Archive for September, 2003

Testing New Email Anti-Virus Solution: We are

Wednesday, September 24th, 2003

Wed Sep 24 15:04:27 PDT 2003 -- Testing New Email Anti-Virus Solution: We are currently testing a new anti-virus solution on custmx.sonic.net, our dedicated backup MX servers for customers with their own mail servers. If the test goes well we will deploy the system on both our inbound and ...

Time.sonic.net, our public NTP server, has…

Tuesday, September 23rd, 2003

Tue Sep 23 15:57:18 PDT 2003 -- Time.sonic.net, our public NTP server, has been migrated to a new IP address, 209.204.159.18. -Kelsey

Sendmail Buffer Overflow: There has been yet…

Wednesday, September 17th, 2003

Wed Sep 17 19:24:19 PDT 2003 -- Sendmail Buffer Overflow: There has been yet another buffer overflow announced in sendmail. We've just completed upgrading sendmail on all of our hosts and urge customers using this standard unix MTA to patch their installations before an exploit is available. Customers running ...

DNS server changes: As some of you may be…

Wednesday, September 17th, 2003

Wed Sep 17 17:01:04 PDT 2003 -- DNS server changes: As some of you may be aware, VeriSign, who controls the .net and .com DNS registries, recently changed the behavior of their gTLD servers to capture web traffic destined to non-existent domains with their own 'sitefinder' portal. Sonic.net, and ...

Altnews.sonic.net service issues: The out…

Wednesday, September 17th, 2003

Wed Sep 17 16:24:36 PDT 2003 -- Altnews.sonic.net service issues: The out sourced NNRP provider that services altnews.sonic.net is currently reporting authentication problems for connections from our network. We've brought on another out sourced NNRP provider available at newscene.sonic.net in response to altnews' (webusenet/ispnews) ongoing stability problems. For more ...

OpenSSH exploit in the wild.

Tuesday, September 16th, 2003

Tue Sep 16 11:56:09 PDT 2003 -- OpenSSH exploit in the wild. There are reports of a worm in the wild that exploits a bug in OpenSSH. Folks running OpenSSH are strongly encouraged to upgrade to the very latest version, and examine their machine for intrusion problems. All ...

custsql.sonic.net (aka timber) public MySQL…

Sunday, September 14th, 2003

Sun Sep 14 12:18:47 PDT 2003 -- custsql.sonic.net (aka timber) public MySQL server is currently offline due to some kind of hardware failure. We'll be swapping the hardware out with spares and should have services restored shortly. -Kelsey UPDATE Sun Sep 14 13:04:06 PDT 2003 -- The MySQL ...

Extended maintenance report from carrier.

Friday, September 12th, 2003

Fri Sep 12 08:11:32 PDT 2003 -- Extended maintenance report from carrier. One of our providers has been performing maintenance that has lasted longer than their expect window. Our redundant connections via multiple carriers and transport providers has insulated us from a service affecting situation. -Operations

New Microsoft RPC vulnerability.

Wednesday, September 10th, 2003

Wed Sep 10 18:10:10 PDT 2003 -- New Microsoft RPC vulnerability. Microsoft announced today a new vulnerability in Windows NT, 2000, XP and others that is very similar to the security flaw that the Blaster worm used. Patches for this new flaw have been released and are available at ...

Web Server Instability: Over the past few…

Wednesday, September 10th, 2003

Wed Sep 10 14:11:04 PDT 2003 -- Web Server Instability: Over the past few days we have been seeing some instability in our webserver cluster that has been resulting in periodic slow downs or refused connections. We have disabled a suspect user cgi that appears to have been accidentally ...