BIND and Dr Web stop runnin

[sufiah]

Hi,

I really really need help.
I accidently deleted /var/named folder and I do not have a backup for it (I Know!!!).

I have manage to restore the zone file, so now I can create new domain in Plesk.

The big problems that I am having right now are:
1. BIND server is not running.
When I checked the status, it will say that it is running, but when I checked the status, it will give me this msg:
"rndc: connection to remote host closed
This may indicate that the remote server is using an older version of
the command protocol, this host is not authorized to connect,
or the key is invalid."
2. Dr Web is not running neither, here are the msg that I get when I start Dr.Web.
"Starting up DrWeb(R) daemon: Dr.Web (R) daemon for Linux/Plesk Edition, version 4.32.2 (2004-11-01)
Copyright (c) Igor Daniloff, 1992-2004
Doctor Web Ltd., Moscow, Russia
Support service: http://support.drweb.com
To purchase: http://buy.drweb.com

Engine version: 4.32b
Loading /var/drweb/bases/drwtoday.vdb - Ok, virus records: 459
Loading /var/drweb/bases/drw43309.vdb - Ok, virus records: 733
Loading /var/drweb/bases/drw43308.vdb - Ok, virus records: 708
Loading /var/drweb/bases/drw43307.vdb - Ok, virus records: 839
Loading /var/drweb/bases/drw43306.vdb - Ok, virus records: 930
Loading /var/drweb/bases/drw43305.vdb - Ok, virus records: 760
Loading /var/drweb/bases/drw43304.vdb - Ok, virus records: 721
Loading /var/drweb/bases/drw43303.vdb - Ok, virus records: 638
Loading /var/drweb/bases/drw43259.vdb - Ok, virus records: 806
Loading /var/drweb/bases/drw43258.vdb - Ok, virus records: 745
Loading /var/drweb/bases/drw43257.vdb - Ok, virus records: 720
Loading /var/drweb/bases/drw43256.vdb - Ok, virus records: 529
Loading /var/drweb/bases/drw43255.vdb - Ok, virus records: 901
Loading /var/drweb/bases/drw43254.vdb - Ok, virus records: 890
Loading /var/drweb/bases/drw43253.vdb - Ok, virus records: 863
Loading /var/drweb/bases/drw43252.vdb - Ok, virus records: 616
Loading /var/drweb/bases/drw43251.vdb - Ok, virus records: 714
Loading /var/drweb/bases/drw43250.vdb - Ok, virus records: 858
Loading /var/drweb/bases/drw43249.vdb - Ok, virus records: 763
Loading /var/drweb/bases/drw43248.vdb - Ok, virus records: 628
Loading /var/drweb/bases/drw43247.vdb - Ok, virus records: 652
Loading /var/drweb/bases/drw43246.vdb - Ok, virus records: 749
Loading /var/drweb/bases/drw43245.vdb - Ok, virus records: 591
Loading /var/drweb/bases/drw43244.vdb - Ok, virus records: 833
Loading /var/drweb/bases/drw43243.vdb - Ok, virus records: 630
Loading /var/drweb/bases/drw43242.vdb - Ok, virus records: 793
Loading /var/drweb/bases/drw43241.vdb - Ok, virus records: 780
Loading /var/drweb/bases/drw43240.vdb - Ok, virus records: 435
Loading /var/drweb/bases/drw43239.vdb - Ok, virus records: 775
Loading /var/drweb/bases/drw43238.vdb - Ok, virus records: 1011
Loading /var/drweb/bases/drw43237.vdb - Ok, virus records: 656
Loading /var/drweb/bases/drw43236.vdb - Ok, virus records: 850
Loading /var/drweb/bases/drw43235.vdb - Ok, virus records: 1001
Loading /var/drweb/bases/drw43234.vdb - Ok, virus records: 554
Loading /var/drweb/bases/drw43233.vdb - Ok, virus records: 632
Loading /var/drweb/bases/drw43232.vdb - Ok, virus records: 516
Loading /var/drweb/bases/drw43231.vdb - Ok, virus records: 466
Loading /var/drweb/bases/drw43230.vdb - Ok, virus records: 901
Loading /var/drweb/bases/drw43229.vdb - Ok, virus records: 632
Loading /var/drweb/bases/drw43228.vdb - Ok, virus records: 584
Loading /var/drweb/bases/drw43227.vdb - Ok, virus records: 568
Loading /var/drweb/bases/drw43226.vdb - Ok, virus records: 533
Loading /var/drweb/bases/drw43225.vdb - Ok, virus records: 476
Loading /var/drweb/bases/drw43224.vdb - Ok, virus records: 484
Loading /var/drweb/bases/drw43223.vdb - Ok, virus records: 442
Loading /var/drweb/bases/drw43222.vdb - Ok, virus records: 371
Loading /var/drweb/bases/drw43221.vdb - Ok, virus records: 372
Loading /var/drweb/bases/drw43220.vdb - Ok, virus records: 560
Loading /var/drweb/bases/drw43219.vdb - Ok, virus records: 412
Loading /var/drweb/bases/drw43218.vdb - Ok, virus records: 511
Loading /var/drweb/bases/drw43217.vdb - Ok, virus records: 512
Loading /var/drweb/bases/drw43216.vdb - Ok, virus records: 507
Loading /var/drweb/bases/drw43215.vdb - Ok, virus records: 539
Loading /var/drweb/bases/drw43214.vdb - Ok, virus records: 275
Loading /var/drweb/bases/drw43213.vdb - Ok, virus records: 404
Loading /var/drweb/bases/drw43212.vdb - Ok, virus records: 428
Loading /var/drweb/bases/drw43211.vdb - Ok, virus records: 494
Loading /var/drweb/bases/drw43210.vdb - Ok, virus records: 450
Loading /var/drweb/bases/drw43209.vdb - Ok, virus records: 639
Loading /var/drweb/bases/drw43208.vdb - Ok, virus records: 603
Loading /var/drweb/bases/drw43207.vdb - Ok, virus records: 620
Loading /var/drweb/bases/drw43206.vdb - Ok, virus records: 683
Loading /var/drweb/bases/drw43205.vdb - Ok, virus records: 525
Loading /var/drweb/bases/drw43204.vdb - Ok, virus records: 607
Loading /var/drweb/bases/drw43203.vdb - Ok, virus records: 409
Loading /var/drweb/bases/drw43202.vdb - Ok, virus records: 543
Loading /var/drweb/bases/drwebase.vdb - Ok, virus records: 51982
Loading /var/drweb/bases/drw43201.vdb - Ok, virus records: 364
Loading /var/drweb/bases/drw43129.vdb - error!
Loading /var/drweb/bases/drw43128.vdb - error!
Loading /var/drweb/bases/drw43127.vdb - error!
Loading /var/drweb/bases/drw43126.vdb - Ok, virus records: 224
Loading /var/drweb/bases/drw43125.vdb - error!
Loading /var/drweb/bases/drw43124.vdb - error!
Loading /var/drweb/bases/drw43123.vdb - error!
Loading /var/drweb/bases/drw43122.vdb - error!
Loading /var/drweb/bases/drw43121.vdb - error!
Loading /var/drweb/bases/drw43120.vdb - error!
Loading /var/drweb/bases/drw43119.vdb - error!
Loading /var/drweb/bases/drw43118.vdb - error!
Loading /var/drweb/bases/drw43117.vdb - error!
Loading /var/drweb/bases/drw43116.vdb - error!
Loading /var/drweb/bases/drw43115.vdb - error!
Loading /var/drweb/bases/drw43114.vdb - error!
Loading /var/drweb/bases/drw43113.vdb - error!
Loading /var/drweb/bases/drw43112.vdb - error!
Loading /var/drweb/bases/drw43111.vdb - error!
Loading /var/drweb/bases/drw43110.vdb - error!
Loading /var/drweb/bases/drw43109.vdb - error!
Loading /var/drweb/bases/drw43108.vdb - error!
Loading /var/drweb/bases/drw43107.vdb - error!
Loading /var/drweb/bases/drw43106.vdb - error!
Loading /var/drweb/bases/drw43105.vdb - error!
Loading /var/drweb/bases/drw43104.vdb - error!
Loading /var/drweb/bases/drw43103.vdb - error!
Loading /var/drweb/bases/drw43102.vdb - error!
Loading /var/drweb/bases/drw43101.vdb - error!
Total virus records: 94399
Key file not found!
Plesk authorization failed: cannot create null-stream - Permission denied
Error: Plesk Software not running.
"

Please help!!!
Thank you.

