We have temporarily stopped the NC018 web server in an attempt to fight this attack.
We have temporarily stopped the NC018 web server in an attempt to fight this attack.
As the title says, it appears that server NC018 is again the target of an attack. We are working to address the issue as quickly as possible.
Server NC018 suffered a denial of service attack beginning at approximately 07:40 on 23 August, UTC. This continued until the server succumbed under the load at about 12:40. This affected all functions of the server: websites, sending and receiving emails, databases, etc.
Unfortunately we did not respond to this situation in a timely manner. This was partially because automated monitoring of server functions had been turned off due to an increasing number of false alarms from the system.
Once the server was rebooted at 13:47 and the attack mitigated, the server then still had a backlog of several thousand emails to process. This took several hours, with the queue being cleared by about 18:35. While emails were “missing” for several hours, no emails should have been lost; they were just delivered several hours late.
We sincerely apologise for the disruption caused by this event. We will reinstate monitoring and the associated actions that are taken when monitoring alarms go off.
We will shortly be responding to all emails and phone messages regarding this incident. If you have any further questions about this event, please contact us.
Server NC018 appears to be suffering the effects of a denial of service attack. We are working to address the issue.
Over the last few days we have noticed that email to addresses on the zamtel.zm domain have been delayed. In fact, at this point it appears that the Zamtel mail server is down completely.
We also continue to see, as we have for a year or two or more, email to addresses on the iwayafrica.com delayed considerably, usually for as many as several days. This is due to issues with their mail server.
Our apologies for our silence on this issue. Work continues on this migration, but not at the pace at which it was happening a few weeks ago. We will, when we are finally in a position to finalise the migration, post an update here.
Thank-you for your patience and understanding.
Contrary to the last update on this topic, spam defences on server NC018 are indeed active most of the time. We monitor the server load and turn them off if the load gets too high. However, most of the time the spam defences are up 24 hours a day, 7 days a week.
We have disabled the spam defences on server NC018. We re-enabled them over the weekend as server loads are down over the weekends.
We have re-enabled the most effective spam defences on server NC018.
The migration stalled on Sunday due to complications caused by differences in the way the new control panel hosts websites. The control panel on the new server is the same control panel we have been using on the old server, but there are significant differences between the new and the old versions.
The result is that we have to check every single website manually to ensure that they’re all working before we can proceed with the email migration. We have been working on this this week, but it’s going to take a considerable amount of time.
Thank-you again for your patience.
Systems at a Glance:
| Loc. | System | Status | Ping |
|---|---|---|---|
| NC023 | Internal | Up? | |
| NC028 | Internal | Up? | |
| NC031 | Internal | Up? | |
| NC033 | Operational | Up? | |
| NC034 | Internal | Up? | |
| NC035 | Operational | Up? | |
| NC036 | Operational | Up? | |
| NC040 | Internal | Up? | |
| NC041 | Operational | Up? | |
| NC042 | Operational | Up? |
Subscriptions:
Search:
Recent Posts:
Archives:
Categories:
Links
Tags:
Resources:
On NinerNet: