The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Weird problem With DNS and may be something else...

Discussion in 'Security' started by roosevelt, Jul 24, 2006.

  1. roosevelt

    roosevelt Member

    Joined:
    Jul 17, 2006
    Messages:
    13
    Likes Received:
    0
    Trophy Points:
    1
    Weird problem With DNS or may be something else...

    Its been sometime now I am having this problem. It seems to work with different users but I am having this problem over and over again. Each time I contact my server provider, the response is that the website's are fine and working normally.

    Here's the problem. Say the main account is test.com (reseller). And I've hosted boom.com (hosted). When I access test.com I see that boom.com is down. But when I can access boom.com, test.com goes down. Both site's are using ns1.test.com and ns2.test.com. Sometimes both site's work fine, but the loading speed is bit slow and after a while one of them dies again.

    Did anything like this happen before, or what is the possible cause of this problem?
     
    #1 roosevelt, Jul 24, 2006
    Last edited: Jul 24, 2006
  2. kernow

    kernow Well-Known Member

    Joined:
    Jul 23, 2004
    Messages:
    865
    Likes Received:
    9
    Trophy Points:
    18
    cPanel Access Level:
    Root Administrator
  3. roosevelt

    roosevelt Member

    Joined:
    Jul 17, 2006
    Messages:
    13
    Likes Received:
    0
    Trophy Points:
    1
    I just checked the DNS records in that website. Everything seems to be fine and it should perform everything smoothly. Checkout www.rnetwork.org and you'll see its online, but visit http://www.s2nweb.com/ and you'll see its offline. Where both site's are hosted in the same server, using the same shared IP. And using the namesevers rns1.rnetwork.org and rns2.rnetwork.org as well. What in the world is making both site's not work at the same time?
     
  4. bijo

    bijo Well-Known Member

    Joined:
    Aug 21, 2004
    Messages:
    475
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    India
    Hello,

    I can see the two domains from here. But it takes some time to load. Did you check the load and netstat on the server?. May be there are too many connections to the apache. Also you can see the apache status through WHM and see if any of the domains is abused. It can be a dos attack though not sure. Tweaking the apache can help. Size of the apache logs also causing the issue.
     
  5. roosevelt

    roosevelt Member

    Joined:
    Jul 17, 2006
    Messages:
    13
    Likes Received:
    0
    Trophy Points:
    1
    Thanks for your input. I noticed a difference and changed it around. May be it was the reason for all the confusion. When I went to Edit DNS Zone of s2nweb.com I saw that the two NS Records were pointing to ns1.rnetwork.org and ns2.rnetwork.org. Where I've the nameservers rns1.rnetwork.org and rns2.rnetwork.org. To confirm I checked the DNS Zone of rnetwork.org and it was pointing to rns1.rnetwork.org and rns2.network.org. So I edited the NS Records of s2nweb.com to rns1.rnetwork.org and rns2.rnetwork.org. Will it solve the problem, or is it normal to set those values to ns1 and ns2? And speaking of DDOS attack, how exactly the DDOS protection works and where to get it? Also is there anyway to know if the server is already protected from DDOS attacks?
     
  6. bijo

    bijo Well-Known Member

    Joined:
    Aug 21, 2004
    Messages:
    475
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    India
    Hello,

    It seems that, your dns server details are correct now. I have checked whois record of both domain. Both name server are pointed to RNS1.RNETWORK.ORG and RNS2.RNETWORK.ORG now. Also now we can see both of the domain. In the case of dos attack, do a search in the forum with a key word of "install mod_security" and "dos attack".
     
Loading...

Share This Page