Sufiah

 

[ShadowMan@]

You need to make sure you have recreated the entire /var/named structure (and often the symlink from /etc/named.conf --> /var/named/run-root/etc/named.conf)

All the ownership and permissions on directories and files must be set properly.

Have you tried forcing a reinstall of the bind packages for your OS?

Example: on RH9
rpm -Uvh --force bind-utils-9.2.1-16 bind-9.2.1-16 redhat-config-bind-1.9.0-13 bind-devel-9.2.1-16

or whatever your OS has installed. This should cause the recreation of the base directories and files with proper ownership and permissions. Then recreate your hosted domains zone files.

I believe that the DrWeb problem will go away once bind/named is running properly with good zone files.

 

[sufiah]

Hi ShadowMan,

I have done the reinstallation of bind package but it didn't seem to recreate the necessary files. I am not sure about the structure of the directory neither.

I am researching about the structure now, hopefully I can recover everything soon.

Would upgrading Plesk solve this problem?

Thank you.

Sufiah

 

[sufiah]

Forgot...

I am using Plesk Reloaded 7.5.3 and Fedore Core 2

 

[ShadowMan@]

I would hesitate to do a Plesk upgrade when you have a major package which is not working at the moment.

 

[sufiah]

I fix the problem, so BIND server is up and running now.. yey..!!

However, Dr Web is still not running. What are the connections between Dr Web and BIND server?

Here is the log when I tried to start Dr Web. Please help.

Starting up DrWeb(R) daemon: Dr.Web (R) daemon for Linux/Plesk Edition, version 4.32.2 (2004-11-01)
Copyright (c) Igor Daniloff, 1992-2004
Doctor Web Ltd., Moscow, Russia
Support service: http://support.drweb.com
To purchase: http://buy.drweb.com

