ISPCP seems to freeze apache2 Debian Lenny

[robbo007]

Hello all,

I have my server all up and running on Debian (lenny) and I have created a few domains with web sites. All working fine....but...

I have noticed sometimes the server does not respond to any http requests.

I connect via SSH to the server and try and do an /etc/init.d/apache restart and it takes a while to respond then it errors out saying can't restart because the port is in use.

In the end I have to reboot to get the http requests working again.

Can anyone put me on the right track to look at the logs and see what is going on? I'm not behind any firewall and am a little worried its a flood o attack that seems to knock out my apache??

Thanks,

Rob

[BeNe]

Is it a RootServer or a vServer ?
What says top ?

Greez BeNe

[robbo007]

Hey,

Guess its a root server. It only has a public IP address and I use it as well as ISPCP as a DNS/Bind server for the virtual domains that I host on the same server.

I'll run top next time i happens. In the meantime what log files and I go over to see if there is anything strange? I've noticed loads of FTP attacks but this is normal. I've installed fail2ban as well. Do I need to harden the apache2 config too? Its using the "out of the box" setup.

Rob

[BeNe]

MGRT or Munin could be also helpfull to see what and why it happend.
Fail2ban is ok. If you want to protect your Apache use ModSecurity and for the SQL-Server use GreenSQL.

Greez BeNe

[robbo007]

Ok great thanks. I'll check out those apps. Are there any "gotyas" that I should know about when installing on the same server as ISPCP? Its not going to screw my config or anything like that?

Thanks,
Rob