Sophos Upgrade, SSL goes away on CSM/End User Web UI

Today we upgraded sophos puremessage on all servers, and in doing so we had several issues with the end user web ui.  First it switched over to IPv6, to solve that:

1.  Add this to /etc/modprobe.conf

# added 2/5/09 to disable ipv6 from starting -NJW
alias net-pf-10 off
alias ipv6 off

2.  Update “NETWORKING_IPV6=no” in /etc/sysconfig/network

Then in /opt/pmx/etc/manager/httpd2/ssl Update default.conf to this:

# HTTPS Port — see old/ directory for previous/default config -NJW 2/5/2009
Listen *:28080
<VirtualHost *:28080>
SSLCertificateFile etc/manager/httpd2/sophos2007.pem
SSLEngine On
Include etc/manager/httpd2/rpc.conf
</VirtualHost>

Basically just changing to SSL for the port 28080.

Finally restart the server (required for IPv6 kernel?).  If you see yourself needing to update the httpd configs, just restart it as the pmx user each time:

pmx-httpd restart

[Resolved] E-mail Delivery Delay Thursday 2/5/2009 5:30-7:30am – Part 2 of 2

On the morning of Thursday, February 5th from 5:30 to 7:30am, TS will be performing upgrades to improve the effectiveness of our spam filtering system. During the upgrade, delivery of email into and out of the college may be delayed.  E-mail sent may not arrive until after 7:30am.  E-mail sent within the University is not affected by this outage (i.e. e-mail from one @ups.edu account to another).

[Update: 2/5 at 9:30am] Mail delivery was restored by 7:10 am; however, the update for the end user quarantine page took longer than expected. All services were restored by 9:30am.

[Resolved] Spam Quarantine Unavailable Tuesday 2/3/2009 5:30-7:30am – Part 1 of 2

On the morning of Tuesday, February 3rd, from 5:30-7:30am, TS will be performing upgrades to improve reliability of our spam filtering system. During the upgrade, some users will be unable to access their quarantined email messages in the Sophos Pure Message system.  Should you experience problems accessing quarantined messages, please try again after 7:30am.

[Updated 2/3/2009 @ 7:45AM]

The quarantine is mostly available at this time, but a few users may find that certain messages are not available.  We expect this to be resolved within 15-30 minutes.

K-20 Network Installation Delayed

Due to a flaw in the K-20 network’s routing, we were unable to complete the K-20 Internet connection upgrade today, Saturday, January 31. Internet connectivity for the academic and administrative buildings was interrupted for approximately 15 minutes this morning around 9:30 AM.  We have restored internet connectivity to the administrative and academic buildings.  We will continue to work with K-20 to find a resolution, and schedule the implementation during the coming week.

Washington K-20 Network Install Scheduled 1/31/09

On Saturday, January 31, at 9 AM routing will be adjusted to direct Internet-bound traffic for the academic and administrative buildings to the Washington K-20 network. Traffic for the residential buildings (residence halls, Greek Row houses, and on-campus houses) will continue to flow over the existing Internet circuit provided by Integra Telecom.  From 9:00 -10:15 AM, Internet connection may be interrupted more than once for a few minutes at a time.

Update on Cascade Improvements Completed 1/28/09

As part of the Cascade Password Sync Project, the following system improvements were successfully completed on 1/28/2009:

  • Cascade Web account security is improved
  • Forgotten Username Self-Service utility added
  • Forgotten Password Self-Service utility is improved

Password synchronization was not successful due to unexpected technical problems not encountered in our testing.  We are actively working to solve the problem and hope to bring this enhanced service online soon.  We will update this announcement when more information is available.

Hotmail/MSN/Live E-mail Blacklist Update

Hotmail/MSN/Live is only delivering replies to Hotmail/MSN/Live messages. New messages sent to Hotmail/MSN/Live accounts are not being delivered. We are working with Microsoft directly to restore delivery of all messages.

You will not receive a bounce-back message alerting you to the issue. Until this problem is resolved, we recommend sending important messages via a non ups.edu account or communicating with the recipient via another medium.

[Update] 1/28/09, Cascade Web will be unavailable 3:00-9:30 am

Cascade Web is back online. Password Sync is not live at this point. Continue to use your separate Cascade and Windows domain/e-mail passwords until further notice. We will update this message when more information is available.

[Original Post 1/26/09 @ 12:57 pm] In order to implement the new Password Sync service, Cascade Web will be unavailable from 3:00 to 8:00 AM on Wednesday, January 28. Full details of the new features and benefits are available at www.ups.edu/PSSync.xml. Be sure to review the new password policy and guidelines to help make your new password selection easier.

E-Mail Blacklist Update

We have been removed from Comcast and AOL blacklists as of Wednesday, 1/21 @ Noon and e-mail is flowing normally.

Hotmail/MSN is accepting delivery of our email as of early Friday morning, 1/23; however, some messages do not seem to make it to user mailboxes.  We continue to monitor the situation as regular delivery will likely be restored over the next week. You will not receive a bounce-back message alerting you to the issue. Until this issue is resolved, we recommend sending important messages via a non @ups.edu account or communicating with the recipient via another medium.

[Resolved] Wireless hotspots intermittently unavailable

The wireless network has been sporadically unavailable since late last night, January 22, due to equipment malfunction. We are working with the vendor to resolve the problem and have no estimates on a resolution time. This affects most areas of campus, except Regester Hall and the Library stack areas.

[Update 1/23/09 @ 7:00 pm] With temporary solution in place, all tests show connectivity is restored. If you experience any wireless connectivity problems, please contact the Helpdesk.

December 18, 2008: Alexandria unresponsive

At approximately 5:15 PM the academic file server Alexandria started becoming unresponsive, causing problems with student logins and file access. the server was rebooted at approximately 6 Pm, after attempts to troubleshoot the problem failed because the server’s console became unresponive as well. Service was restored at approximately 6:15 PM.