Engine version: 4.32b
Loading /var/drweb/bases/drwtoday.vdb - Ok, virus records: 459
Loading /var/drweb/bases/drw43309.vdb - Ok, virus records: 733
Loading /var/drweb/bases/drw43308.vdb - Ok, virus records: 708
Loading /var/drweb/bases/drw43307.vdb - Ok, virus records: 839
Loading /var/drweb/bases/drw43306.vdb - Ok, virus records: 930
Loading /var/drweb/bases/drw43305.vdb - Ok, virus records: 760
Loading /var/drweb/bases/drw43304.vdb - Ok, virus records: 721
Loading /var/drweb/bases/drw43303.vdb - Ok, virus records: 638
Loading /var/drweb/bases/drw43259.vdb - Ok, virus records: 806
Loading /var/drweb/bases/drw43258.vdb - Ok, virus records: 745
Loading /var/drweb/bases/drw43257.vdb - Ok, virus records: 720
Loading /var/drweb/bases/drw43256.vdb - Ok, virus records: 529
Loading /var/drweb/bases/drw43255.vdb - Ok, virus records: 901
Loading /var/drweb/bases/drw43254.vdb - Ok, virus records: 890
Loading /var/drweb/bases/drw43253.vdb - Ok, virus records: 863
Loading /var/drweb/bases/drw43252.vdb - Ok, virus records: 616
Loading /var/drweb/bases/drw43251.vdb - Ok, virus records: 714
Loading /var/drweb/bases/drw43250.vdb - Ok, virus records: 858
Loading /var/drweb/bases/drw43249.vdb - Ok, virus records: 763
Loading /var/drweb/bases/drw43248.vdb - Ok, virus records: 628
Loading /var/drweb/bases/drw43247.vdb - Ok, virus records: 652
Loading /var/drweb/bases/drw43246.vdb - Ok, virus records: 749
Loading /var/drweb/bases/drw43245.vdb - Ok, virus records: 591
Loading /var/drweb/bases/drw43244.vdb - Ok, virus records: 833
Loading /var/drweb/bases/drw43243.vdb - Ok, virus records: 630
Loading /var/drweb/bases/drw43242.vdb - Ok, virus records: 793
Loading /var/drweb/bases/drw43241.vdb - Ok, virus records: 780
Loading /var/drweb/bases/drw43240.vdb - Ok, virus records: 435
Loading /var/drweb/bases/drw43239.vdb - Ok, virus records: 775
Loading /var/drweb/bases/drw43238.vdb - Ok, virus records: 1011
Loading /var/drweb/bases/drw43237.vdb - Ok, virus records: 656
Loading /var/drweb/bases/drw43236.vdb - Ok, virus records: 850
Loading /var/drweb/bases/drw43235.vdb - Ok, virus records: 1001
Loading /var/drweb/bases/drw43234.vdb - Ok, virus records: 554
Loading /var/drweb/bases/drw43233.vdb - Ok, virus records: 632
Loading /var/drweb/bases/drw43232.vdb - Ok, virus records: 516
Loading /var/drweb/bases/drw43231.vdb - Ok, virus records: 466
Loading /var/drweb/bases/drw43230.vdb - Ok, virus records: 901
Loading /var/drweb/bases/drw43229.vdb - Ok, virus records: 632
Loading /var/drweb/bases/drw43228.vdb - Ok, virus records: 584
Loading /var/drweb/bases/drw43227.vdb - Ok, virus records: 568
Loading /var/drweb/bases/drw43226.vdb - Ok, virus records: 533
Loading /var/drweb/bases/drw43225.vdb - Ok, virus records: 476
Loading /var/drweb/bases/drw43224.vdb - Ok, virus records: 484
Loading /var/drweb/bases/drw43223.vdb - Ok, virus records: 442
Loading /var/drweb/bases/drw43222.vdb - Ok, virus records: 371
Loading /var/drweb/bases/drw43221.vdb - Ok, virus records: 372
Loading /var/drweb/bases/drw43220.vdb - Ok, virus records: 560
Loading /var/drweb/bases/drw43219.vdb - Ok, virus records: 412
Loading /var/drweb/bases/drw43218.vdb - Ok, virus records: 511
Loading /var/drweb/bases/drw43217.vdb - Ok, virus records: 512
Loading /var/drweb/bases/drw43216.vdb - Ok, virus records: 507
Loading /var/drweb/bases/drw43215.vdb - Ok, virus records: 539
Loading /var/drweb/bases/drw43214.vdb - Ok, virus records: 275
Loading /var/drweb/bases/drw43213.vdb - Ok, virus records: 404
Loading /var/drweb/bases/drw43212.vdb - Ok, virus records: 428
Loading /var/drweb/bases/drw43211.vdb - Ok, virus records: 494
Loading /var/drweb/bases/drw43210.vdb - Ok, virus records: 450
Loading /var/drweb/bases/drw43209.vdb - Ok, virus records: 639
Loading /var/drweb/bases/drw43208.vdb - Ok, virus records: 603
Loading /var/drweb/bases/drw43207.vdb - Ok, virus records: 620
Loading /var/drweb/bases/drw43206.vdb - Ok, virus records: 683
Loading /var/drweb/bases/drw43205.vdb - Ok, virus records: 525
Loading /var/drweb/bases/drw43204.vdb - Ok, virus records: 607
Loading /var/drweb/bases/drw43203.vdb - Ok, virus records: 409
Loading /var/drweb/bases/drw43202.vdb - Ok, virus records: 543
Loading /var/drweb/bases/drwebase.vdb - Ok, virus records: 51982
Loading /var/drweb/bases/drw43201.vdb - Ok, virus records: 364
Loading /var/drweb/bases/drw43129.vdb - error!
Loading /var/drweb/bases/drw43128.vdb - error!
Loading /var/drweb/bases/drw43127.vdb - error!
Loading /var/drweb/bases/drw43126.vdb - Ok, virus records: 224
Loading /var/drweb/bases/drw43125.vdb - error!
Loading /var/drweb/bases/drw43124.vdb - error!
Loading /var/drweb/bases/drw43123.vdb - error!
Loading /var/drweb/bases/drw43122.vdb - error!
Loading /var/drweb/bases/drw43121.vdb - error!
Loading /var/drweb/bases/drw43120.vdb - error!
Loading /var/drweb/bases/drw43119.vdb - error!
Loading /var/drweb/bases/drw43118.vdb - error!
Loading /var/drweb/bases/drw43117.vdb - error!
Loading /var/drweb/bases/drw43116.vdb - error!
Loading /var/drweb/bases/drw43115.vdb - error!
Loading /var/drweb/bases/drw43114.vdb - error!
Loading /var/drweb/bases/drw43113.vdb - error!
Loading /var/drweb/bases/drw43112.vdb - error!
Loading /var/drweb/bases/drw43111.vdb - error!
Loading /var/drweb/bases/drw43110.vdb - error!
Loading /var/drweb/bases/drw43109.vdb - error!
Loading /var/drweb/bases/drw43108.vdb - error!
Loading /var/drweb/bases/drw43107.vdb - error!
Loading /var/drweb/bases/drw43106.vdb - error!
Loading /var/drweb/bases/drw43105.vdb - error!
Loading /var/drweb/bases/drw43104.vdb - error!
Loading /var/drweb/bases/drw43103.vdb - error!
Loading /var/drweb/bases/drw43102.vdb - error!
Loading /var/drweb/bases/drw43101.vdb - error!
Total virus records: 94399
Key file not found!
Plesk authorization failed: cannot create null-stream - Permission denied
Error: Plesk Software not running.

