Hello, First of all, thank you for this great software (And sorry for my english, i'm french). Since a few days, for no apparent reason, my server crashes one to three times a day. I don't find anything special in the logs, except that it seems to happen after the "server.sh" cron. I don't know how to identify the origin of the problem, thank you for your help ! Code: ##### SERVER ##### IP-address (as per hostname): ***.***.***.*** [WARN] could not determine server's ip address by ifconfig [INFO] OS version is Debian GNU/Linux 11 (bullseye) [INFO] uptime: 08:57:36 up 28 min, 1 user, load average: 0,46, 0,39, 0,29 [INFO] memory: total utilisé libre partagé tamp/cache disponible Mem: 15Gi 4,7Gi 8,3Gi 43Mi 2,3Gi 10Gi Partition d'échange: 0B 0B 0B [INFO] ISPConfig is installed. ##### ISPCONFIG ##### ISPConfig version is 3.2.11p2 ##### VERSION CHECK ##### [INFO] php (cli) version is 7.4.33 [INFO] php-cgi (used for cgi php in default vhost!) is version 7.4.33 ##### PORT CHECK ##### [WARN] Port 8080 (ISPConfig) seems NOT to be listening [WARN] Port 143 (IMAP server) seems NOT to be listening [WARN] Port 993 (IMAP server SSL) seems NOT to be listening [WARN] Port 110 (POP3 server) seems NOT to be listening [WARN] Port 995 (POP3 server SSL) seems NOT to be listening [WARN] Port 465 (SMTP server SSL) seems NOT to be listening [WARN] Port 22 (SSH server) seems NOT to be listening ##### MAIL SERVER CHECK ##### [WARN] I found no "submission" entry in your postfix master.cf [INFO] this is not critical, but if you want to offer port 587 for smtp connections you have to ...skipping 1 line [WARN] I found no "smtps" entry in your postfix master.cf [INFO] this is not critical, but if you want to offer SSL for smtp (not TLS) connections you hav e to enable this. ##### RUNNING SERVER PROCESSES ##### [INFO] I found the following web server(s): Apache 2 (PID 6133) [INFO] I found the following mail server(s): Postfix (PID 1246) [WARN] I could not determine which pop3 server is running. [WARN] I could not determine which imap server is running. [INFO] I found the following ftp server(s): PureFTP (PID 1379) ##### LISTENING PORTS ##### (seulement () Adresse (distante) [localhost]:10027 (1246/master) [localhost]:11211 (761/memcached) [anywhere]:21 (1379/pure-ftpd) ***.***.***.***:53 (763/named) ***.***.***.***:53 (763/named) ***.***.***.***:53 (763/named) ***.***.***.***:53 (763/named) ***.***.***.***:53 (763/named) ***.***.***.***:53 (763/named) ***.***.***.***:53 (763/named) ***.***.***.***:53 (763/named) [localhost]:53 (763/named) [localhost]:53 (763/named) [localhost]:53 (763/named) [localhost]:53 (763/named) [localhost]:53 (763/named) [localhost]:53 (763/named) [localhost]:53 (763/named) [localhost]:53 (763/named) [anywhere]:25 (1246/master) ...skipping 1 line [anywhere]:7655 (836/sshd:) [localhost]:10024 (949/amavisd-new) [localhost]:9000 (767/php-fpm:) [localhost]:10025 (1246/master) *:*:*:*::*:3306 (1043/mariadbd) *:*:*:*::*:80 (6133/apache2) *:*:*:*::*:8081 (6133/apache2) *:*:*:*::*:21 (1379/pure-ftpd) *:*:*:*::*:53 (763/named) *:*:*:*::*:53 (763/named) *:*:*:*::*:53 (763/named) *:*:*:*::*:53 (763/named) *:*:*:*::*:53 (763/named) *:*:*:*::*:53 (763/named) *:*:*:*::*:53 (763/named) *:*:*:*::*:53 (763/named) *:*:*:*::*f816:3eff:fe45:53 (763/named) *:*:*:*::*f816:3eff:fe45:53 (763/named) *:*:*:*::*f816:3eff:fe45:53 (763/named) *:*:*:*::*f816:3eff:fe45:53 (763/named) *:*:*:*::*f816:3eff:fe45:53 (763/named) *:*:*:*::*f816:3eff:fe45:53 (763/named) *:*:*:*::*f816:3eff:fe45:53 (763/named) *:*:*:*::*f816:3eff:fe45:53 (763/named) *:*:*:*::*:25 (1246/master) *:*:*:*::*:953 (763/named) *:*:*:*::*:443 (6133/apache2) *:*:*:*::*:4862 (6133/apache2) *:*:*:*::*:7655 (836/sshd:) *:*:*:*::*:10024 (949/amavisd-new) ##### IPTABLES ##### Chain INPUT (policy DROP) target prot opt source destination ACCEPT all -- [anywhere]/0 [anywhere]/0 state RELATED,ESTABLISHED ACCEPT all -- [anywhere]/0 [anywhere]/0 ACCEPT icmp -- [anywhere]/0 [anywhere]/0 ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:7655 ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:53 ACCEPT udp -- [anywhere]/0 [anywhere]/0 udp dpt:53 ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:80 ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:443 ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:4862 ACCEPT icmp -- ***.***.***.*** [anywhere]/0 ACCEPT icmp -- ***.***.***.*** [anywhere]/0 ACCEPT icmp -- ***.***.***.*** [anywhere]/0 ...skipping 1 line ACCEPT icmp -- ***.***.***.***/24 [anywhere]/0 ACCEPT icmp -- ***.***.***.***/24 [anywhere]/0 ACCEPT icmp -- ***.***.***.***/24 [anywhere]/0 ACCEPT icmp -- ***.***.***.*** [anywhere]/0 ACCEPT icmp -- ***.