Nel, What type of server do you need? Usually dreamhost is pretty good and the tracert's are looking real good. As far as the cookies it is leaving, so far the only ones I have seen are session cookies which don't really matter. Blacksheep

HATCHER website: http://hatcherfamilyassn.com HALL DNA project: http://homepages.rootsweb.com/~nhatcher/hall/HDNAtest.htm "If you can't stand the skeletons, stay out of the closet" - Val D Greenwood BlackSheep, Since you're on Digest mode, I'm also sending this to you separately. We need a server with better supprt service and an understanding of the TNG software. We will be going with SimplyHosting run by a guy who is a TNG user. They even offer to install your TNG software - a real blessing for this techie idiot. DH tells me we are exceeding our RAM allotment. They don't tell me what that means or what might cause it to be exceeded. Is it the constant error msgs filling the error log? Too many people accessing the site? Is it a slow thing that has just built up over the last year? I have no clue and they have not been helpful with explaining what might be the cause. No server is a problem for all customers and I'm sure DH has many happy customers. But they do NOT do well with TNG users, particularly those like me with a very large site. I can tell you the error log msgs are not encouraging. For those of you who can read this gobblygook, this is currently the last msg in the log: [Sun Nov 09 09:34:50 2008] [error] [client 82.194.85.198] ModSecurity: Access denied with code 503 (phase 2). Pattern match "=(http|www|ftp)\\:/(.+)\\.(c|dat|kek|gif|jpe?g|jpeg|png|sh|txt|bmp|dat|txt|js|html?|tmp|asp)\\x20?\\?" at REQUEST_URI. [file "/dh/apache2/template/etc/mod_sec2/gotroot/50_asl_rootkits.conf"] [line "23"] [id "390144"] [rev "2"] [msg "Command shell attack: Generic Attempt to remote include command shell"] [severity "CRITICAL"] [hostname "hatcherfamilyassn.com"] [uri "/historytemplate.php"] [unique_id "SRcfOkIhxfEAAHz0G7QAAAAx"] Here is a very common set for just one user. Multiply this one by many pages. [Sun Nov 09 09:24:17 2008] [error] [client 71.252.195.56] Premature end of script headers: php.cgi, referer: http://hatcherfamilyassn.com/index.php [Sun Nov 09 09:25:47 2008] [error] [client 71.252.195.56] File does not exist: /home/hatchnel/hatcherfamilyassn.com/internal_error.html, referer: http://hatcherfamilyassn.com/index.php Here is a very strange one with just a few of the msgs in the series for this user: [Sun Nov 09 09:15:26 2008] [error] [client 98.199.130.69] File does not exist: /home/hatchnel/hatcherfamilyassn.com/cemeteries.phtml [Sun Nov 09 09:15:26 2008] [error] [client 98.199.130.69] File does not exist: /home/hatchnel/hatcherfamilyassn.com/missing.html [Sun Nov 09 09:15:30 2008] [error] [client 98.199.130.69] File does not exist: /home/hatchnel/hatcherfamilyassn.com/cemeteries.html The cemeteries file is one set up by TNG and not something I would mess with. But note the spelling in the two refs. I don't know what .phtml is. I don't know why this error is being produced. I will note that the background image that was coming up as a "File does not exist" and that had been corrected by me last nite is no longer producing error msgs. There seems to be some sort of delay since they continued to appear for a few hours after I had corrected it. You wrote: "I got a 500 error which is an internal server error and usually means that there is a configuration problem within the program itself and not the servers." You need to explain your definition of "configuration." I define that as relating to a change I personally made to one program or another within the TNG software. If that's what you mean, I have made NO changes since 11/1 when Roy died. I added his b/d dates under his pic on the home page. That, IMO, could not possibly have caused me to go down last Monday which (coincidently?) is the same time DH reported an "issue" with my server. If it is possible that a "configuration" could have been set up wrongly a year ago at our initial upload and not cause problems until a year later, you may be right. But finding that problem is "the problem." I and others often and sporadically get the 500 ISE error just trying to access the site when the only "changes" I've made is to one of our dbase files (changing/adding dates/places, etc). If routine maintenance on our dbases can cause these ISE errors, we are in DEEP doo-doo :-) Nel

