Ipchains problems
I installed portsentry, logsentry and ipchains the way i did on two other raqs (in a different network).
Sometimes, suddenly i cannot connect to my site. It takes forever to load, FTP is not possible (blocking call received) and logging in with SSH takes 4 minutes.
I have no idea if these things are connected but these are the things i noticed, maybe some wizz here can solve this:
syslogd gives me a avarage 15min cpu load of 0.33 (on a empty raq with 512mb)
The problem is solved when i flush the rules from ipchains.
And i get this message:
[QUOTE]
eb 16 13:35:29 mydomain portsentry[3269]: attackalert: TCP SYN/Normal scan from host: mydomain.nl/xx.xx.xxx.xxx to TCP port: 53
Feb 16 13:35:29 mydomain portsentry[3269]: attackalert: Host xx.xx.xxx.xxx has been blocked via wrappers with string: "ALL: xx.xx.xxx.xxx"
[/]QUOTE
where xx.xx.xxx.xxx is the ip from my ns1.
The strange thing is, that the problem is not always there. When i flush the rules, login, start ipchains again its solved, i can login FTP/SSH and my site is fast as ever.
On this raq i run my own DNS, on the other two with the same rules i don't...
Anyone any ideas ????
