8/2004, in reply to message #93136 |
Posts: 5558
|
First post :) |
|
[ Log in to reply ] |
|
Andrew Poole |
Message #93138, posted by andypoole at 17:27, 19/8/2004, in reply to message #93137 |
Posts: 5558
|
Bah, and to think I made your coffee :p |
|
[ Log in to reply ] |
|
Paul Vigay |
Message #93139, posted by pvigay at 00:54, 20/8/2004, in reply to message #93138 |
Posts: 200
|
Wooo - well, it looks like DNS has propagated as far as this little corner of the web (Demon) Welcome back! :) |
|
[ Log in to reply ] |
|
Phil Mellor |
Message #93140, posted by monkeyson2 at 10:19, 20/8/2004, in reply to message #93139 |
Please don't let them make me be a monkey butler
Posts: 12380
|
Bonza! Nice one Rich for getting TIB back online. :) |
|
[ Log in to reply ] |
|
Andrew |
Message #93141, posted by andrew at 12:30, 20/8/2004, in reply to message #93140 |
Handbag Boi
Posts: 3439
|
Is AcornArcade and its subdomains still down? |
|
[ Log in to reply ] |
|
Richard Goodwin |
Message #93142, posted by rich at 12:33, 20/8/2004, in reply to message #93141 |
Dictator for life
Posts: 6828
|
That domain is owned by Jason Tribbeck, so when I came to investigate why this hadn't updated, I found DNS was still being hosted on an old ArgoNet server (because neither of us had gotten round to updating it!). A quick 'phone call this morning sorted that out, but give it a bit of time to propagate. The acornarcade.co.uk ones should work though. |
|
[ Log in to reply ] |
|
Jason Tribbeck |
Message #93143, posted by tribbles at 14:43, 20/8/2004, in reply to message #93142 |
Captain Helix
Posts: 929
|
And annoyingly there isn't a notice about the fact that I paid for the domain name registration on the Acorn Arcade web site (except in an interview with me)... :) |
|
[ Log in to reply ] |
|
Andrew |
Message #93144, posted by andrew at 15:39, 20/8/2004, in reply to message #93143 |
Handbag Boi
Posts: 3439
|
Unfortunately the Exile subdomain is out of date on that. I don't know about the other subdomains. |
|
[ Log in to reply ] |
|
Andrew |
Message #93145, posted by andrew at 15:42, 20/8/2004, in reply to message #93144 |
Handbag Boi
Posts: 3439
|
And FTP access is down to both as said. |
|
[ Log in to reply ] |
|
Richard Goodwin |
Message #93146, posted by rich at 17:18, 20/8/2004, in reply to message #93145 |
Dictator for life
Posts: 6828
|
The Exile subdomain was taken from the backup taken three or four days before the domain was hacked! So long as you're looking at 213.161.75.250, that's as up to date as I've got. And FTP *is* up, if your DNS is pointing to the right server. |
|
[ Log in to reply ] |
|
Andrew |
Message #93147, posted by andrew at 01:14, 21/8/2004, in reply to message #93146 |
Handbag Boi
Posts: 3439
|
It couldn't have been as the last page I uploaded was in March but the one I'm looking at on exile.acornarcade.co.uk is January. The FTP I'm using is just exile.acornarcade.co.uk which just sticks on 'negotiating'. The ANT Suite FTP tool doesn't take numbers from the user just the text form. |
|
[ Log in to reply ] |
|
JMB |
Message #93148, posted by jmb at 03:21, 21/8/2004, in reply to message #93147 |
Member
Posts: 467
|
Why not just use FTPc? |
|
[ Log in to reply ] |
|
Richard Goodwin |
Message #93149, posted by rich at 06:16, 21/8/2004, in reply to message #93148 |
Dictator for life
Posts: 6828
|
Also, you need to be using an FTP client that has a passive mode. Trust me, if the Exile site wasn't a backup of the live site, you wouldn't *have* a front page. ;) |
|
[ Log in to reply ] |
|
Mark Scholes |
Message #93150, posted by mavhc at 10:56, 21/8/2004, in reply to message #93149 |
Member
Posts: 660
|
Are you really sure you can't put IP addresses in AntFTP? that's insane. Can't use FTPc because iconbar is down so can't download it. |
|
[ Log in to reply ] |
|
Andrew |
Message #93151, posted by andrew at 12:28, 21/8/2004, in reply to message #93150 |
Handbag Boi
Posts: 3439
|
FTPc? Because the ANT Suite it normally perfectly fine that's why. I don't know what a passive mode. All I know is that it's not accessing anything numbers or otherwise as it did before the crash. |
|
[ Log in to reply ] |
|
Jeffrey Lee |
Message #93152, posted by Phlamethrower at 13:22, 21/8/2004, in reply to message #93151 |
Hot Hot Hot Hot Hot Hot Hot Hot Hot Hot Hot Hot Hot stuff
Posts: 15100
|
Hurrah! |
|
[ Log in to reply ] |
|
Ian Cook |
Message #93153, posted by ilcook at 10:49, 22/8/2004, in reply to message #93152 |
Resident idiot
Posts: 1077
|
Very happy for it to be back |
|
[ Log in to reply ] |
|
Kevin Wells |
Message #93154, posted by Revin Kevin at 22:48, 22/8/2004, in reply to message #93153 |
Member
Posts: 644
|
Welcome back missed the site. |
|
[ Log in to reply ] |
|
|