I have a VPS that keeps getting shut down because of excessive inbound or outbound traffic. I thought I had a virus on my server and with it shut down so was my email server. So I got a new VPS running clean install of Axigen Mail Server. Migrated all our emails over to it and shortly later it gets shut down again. Keep in mind, the old server I just used Postfix with Roundcube to handle emails. Not an actual email server solution like Axigen.  Here's what my hosting company says:  I've restored the VPS.  Looks like excessive inbound or outbound traffic.  Thu, 05 Feb 2015 21:43:16 -0500  VPS 4273 (192.227.159.235) has 41554 conntrack sessions Thu, 05 Feb 2015 21:43:22 -0500  VPS 4273 (192.227.159.235) has 41566 conntrack sessions Thu, 05 Feb 2015 21:43:26 -0500  Possible DoS VPS 4273 (192.227.159.235): 170862 pps during 5 second interval Thu, 05 Feb 2015 21:43:32 -0500  VPS 4273 (192.227.159.235) has 41499 conntrack sessions Thu, 05 Feb 2015 21:43:32 -0500  Possible DoS VPS 4273 (192.227.159.235): 162520 pps during 5 second interval Thu, 05 Feb 2015 21:43:36 -0500  VPS 4273 (192.227.159.235) has 41507 conntrack sessions Thu, 05 Feb 2015 21:43:48 -0500  VPS 4273 (192.227.159.235) has 56126 conntrack sessions Thu, 05 Feb 2015 21:43:56 -0500  SUSPENDING VPS 4273 (192.227.159.235); it has 56126 conntrack sessions   They said at one time that there was a script on MY server initiating something out there causing the inbound traffic. I can't get to any logs because as soon as they start the VPS it gets automatically shut down from excessive traffic.   ITS THAT BAD.  Anyways, I need a course of action to tell them what I can do to clean it up. If I can get SSH'd into the server, I'll block ALL traffic except SSH and try to figure it out there. But I'm not sure what to look for.  I thought it was an email someone opened on the server. They said something suspicious looking was in one of the email files. But Axigen doesnt have files for email like postfix does. I can't just go to /var/vmail/....to get to them
This is a  about Server Security - Responding to Breach Events (Hacking)   See Also:                  Canonical Version I suspect that one or more of my servers is compromised by a hacker, virus, or other mechanism:   What are my first steps? When I arrive on site should I disconnect the server, preserve "evidence", are there other initial considerations? How do I go about getting services back online? How do I prevent the same thing from happening immediately again? Are there best practices or methodologies for learning from this incident? If I wanted to put a Incident Response Plan together, where would I start? Should this be part of my Disaster Recovery or Business Continuity Planning?   Original Version       2011.01.02 - I'm on my way into work at 9.30 p.m. on a Sunday because our server has been compromised somehow and was resulting in a    attack on our provider. The servers access to the Internet   has been shut down which means over 5-600 of our clients sites are now   down. Now this could be an FTP hack, or some weakness in code   somewhere. I'm not sure till I get there.      How can I track this down quickly? We're in for a whole lot of   litigation if I don't get the server back up ASAP. Any help is   appreciated. We are running Open SUSE 11.0.            2011.01.03 - Thanks to everyone for your help. Luckily I WASN'T the only person responsible for this server, just the nearest. We managed   to resolve this problem, although it may not apply to many others in a   different situation. I'll detail what we did.      We unplugged the server from the net. It was performing (attempting to   perform) a Denial Of Service attack on another server in Indonesia,   and the guilty party was also based there.      We firstly tried to identify where on the server this was coming from,   considering we have over 500 sites on the server, we expected to be   moonlighting for some time. However, with SSH access still, we ran a   command to find all files edited or created in the time the attacks   started. Luckily, the offending file was created over the winter   holidays which meant that not many other files were created on the   server at that time.      We were then able to identify the offending file which was inside the   uploaded images folder within a  website.      After a short cigarette break we concluded that, due to the files   location, it must have been uploaded via a file upload facility that   was inadequetly secured. After some googling, we found that there was   a security vulnerability that allowed files to be uploaded, within the   ZenCart admin panel, for a picture for a record company. (The section   that it never really even used), posting this form just uploaded any   file, it did not check the extension of the file, and didn't even   check to see if the user was logged in.      This meant that any files could be uploaded, including a PHP file for   the attack. We secured the vulnerability with ZenCart on the infected   site, and removed the offending files.      The job was done, and I was home for 2 a.m.            The Moral   - Always apply security patches for ZenCart, or any other CMS system for that matter. As when security updates are released, the whole   world is made aware of the vulnerability.   - Always do backups, and backup your backups.   - Employ or arrange for someone that will be there in times like these. To prevent anyone from relying on a panicy post on Server   Fault.
