On 01/12/2011 05:16 PM, Mike Canty wrote:
To all,
I have a server that is having some problems with some "apache"
services.The machine appears to have a runaway process that takes up
just over 20% of the CPU, but this is enough to stop all mail and to a
certain extent network as well.
The problem for me is this machine is at a remote site. When this
process runs away, I cannot connect to the network remotely, to
resolve the issue, I need to get someone internally to log on to the
server itself and kill the process.
When I say "Apache", that is the user listed against the process, so
it must be some form of web service.The command at fault is either
"std" or "s", although I have seen a "perl" command giving issues as
well, but not to the same effect.
Does anyone have any idea what may be causing this?Or what I can do to
rectify?
Not really Qmailtoaster related, but it sounds like you have a web app
that has been compromised. There was a big issue with Roundcube webmail
that allowed this to happen a year or so ago. Might be similar
circumstances.