***.***.*** [anywhere]/0 ACCEPT icmp -- ***.***.***.*** [anywhere]/0 ACCEPT icmp -- ***.***.***.*** [anywhere]/0 ACCEPT icmp -- ***.***.***.*** [anywhere]/0 ACCEPT icmp -- ***.***.***.*** [anywhere]/0 ACCEPT icmp -- ***.***.***.*** [anywhere]/0 ACCEPT icmp -- ***.***.***.*** [anywhere]/0 ACCEPT icmp -- ***.***.***.*** [anywhere]/0 ACCEPT icmp -- ***.***.***.***/24 [anywhere]/0 ACCEPT icmp -- ***.***.***.***/24 [anywhere]/0 ACCEPT icmp -- ***.***.***.***/24 [anywhere]/0 ACCEPT icmp -- ***.***.***.***/24 [anywhere]/0 ACCEPT all -- ***.***.***.*** [anywhere]/0 ACCEPT icmp -- ***.***.***.*** [anywhere]/0 ACCEPT icmp -- ***.***.***.*** [anywhere]/0 ACCEPT icmp -- ***.***.***.*** [anywhere]/0 ACCEPT icmp -- ***.***.***.*** [anywhere]/0 ACCEPT icmp -- ***.***.***.*** [anywhere]/0 ACCEPT icmp -- ***.***.***.*** [anywhere]/0 ACCEPT tcp -- ***.***.***.*** [anywhere]/0 tcp dpt:7655 fail2ban-dovecot-pop3imap tcp -- [anywhere]/0 [anywhere]/0 multiport dports 110,995,143, 993 fail2ban-pureftpd tcp -- [anywhere]/0 [anywhere]/0 multiport dports 21 fail2ban-sasl tcp -- [anywhere]/0 [anywhere]/0 multiport dports 25 fail2ban-postfix tcp -- [anywhere]/0 [anywhere]/0 multiport dports 25,465,587 fail2ban-pure-ftpd tcp -- [anywhere]/0 [anywhere]/0 multiport dports 21,20,990,989 fail2ban-ssh tcp -- [anywhere]/0 [anywhere]/0 multiport dports 7655 ACCEPT tcp -- ***.***.***.*** [anywhere]/0 Chain FORWARD (policy DROP) target prot opt source destination Chain OUTPUT (policy DROP) target prot opt source destination ACCEPT all -- [anywhere]/0 [anywhere]/0 state RELATED,ESTABLISHED ACCEPT all -- [anywhere]/0 [anywhere]/0 ACCEPT icmp -- [anywhere]/0 [anywhere]/0 ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:7655 ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:53 ACCEPT udp -- [anywhere]/0 [anywhere]/0 udp dpt:53 ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:80 ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:443 ACCEPT udp -- [anywhere]/0 [anywhere]/0 udp dpt:123 ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:4862 ACCEPT udp -- [anywhere]/0 [anywhere]/0 udp dpts:6100:6200 ...skipping 1 line ACCEPT udp -- [anywhere]/0 ***.***.***.*** udp dpts:6100:6200 ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:465 ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:25 ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:587 Chain fail2ban-dovecot-pop3imap (1 references) target prot opt source destination RETURN all -- [anywhere]/0 [anywhere]/0 Chain fail2ban-postfix (1 references) target prot opt source destination RETURN all -- [anywhere]/0 [anywhere]/0 Chain fail2ban-pure-ftpd (1 references) target prot opt source destination RETURN all -- [anywhere]/0 [anywhere]/0 Chain fail2ban-pureftpd (1 references) target prot opt source destination RETURN all -- [anywhere]/0 [anywhere]/0 Chain fail2ban-sasl (1 references) target prot opt source destination RETURN all -- [anywhere]/0 [anywhere]/0 Chain fail2ban-ssh (1 references) target prot opt source destination RETURN all -- [anywhere]/0 [anywhere]/0 ##### LET'S ENCRYPT ##### [WARN] You have both certbot and acme.sh installed. This can lead to problems. Certbot: /usr/bin/letsencrypt acme.sh: /root/.acme.sh/acme.sh
The server.sh cron runs once a minute, so anything that happens on your system must be right after server.sh. It is quite unlikely that server.sh and your issue are related. Such an issue can not be tracked down easily, the problem can e.g. be a hardware issue, so nothing will show up in the logs then. Is this a physical server or a virtual machine in the cloud?
thank you for your very quick response. It's a VPS. The technicians checked: it is not a hardware problem. According to them, this would come from a planned task.
You can try to comment out the server.sh task in root crontab by adding a # in front of the server.sh line and check if the issue persists. You can not use ISPConfig during that time.
What kind of crash? Is the server turned off? Is server rebooting? How do you detect these crashes? If you can determine the time the crash happens, read all log files that have entries at that time, maybe someting shows up.
@till : Thanks for this suggestion, I will try that tomorrow. @Taleman : The server turns off. When i restart, it works during 8, 9 or 10 hours and turns off again. Since a few days, i read all logs at the crash hour, but i don't see something special (but i'm not an expert).
Good news. It appears that the crashes have stopped since last night after increasing the amount of server RAM (16 Go > 32 Go) ! Thank you for the time you gave me and for the work provided on ISPConfig. Have a good day.