Since the Denoise feature was added to Blender I only use the default setting with it and it really does the work. But sometimes the denoise is noticable on some of my renders. How can I overcome the blurred effect? Denoising for me is a big help because my system is quite aged. Does the verb &quot;provide&quot; always have to be used with &quot;with&quot;? For example,  Can you provide me with some good examples? Can you provide me some good examples? Can you provide some good examples?  I suppose it's a transitive verb, isn't it? Moreover, is the following type of usage correct?  You should provide food for your dog before you go on vacation.  If you could give me some good examples regarding &quot;provide&quot; with different types of usage, I'd appreciate that. I am lost in normalizing, could anyone guide me please.  I have a minimum and maximum values, say -23.89 and 7.54990767, respectively.  If I get a value of 5.6878 how can I scale this value on a scale of 0 to 1. How to give permissions to specific command? I would like to run fastboot command without sudo. it's working if I put sudo in front of it, otherwise it wont.  like this:  $ sudo fastboot devices 2738006a    fastboot  $ fastboot devices no permissions  fastboot   How do I solve this? I use the highlight mode in vim to copy a few characters.  I then want to paste more than once.  My current technique does not work well.  Sample text: Linux Solaris Irix HP-UX  Suppose I want to copy the word Linux, then paste over Solaris and Irix.   Place cursor at L in Linux Command v (for visual hilite), then e (for end-of-word), then y (for yank/copy) Now Linux is on my "vim clipboard" Move cursor to S in Solaris (first instance) Command v (for visual hilite), then e (for end-of-word), then p (for paste) Text is now: Linux Linux Irix HP-UX, but now Solaris is on my "vim clipboard" Move cursor to I in Irix (second instance) Command v (for visual hilite), then e (for end-of-word), then p (for paste) Text is now: Linux Linux Solaris HP-UX which is not what I expected.   I resort to using highlite/paste with the mouse (via X Terminal).  Surely, I can do this better.  How? The 10th and last round of negotiations between Iran and the six world powers was held in Vienna in a bid to strike a final deal. However, after the sides failed to agree on a final deal they decided to extend the negotiations until / by July 1, 2015.   In the original text the preposition until has been written. I am, however, wondering if we could use by instead, if so, is there any difference semantically?  Any help would be greatly appreciated JavaScript window resize event Why are American-style options worth more than European-style options? Why are American-style options worth more than European-style options?   I realize I can exercise American-style options anytime before the  expire, but I can only exercise European-style options during their  "exercise period" (usually right when they expire, but no earlier).   So it makes sense that an American option is worth at least as much as  a European option.   But why is it worth more? If I exercise my American option early, I  may make more money than waiting until expiration, but I also may make  less. Mathematically, there's no advantage, since I'm equally likely  to make as much money by waiting for expiration.   Mathematically speaking, is there ever a good reason to exercise an  American option early?   I realize people don't always behave logically, but even the formulas  that valuate options show that American options are worth more.   EDIT (answering comments):    Many of the comments people made would apply to lookback options  (), but not to American  options.  American options can do everything European options can and more. I  understand that, and that means American options can't be worth any  LESS than European options, but I'm still not clear on how you would  mathematically calculate this extra value.  @Aaronaught: "The difference between an American and European  option is the difference between getting N chances to get it right (N  being the number of days 'til expiration) and getting just one  chance. It should be easy to see why you're more likely to profit  with the former, even if you can't accurately predict price  movement."    REPLY: I don't think you really get N chances. Once you exercise the  option, that's it, no more chances. And, if you decide not to exercise  the option today, and the underlying's price falls, you can't go back  in time and exercise it yesterday.    @jdsweet: Think of it this way, if you traveled back through time  one month - with perfect knowledge of AAPL's stock price over that  period - which happens to peak viciously then return to its old price  at the end of the period - wouldn't you pay more for an American  option?    REPLY: Well, no. I'd simply buy a cheaper European option that expires  right at the spike. Or, I'd buy a European option that expires later,  and sell it when the spike occurs. American options don't give you  precognition, so you're still guessing as to when to sell/exercise.    @jdsweet: "one of the more common reasons people exercise (as  opposed to sell) an American option before expiration is if an  unexpected dividend (larger than remaining time value of the option)  was just announced that's going to be paid before the option contract  expires"    REPLY: This makes sense. I'm actually trading FOREX options, so there  is no dividend. In that scenario, are European and American options  worth the same? is piped ls the same as ls -1? ls returns output in several columns, whereas ls|cat returns byte-identical output with ls -1 for directories I've tried. Still I see ls -1 piped in answers, like ls -1|wc -l. Is there ever a reason to prefer ls -1? Why does ...|cat change the output of ls? Catch multiple exceptions at once? Is $\operatorname{lcm}(a,\gcd(b,c))=\gcd(\operatorname{lcm}(a,b),\operatorname{lcm}(a,c))$ When should I use the subjunctive mood? In which cases should I use the subjunctive mood?     I suggest that every applicant fill out the form carefully.        If she were rich, she would live on Long Island. Is it possible to build a .dmg file (for distributing apps) from a non-Mac platform? And if yes, how? Xerces error: org.apache.xerces.impl.dv.dtd.DTDDVFactoryImpl Round a double to 2 decimal places Changing content of footline in beamer How is it possible to set a specific text in the footline of the slides in beamer? In my case, author names and the title are shown. Instead I'd like to show the conference name and country.  \documentclass{beamer} \usetheme{CambridgeUS}  \author{Elena Piper, Amina Shahid, April Fiorese} \title{Evaluating the Change of Performance Metrics for Key ABS}  \begin{document} \maketitle  \end{document} How to make an embedded question from "What time is it?" PHP: How do you determine every Nth iteration of a loop? Is there a way to easily turn on/off showing the boot messages (loading the services) when Ubuntu starts? Is it something in Grub2?  I am running 10.04. How can a file be copied?