On 3/28/08, Ric <lists@xxxxxxxxxxx> wrote: > > On Mar 27, 2008, at 11:37 PM, kk CHN wrote: > > > On 3/28/08, Ric <lists@xxxxxxxxxxx> wrote: > >> > >> On Mar 27, 2008, at 9:57 PM, kk CHN wrote: > >> > >>> People: in my server box , I am using squid as http accelerator > >>> ;setup is as follows > >>> > >>> Flow of requests from users should be like this > >>> > >>> squid listens on public ip port:80 --->apache(127.0.0.1:80) --- > >>> RewriteRule for apache to--->zope:8080/plonesite > >>> > >>> > >>> > >>> Important NOTE : for the last couple of days I am experiencing > >>> that my plone site on zope :8080 is become not acceesible after 5/6 > >>> hours ,after the services I restarted : > >>> > >>> when I run the command # ` sockstat -4p 80 ` > >>> here I can see a specific IP address (164.115.5.2 ) connecting > >>> directly ande using python2.4 as pasted below . > >> > >> > >> > >> Umm... Zope is a python process. Are you perchance connecting to the > >> Zope server directly yourself? > > > > Yes I do from my lan machine , by ssh tunnel : but thsi IP address > > "164.115.5.2 " noway related to ours : > > > > I know that a couple of members other than me has admin privileged > > accounts in the Zopeserver; but last week I changed all their account > > passwords to make sure only me as the admin to check how the site > > going down after few hours a service restart. > > > > any more info ...? > > > > > What then is on ports 65287 and 64313 on your server? www python2.4 44496 20 tcp4 my_Serverbox_public_IPAddress :65287 164.115.5.2:80 Here the pid 44496 I greped $ ps -aux|grep 44496 www 44496 0.0 21.3 445368 442940 ?? S Thu11AM 203:49.39 /usr/local/bin/python2.4 /usr/local/www/Zope28/lib/python/Zope its conecting to the zope process : So it means some thing going wrong with my machine? that foreign ip has access through some holes of my plone/zope application right?