 

[ShadowMan@]

From the errors it shows while trying to read it's own .vdb files, I would just uninstall and reinstall the 2 packages related to DrWeb:

First find the 2 rpm files on your server, usually under

/root/psa/PSA_7.5.?/rpm_osversion/base/
and
/root/psa/PSA_7.5.?/rpm_osversion/opt/drweb/

Once you are sure you have them, then uninstall them:

Login to server via SSH (as root, or su root)

#rpm -e drweb drweb-qmail (this uninstalls both)

Then changedir to where the file(s) are, if they are in separate dir's then you will have to do this one rpm at a time.

To install the package:

rpm -Uvh drweb

rpm -Uvh drweb-qmail

Hope this helps.

Hmm, I suppose that after you have uninstalled both, you could then try the Plesk control panel updater, see if it detects that DrWeb is not installed, then try using the updater to reinstall them instead of the SSH procedure above.

We don't use DrWeb on any of our servers, our testing showed it to be way too unstable and unreliable. Instead we use a combination of f-prot, clamav, spamassassin, qmail-scanner (from atomicrocketturtle's repositories).

 

[sufiah]

Hi Shadowman,

Thank you very much for your help.

I've reinstall DrWeb and solve the file error problem, but still can not start Dr web. I got the same error:
Key file not found!
Plesk authorization failed: cannot create null-stream - Permission denied
Error: Plesk Software not running.

The fact is Plesk is running and I am not sure about the authorisation file that it meant.

Do you think the problem is related to Plesk?

 

[ShadowMan@]

Did you purchase the DrWeb license from Plesk (as well as from DrWeb)? Or are you running the 'free' trial version which comes with Plesk ?

If you are running on the free version (which has certain limitations such as 15 user max per server), then the "Key file not found!" error is normal. It indicates that the purchased license key cannot be found.

The message "Error: Plesk Software not running." we have seen this on many occasions when DrWeb is started by the OS *before* the PSA / Plesk software is started up. To verify this, please SSH login to the server and issue the following commands and post the results here:

#chkconfig --list psa
#chkconfig --list drweb

You should see something like:

psa             0:off   1:off   2:off   3:on    4:on    5:on    6:off

for each of them. If DrWeb is set to start at a runlevel before psa, then that would explain the "Error: Plesk Software not running."

As for the error "cannot create null-stream - Permission denied", I am not sure what could cause this one. Since we choose not to use DrWeb on our servers, my assistance is about at an end on this topic. Sorry that I am out of ideas at this point.

 

[sufiah]

Hi ShadowMan,

You've been very helpful. Thank you very much for all your helps. Really appreciate it.

I will do what you have suggested, if the problem continues I probably will submit a ticket for Plesk.

Wish me luck ^_^.