Sudden issues, i believe is ssl or dns!

SYSTEM INFORMATION
OS type and version Ubuntu Linux 22.04.4
Usermin version 2.102
Virtualmin version 7.20.2
Theme version 21.20.7
Apache version 2.4.52
Package updates All installed packages are up to date

Configuration file /run/systemd/system/netplan-ovs-cleanup.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 10 19:24:27 ns2.tld.com systemd[1]: /lib/systemd/system/clamav-daemon.service:12: Standard output type syslog is obsolete, automatically updating to journal. Please update your unit file, and consider removing the setting altogether

I am not sure if this is the error that cause my websites to be off. I don’t see any other issues, is just that my websites are not online anymore, everything looks fine.
I’ve noticed one of my partition were full, no space left, you think it could be the culprit?

Those errors are irrelevant to your websites.

You need to figure out what problem you’re trying to solve. SSL (TLS) and DNS problems look nothing alike and you can check them specifically.

A DNS problem would be getting the wrong IP or no IP when you request the A record for your domain, and is probably the simplest thing in the world to check. So, check that host <yourdomain.tld> or dig <yourdomain.tld from some system other than your Virtualmin server and then you can stop guessing about whether it’s DNS or not.

It could be. Whether it is depends on your websites. Do they need to write in order to load? Is the partition that is full one of the ones your website needs? (/home and /var maybe, or / if everything is in one partition.)

I have server for more then 6 years, encountered many numbers of issues, but i cannot see one now. Maybe my isp has issues? I changed to a backup server, i restored everything there with another isp, and there everything is fine.
I tried to find errors relevant to my server, i mess up yesterday with samba server, but i don’t think that was the issue, i uninstalled it.
The websites crashed without any intervention in the server.
The server have internet, the preview option works fine…

Don’t do random things. You need to figure out what is wrong before you try to fix it.

This is so fack’d up.
I’ve reinstalled fresh main server virtualmin and ubuntu, restored back every single website manually, on main isp.
Initially did not worked any website, i restarted and shut off the second server with second isp.
All websites worked, except FQDN that was used on main server and for all websites as a nameserver.
Then i switched my wifi isp from main isp to second one one ,but on my laptop, not on my server and my fqdn work’d like that.
Then i tried the first wifi on my laptop on 2.4g network and everything worked, then back on my 5g and seems like my issues have been gone.
I remind you, i also tried 4g on my phone, and had same symptoms, all websites manifested same.
Now everything looks normal, i am still clueless what happened.
It is not from cookies, i used also 4g phone internet, and tested websites and went down, i also use external websites app monitor and got notifications when they went up or down.
It is beyond my comprehension, but i concluded only 2 possibilities:
1.My main isp router’s fault
2.Or ISP itself
Or another issues that could be as a coincidence:
3. SSL certificates errors from Let’s Encrypt and magically worked again during my trial and error fixes.

If you are hosting everything in your home, behind your router and the hub can’t be accessed. Usually indeed it’s simply the router.

Concerning SSL even if you don’t have certificate you shall be able to connect to the site. So probably not the problem.

But again behind a residential router a lot can be wrong.

Do you have physical access to the webmin server, login to it and see if it can see the internet first.

Then you need to find where the break is in the network route, or that there is not one.

Once you rule out network provision, then look at the webmin server

@Tactikast mentions some good points. I run at home using pfsense and I have had to learn a lot.

1 Like

Still in case of you would have new problems, Please share pictures of your router’s setting.

I just remember something with mine when long time ago I was also hosting behind my router:

It may happen (Really sorry I’m not sure if it’s the right terms) that the router get “Blind” due to a Zombie process on one of the server controlled remotely by the other server (all of this behind the same router).

If it happen it may reject connections (if i recall correctly, It was long time ago, maybe I’m messing up ).

The solution if I remember (and I’m really not sure) was to unmount the remotely controlled server from the second server (or more simply, shut down everything)

By reading again you said

i restarted and shut off the second server with second isp.

All websites worked

Might the second server had the previous problem.

Still you talked (If I understood) about 2 Servers, 1 Laptop And 2 ISP (!???). Might be good to simplify the workflow :smile:

Thanks to all.
Indeed i think it was my router.
I was excluded this posibility upfront.
I had activated remote control over the internet for my Asus Router, and i think his firewall was blocking my ports to server, but i had it on DMZ, so that why i thought it is not my router’s fault.
I checked logs and i saw brute force attacks straight on my wan.
I experienced 2-3 more cutoffs on my virtualmin server and i rebooted my Asus router and issues where fixed only by that.
I still had connection to internet from server during cutoffs, but i think only 80 and 443 ports where blocked, or dns’s.
For now i have had no issues for last 3 days.
My backup server is on a different ISP and another router, that’s why i had no issues there.
Is either my isp, or those brute attacks straight on my WAN.
If i experience more of those cutoffs, i will check ports to see if my router blocking only certain ports, but if is on DMZ, i don’t think is that the issue.

Could be just a flaky router

This topic was automatically closed 8 days after the last reply. New replies are no longer allowed.