we have a database server MySQL 5.1 on it. Every two days it "stops" responding.
The following happens:
- it doesn't respond to ping
- we can't login with SSH
- we don't get any answer from MySQL
- there is no entry in the error logs! neither from linux neither from MySQL.
- we have already changed to a completely new hardware, we have the same problem, so it's definitely not a hardware problem.
- we do not have any other software installed except a firewall (iptables rule)
- we can restart the server from another server using rsyslog (www.rsyslog.com)(software reset)
Our system parameters and settings: - System-Memory: 12GB - Processor: Intel 7-920 Quadcore - Operating system: Debian 5 (lenny) 64bit - MySQL 5.1.49
The firewall script is below
# Generated Manually *filter :FORWARD ACCEPT [0:0] :INPUT ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :MyChain - [0:0] # -A OUTPUT -o eth0 -j LOG --log-level 7 --log-prefix BANDWIDTH_OUT: -A MyChain -i lo -j ACCEPT -A MyChain -p tcp -m tcp -m state -i eth0 --dport 22 --state NEW -j ACCEPT -A MyChain -p tcp -m tcp -m state -i eth0 --dport 10000 --state NEW -j ACCEPT -A MyChain -p tcp -m tcp -m state -i eth0 --dport 80 --state NEW -j ACCEPT # Allow access to mysql from web1 -A MyChain -p tcp -m tcp -m state -s web1.ip -i eth0 --dport 3306 --state NEW -j ACCEPT # Allow access to mysql from web2 -A MyChain -p tcp -m tcp -m state -s web2.ip -i eth0 --dport 3306 --state NEW -j ACCEPT # Allow access to mysql from web2 -A MyChain -p tcp -m tcp -m state -s web3.ip -i eth0 --dport 3306 --state NEW -j ACCEPT -A MyChain -p icmp --icmp-type 0 -j ACCEPT -A MyChain -p icmp --icmp-type 3 -j ACCEPT -A MyChain -p icmp --icmp-type 11 -j ACCEPT -A MyChain -p icmp --icmp-type 8 -m limit --limit 1/second -j ACCEPT -A INPUT -j MyChain -A FORWARD -j MyChain -A MyChain -m state -i eth0 --state ESTABLISHED,RELATED -j ACCEPT -A MyChain -j REJECT COMMIT # Completed *mangle :FORWARD ACCEPT [0:0] :INPUT ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :PREROUTING ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] COMMIT # Completed *nat :OUTPUT ACCEPT [0:0] :PREROUTING ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] COMMIT # Completed
The script is started after from the /etc/network/interfaces I replaced the real-ip addresses with spaces...
# Loopback device: auto lo iface lo inet loopback # device: eth0 auto eth0 iface eth0 inet static address ---.--.--.--- broadcast ---.--.--.--- netmask ---.--.--.--- gateway ---.--.--.--- # default route to access subnet up route add -net ---.--.--.--- netmask ---.--.--.--- gw ---.--.--.--- eth0 post-up iptables-restoreCould someone help me with this please ? Thanks. Max.
