PDA

View Full Version : need help

CaSHo
06-28-2004, 03:12 AM
Apache is stopped. When I try to START. It says "Starting httpd: [FAILED]" What do I have to do. my web sites and e-mails don't work. What may be the cause of the problem and how can I resolve it.
Kind Regards
Icheb
06-28-2004, 03:23 AM
Can you perhaps give some more information about what OS/distro, which versions of Apache & PHP you're using; some log entry's perhaps ?

If you try to start it, and than give the command 'tail /var/log/messages' what is the output ?
Or perhaps cd into /var/log/httpd/ and check the output of those files (although there shouldn't be any entries, if i remember correctly).

BTW: Your e-mails don't work ?
what is the response of service exim status ?
If it's running you're able to receive mails, possibly the pop daemon has decided to kill itsself. But normally this wouldn't happen when there are Apache problems....
CaSHo
06-28-2004, 04:14 AM
Icheb,
Do you have a msn or icq ?
Icheb
06-28-2004, 04:31 AM
Originally posted by CaSHo
Icheb,
Do you have a msn or icq ?

Yeah, but note, i'm currently also trying to work ;)
But i'll come online on my private MSN (please, don't abuse):
<yeah, this is edited>{removethisandchageto@} hotmail<dot>com

edit: removed MSN address ;)
CaSHo
06-28-2004, 04:36 AM
I have tried whta you told me. But you can understand the output.
Exim doesn't work. Can't be started or restarted. Apache either :(
Icheb
06-28-2004, 05:04 AM
Problem solved ;-)

Log dirs of exim and apache were kinda missing ;)
Restored them with correct chowns from another server.
Has this ever happend before to anyone ?
DirectAdmin Support
06-28-2004, 10:03 AM
Hello,

I've seen hackers remove /var/log to hide their tracks. Have a look in /tmp for any code that shouldn't be there in case your system was comprimised.

John
Icheb
06-28-2004, 10:24 AM
Originally posted by DirectAdmin Support
Hello,

I've seen hackers remove /var/log to hide their tracks. Have a look in /tmp for any code that shouldn't be there in case your system was comprimised.

John

Did a quick check of the /tmp and the process list before i said i was done. Nothing unusual...
Note: It happend after the topic starter suspended one or more users.