Jump to content

Stan

Webmaster
  • Posts

    4,981
  • Joined

  • Last visited

  • Days Won

    26

Posts posted by Stan

  1. Maintenance is finished

    - Updated IPB to latest version

    - Updated tutorials to latest version

    - Cleaned IPB installation on FTP to make sure theres no file added by the hacker

    - Added IP Content to integrate the homepage to the forum

    - Added queued items hook for easier administration

  2. Dakota it's not coming from IPB, the mails are send out from the user www-data. This makes www-data@srv1.ictwereld which is quite strange because this user has not even right to login.

    My guess is they uploaded a file and got that file to auto-run the second issue is...i can't fine that file anywhere.

    However, a few hours after I disabled the main site and removed two websites from the server the queue began fill slower then first and then it stopped, now the thing I am currently wondering about it....whas it that? Or did the attack just end?

    But i got a mail tonight...

    Warning: The file '/usr/sbin/unhide' exists on the system, but it is not present
    in the rkhunter.dat file.
    Warning: The file '/usr/sbin/unhide-linux26' exists on the system, but it is not
    present in the rkhunter.dat file.
    Warning: Suspicious file types found in /dev:
    /dev/shm/7gbhujb54g8z9hu43jre8: data

    One or more warnings have been found while checking the system.
    Please check the log file (/var/log/rkhunter.log)

  3. Update: Wrong reason, issue still persistent

    After removing 700k emails in queue and checking back 10minute later i found out 32k new emails where added to the queue

    New registrations will be shutdown until resolved since I took the mailserver down

  4. Update:

    I informed the provider of the possible reason this happened. I am still checking the system to close every psosible way they came in. At this time i was able to stop delivery of 700000 emails by cutting the connection.

    As soon we exactly know what has happened, full details will be posted

  5. We are currently investigating an attack on our server. We got complaints of several people that have never heard of us or our site and from our ISP.

    Failure to resolve this issue from our side will result in a shutdown of Emergency-planet by our ISP. Results of the investigation will be forwarded to American authorities.

    More details will be released soon. At this time we can guarantee no email addresses where stolen as we only got used to send out bulk spam.

  6. We had to do unscheduled maintenance on the board from 8AM CET to 10AM CET this morning. We are back online and all components have been updated to the new versions.

    Sorry for the inconvenience

    Change-log:

    • Updated to the forum to 3.3.1
    • Updated Tutorials to 1.4.1
    • Pruned "spammers"classified members
    • Cleared the banned members list

    To do

    • Make a new header
    • Remake the Terms of Service since it got killed on an update
    • Clean the forum
    • Search for a co webmaster? :P

  7. Hello,

    I would like to ask everyone to take 10 minutes of their time to fill in a survey about the Emergency series.

    About 14 years ago, on Oct 5th, 1998, the first episode of the famous EMERGENCY game series was released. Many other versions and offsets followed, up to EMERGENCY 2012, the latest EMERGENCY game.

    In celebration of this anniversary and the case that the last release is already two years ago, we decided to push things forward. In cooperation with the biggest german emergency board - Emergency Fanforum - we want to ask you some questions. What wishes do you have? Which features do you want? What did you like in recent EMERGENCY games?

    After we have evaluated this survey, we will send the results to Quadriga Games. Our main target is to gather all your wishes and to show the developers what the demands of the community are. We also want to show how concerned we still are about EMERGENCY.

    Your Emergency Newstime

    Click here to open the survey

    Kind regards,

    Stan

    P.S: Did you fill in the survey? Feel free to let us know by replying and letting us know what you think of the survey

  8. Thanks for reporting the issue. I will have a look right away but as Dakoto is stating, might be a simple permissions issie.

    EDIT:

    Can you confirm it still is NOT working because I checked the settings and even tested it with a test account and everything was just fine.

    Regards,

    Stan

×
×
  • Create New...