04-Aug-2005

Maintenance only
Zipped all operator logs of July as on the webdisk (for checking off-line) into OPENJUL2005.ZIP and removed them, and that freed some space on the webdisk. Removed the originals on SYS$MANAGER and that freed some space on SYS$SYSDEVICE. Removed the 8.2 ISO, which freed a even bigger amount.
Cycled APACHE logfiles, thanks to ITRC that gave a hint, already known but never practiced. Zipped the old logs and moved them over to PC for analysis. Jugh. Deleted them as well, freeing even more soace on the system disk.
Scanned all logfiles on SYS$SYSDEVICE, found nothing weird. O yes, some new attempts to dump things on the system (failed), break it down (failed) or get in unauthorized (failed). Indeed, failed all. Did some-one expected otherwise? (I enjoyed my holiday!)
Something more to scan:
The SMTP service logfile contains entries of attempts to reach non-existing users. Ok, might be valid (typos are easily made) but it can be a symptom of illegal access as well. So these need to be scanned as well.
Same for the APACHE access_log file. Not just scanning, it needs to be cycled as well, and this is so easy:
$ @sys$manager:apache$config flush ! to write buffers to disk
$ @sys$manager:apache$congif new ! to create new logfiles
Next, analyze access_log for valid accesses and attempted abuse. So need another scanner, and a log analyzer on VMS (NO JAVA stuff, please). Write my own one, to filter abuse, perhaps?
Pivot trouble:
Looked into this. Found that the calendar on the testpage isn't completed, and viewed the source:

That ends, in the middle of the calendar, because the HTML file just ends:

And statistics crashes, cannot find a files or directory, but that's minor. Blogs should work.
Reminder:
Need a few 9Gb disks, know where to get them but have to tickle the person to think about it. He might be on holiday now.