Hello List-I am not a computer geek but If the RAM(Random Access memory) is the problem, when you exceed your allotment it is the same thing as filling a ten quart bucket with water-after it is full it won"t hold any more-so maybe you need to see if you can get more RAM---just a thought! Carroll Rowlett a double bred Hatcher In God We Trust IIABDFI ----- Original Message ----- From: "nelhatch" <nelhatch@hills.net> To: <hatcher@rootsweb.com>; <strider@oscworks.com> Sent: Sunday, November 09, 2008 12:27 PM Subject: Re: [HATCHER] HATCHER Digest, Vol 3, Issue 375 > > HATCHER website: http://hatcherfamilyassn.com > HALL DNA project: > http://homepages.rootsweb.com/~nhatcher/hall/HDNAtest.htm > "If you can't stand the skeletons, stay out of the closet" - Val D > Greenwood > > BlackSheep, > > Since you're on Digest mode, I'm also sending this to you separately. > > We need a server with better supprt service and an understanding of the > TNG software. We will be going with SimplyHosting run by a guy who is a > TNG user. They even offer to install your TNG software - a real blessing > for this techie idiot. > > DH tells me we are exceeding our RAM allotment. They don't tell me what > that means or what might cause it to be exceeded. Is it the constant error > msgs filling the error log? Too many people accessing the site? Is it a > slow thing that has just built up over the last year? I have no clue and > they have not been helpful with explaining what might be the cause. > > No server is a problem for all customers and I'm sure DH has many happy > customers. But they do NOT do well with TNG users, particularly those like > me with a very large site. > > I can tell you the error log msgs are not encouraging. For those of you > who can read this gobblygook, this is currently the last msg in the log: > > [Sun Nov 09 09:34:50 2008] [error] [client 82.194.85.198] ModSecurity: > Access denied with code 503 (phase 2). Pattern match > "=(http|www|ftp)\\:/(.+)\\.(c|dat|kek|gif|jpe?g|jpeg|png|sh|txt|bmp|dat|txt|js|html?|tmp|asp)\\x20?\\?" > at REQUEST_URI. [file > "/dh/apache2/template/etc/mod_sec2/gotroot/50_asl_rootkits.conf"] [line > "23"] [id "390144"] [rev "2"] [msg "Command shell attack: Generic Attempt > to remote include command shell"] [severity "CRITICAL"] [hostname > "hatcherfamilyassn.com"] [uri "/historytemplate.php"] [unique_id > "SRcfOkIhxfEAAHz0G7QAAAAx"] > > > Here is a very common set for just one user. Multiply this one by many > pages. > > [Sun Nov 09 09:24:17 2008] [error] [client 71.252.195.56] Premature end of > script headers: php.cgi, referer: http://hatcherfamilyassn.com/index.php > [Sun Nov 09 09:25:47 2008] [error] [client 71.252.195.56] File does not > exist: /home/hatchnel/hatcherfamilyassn.com/internal_error.html, referer: > http://hatcherfamilyassn.com/index.php > > > Here is a very strange one with just a few of the msgs in the series for > this user: > > > [Sun Nov 09 09:15:26 2008] [error] [client 98.199.130.69] File does not > exist: /home/hatchnel/hatcherfamilyassn.com/cemeteries.phtml > [Sun Nov 09 09:15:26 2008] [error] [client 98.199.130.69] File does not > exist: /home/hatchnel/hatcherfamilyassn.com/missing.html > [Sun Nov 09 09:15:30 2008] [error] [client 98.199.130.69] File does not > exist: /home/hatchnel/hatcherfamilyassn.com/cemeteries.html > > > The cemeteries file is one set up by TNG and not something I would mess > with. But note the spelling in the two refs. I don't know what .phtml is. > I don't know why this error is being produced. > > > > I will note that the background image that was coming up as a "File does > not exist" and that had been corrected by me last nite is no longer > producing error msgs. There seems to be some sort of delay since they > continued to appear for a few hours after I had corrected it. > > > > You wrote: > > "I got a 500 error which is an internal server error and usually means > that > there is a configuration problem within the program itself and not the > servers." > > > > You need to explain your definition of "configuration." I define that as > relating to a change I personally made to one program or another within > the TNG software. If that's what you mean, I have made NO changes since > 11/1 when Roy died. I added his b/d dates under his pic on the home page. > That, IMO, could not possibly have caused me to go down last Monday which > (coincidently?) is the same time DH reported an "issue" with my server. If > it is possible that a "configuration" could have been set up wrongly a > year ago at our initial upload and not cause problems until a year later, > you may be right. But finding that problem is "the problem." I and others > often and sporadically get the 500 ISE error just trying to access the > site when the only "changes" I've made is to one of our dbase files > (changing/adding dates/places, etc). If routine maintenance on our dbases > can cause these ISE errors, we are in DEEP doo-doo :-) > > > Nel > > ------------------------------- > To unsubscribe from the list, please send an email to > HATCHER-request@rootsweb.com with the word 'unsubscribe' without the > quotes in the subject and the body of the message > >