January 28, 2004

Look, everyone, it's snowing

Hello Wednesday. Today we intend to be:

  • Getting bloody POP3 back, which is being resistant to doing the working thing for some reason
  • Putting SpamAssassin back, with proper per-user configs this time
  • Putting MySQL back
  • Getting Perl and MoveableType happy

Several people have reported problems with PHP - this is because the new configuration no longer supports register_globals because it can allow whacking great security flaws if you're sloppy with it. It's recommended that you use the superglobals instead.

Several people have also been shy about mailing problems or questions to us - don't be! While we're polishing stuff off, this is the best time to tell us, whatever it is. We now recommend you mail us through the admin list.

Posted by Yoz at 02:04 PM | Comments (18)

January 27, 2004

Slight mail problems

Outgoing mail seems to have been blocked for some reason - what this means is that if you try and send mail using SquirrelMail or Pine, it probably won't have been delivered yet. However, Dan's just kicked it and it seems to be going okay now, but it'll take a while to clear.


Posted by Yoz at 02:16 PM | Comments (21)

1pm update

  • The queued mail on cheese is now pouring happily over to butter. (Note that there may still be mail queued on servers outside of J-colo) Amongst the mail we're seeing a ton of that new email virus that's speading like mad - be careful out there, people! Make sure your virus checker is up to date!
  • POP3 is still down at the moment. FTP was down, is now up. However, we're thinking about switching to their secure equivalents. (Ideally, we don't want any login passwords going through unsecured channels, and all the decent clients should support secure connections by now. We're going to move Squirrelmail onto SSL too.) If you have any major reasons for not wanting to use the secured versions (which will need minor changes to your current mail configuration, probably) then please let us know soon as poss.
  • Ooh, Apache's so nice and speedy now.
Posted by Yoz at 12:58 PM | Comments (270)

Don't touch that dial

Okay, I'm sending out passwords. NOTE: Some people may be texting my old mobile number. Don't bother, I won't get them. However, there's a recorded message on my old number that gives you my new one. (I changed my number about a month ago. If you have a number older than that, it's wrong)

Mail is now flowing happily into butter. I've turned off redirects, so have a last check of your external box in an hour or so and it shouldn't get any more. However, it'll take a while for all the queued mail to reach butter - up to a day for everything that's queued up at various parts of the internet to filter through. Anything sent now should go straight through, though.

Dan is working on getting POP3 and IMAP access working happily.

Posted by Yoz at 11:17 AM | Comments (542)

... and we're back!

Current status: Box is up, ssh is up, Apache is up, Squirrelmail is up (which means IMAP should be up too) but POP3 is down - we'll fix that.


I'm now going to start texting out passwords. If you haven't got yours within the next hour, tell me, supplying your username and a mobile number. Once I've conferred with the others I'll also turn off mail redirection (though some mail will be going straight to butter already)


NOTE: If you haven't done so yet, please read the blog entry below this one - it's important.

Posted by Yoz at 10:45 AM | Comments (15)

T-6 and looking good

After a day when I thought I'd never be allowed out of my car, things are looking up! Thanks to Mr Cronin and a few very generous donations, we have a new butter, and it rocks. It's a 2.4GHz Pentium 4 (HyperThreading, noch) with a gig of RAM in a bright orange 1U rackmount case with serious ventilation - more than capable of handling twice J-Colo's current load. Dan and Richard spent the evening giving it a new Linux install and moving our data over. Everything is currently on track for putting the machine back on the net at around 10 AM.

However, things you should know:



  1. Your old passwords will not work. They've all been reset to random ones, just in case any of the old ones were stolen. I'll be sending them out by SMS when the box comes up. If you don't get yours, nag me and include a number to call or SMS you.

  2. If you change your password, make it a good one. Here's a good guide to choosing and using a password. Obviously, just changing it back to what it was before would be really bad.

  3. Not everything will be working immediately. As I said before, mail is top priority, then basic web service. More complex stuff, such as mailing lists, may have to wait a few of days. However, if you find something broken that used to work before, let me know anyway - just in case.

  4. Check your stuff. We think that all the data is okay and nothing's been changed or broken, but we can't be sure.

  5. Try to make sure your web scripts are secure. It's very possible that butter was hacked through an insecure CGI or PHP script. The topic of code security is too complicated to go into here, but neither the code you write yourself nor the popular script downloads are guaranteed. If in doubt, get in touch.

Please keep an eye on this blog, just in case; we're not quite done yet...

Posted by Yoz at 04:07 AM | Comments (27)

January 26, 2004

4pm update

Butter is now in the back of my car and the three of us (Dan, Richard and I) will be up most of tonight rebuilding it. What we're hoping to do is replace it with an entirely new machine - we're still finalising that. Once that's done, Richard should be taking it back to Mailbox tomorrow morning, and it should be on the net again by 10AM. That's the plan, anyway.

Also want to say a big THANK YOU to everyone who's been in touch with offers of help or just sympathy - it means a lot to us. We're hoping that once this is over we'll have a much stronger J-Colo for everyone. (A big shout, in particular, to James Cronin of The Flirble Organisation, who stayed up well past his bedtime helping us sort out the mail situation.)

Posted by Yoz at 04:08 PM | Comments (136)

January 25, 2004

J-Colo Operations Alert (25/01/04)

At time of writing, butter.j-colo.net (the main J-Colo box) is offline for maintenance. Earlier today a major security breach was detected that seriously compromised the machine. (Basically, we've been hacked.) In order to resume service, we need to do some serious offline maintenance work.

As far as we can tell, all our data is fine, plus we have backups of all mail and websites. We are hoping to have butter operational again, to some degree, around noon on Tuesday (this may change depending on circumstances). However, service will probably be spotty for the next week - we hope to have everything back to normal soon after that. Our top priority is giving everyone access to their email. Websites may have to wait for a little while; however, we may be able to arrange emergency hosting for vital sites.

Please be assured that we're doing everything we can to fix this as quickly as possible - after all, the admins are among those who have vital services running on butter, so it's just as important to us as it is to you.

About your mail

As of now, all your J-colo-hosted mail is being collected on cheese.j-colo.net, which is the secondary mail exchanger. Any mail it has will be delivered to butter as normal when it comes back up. However, it may not have all the mail - some may have arrived on butter before it went down, and some may have bounced back to the sender. (However, none should have been lost in the ether)

If you need to get at email that's currently being collected by cheese, we can set it to redirect to an external email address during the outage. Just let me know.

How you can help

Firstly, we're still trying to work out how this happened. If you've ever given out your J-Colo login details, if you're running any interesting extra programs on your J-colo account, if you're running complex CGI/PHP code that you downloaded from somewhere, please tell us immediately.

Secondly, the admins are trying to fix this while juggling their day jobs and are, as such, incredibly short of spare time. If you are able to get between North London and Fulham (where J-Colo is hosted) during working hours, we want to hear from you. Also, we may need help from anyone with a decent amount of UNIX/Linux experience.

(Also, the maintenance on butter is basically going to include a complete rebuild - so if you already know of something on butter that hasn't been working like it should have been, and we may not know about it, now's a good time to alert us. We hope that, once this is over, J-colo will be running much more smoothly than it has been in a while.)

How to stay in touch

Regular news updates will be posted to the blog at this address: http://status.j-colo.net/

Best way to get in touch is via me: yoz@yoz.com

Posted by Yoz at 11:12 PM | Comments (25)