Re: [bitfolk] Interesting email to "root" - possible exploit…

Top Page

Reply to this message
Author: Andy Smith
Date:  
Subject: Re: [bitfolk] Interesting email to "root" - possible exploitattempt (failed hopefully)
bitfolk.com); SAEximRunCond expanded to false
Subject: [bitfolk] Additional monitoring for backups
X-BeenThere: users@???
Reply-To: users@???
List-Id: Users of BitFolk hosting <users.lists.bitfolk.com>
List-Unsubscribe: <https://lists.bitfolk.com/mailman/options/users>,
    <mailto:users-request@lists.bitfolk.com?subject=unsubscribe>
List-Archive: <http://lists.bitfolk.com/lurker/list/users.html>
List-Post: <mailto:users@lists.bitfolk.com>
List-Help: <mailto:users-request@lists.bitfolk.com?subject=help>
List-Subscribe: <https://lists.bitfolk.com/mailman/listinfo/users>,
    <mailto:users-request@lists.bitfolk.com?subject=subscribe>
X-List-Received-Date: Tue, 31 Jan 2012 16:03:15 -0000



--===============0001861887==
Content-Type: multipart/signed; micalg=pgp-ripemd160;
    protocol="application/pgp-signature"; boundary="Qtzb1h6tVL0ohdDu"
Content-Disposition: inline



--Qtzb1h6tVL0ohdDu
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi,

If you don't currently take advantage of BitFolk's free backups
service then the following doesn't apply to you.

Two extra checks were added last night on the backups that BitFolk
manages for you.

All this info is going to go on a page I will create at
https://tools.bitfolk.com/wiki/Backups but you need to know it now.

- Backup age

This checks that your most recent successful=B9 backup is not too
old. The warning threshold is 2.5x the appropriate interval. So if your
backups happen every 4 hours, you'll receive an alert if they are
ever older than 10 hours. If your backups happen daily then
you'll receive an alert if they are ever more than 60 hours old.
And so on.

This alerting replaces the manual process of me being sent
excerpts of log files that say a customer's backups are failing,
then opening a support ticket with the customer to make them
aware.

If you receive this alert then your backups are definitely not
happening.

The alert looks like this:

    From: nagios@???
    Subject: ** PROBLEM alert - backup0.bitfolk.com/Backup age youraccount =
is CRITICAL **
   =20
    ***** Nagios  *****
   =20
    Notification Type: PROBLEM
   =20
    Service: Backup age youraccount
    Host: backup0.bitfolk.com
    Address: 85.119.80.240
    State: CRITICAL


    Date/Time: Tue Jan 31 12:37:38 UTC 2012
   =20
    Additional Info:
   =20
    FILE_AGE CRITICAL: /data/backup/rsnapshot.6-7-4-6/hourly.0/85.119.82.12=
1 is 16842912 seconds old and 4096 bytes


(Those who haven't had a successful backup run in the last couple
of days will have a huge number of seconds listed there because
the backup system was only modified to record last successful
contact recently)

- Backup space us