Hi All,
I'm hoping you can help me with a more sysadmin type issue. Over the
past few days we have been unable to maintain a responsive TDS server
for 24 hours. The remedy is to restart tomcat and then we are good to
go. In the past, I've had issues with foreign IP addresses scanning
directories and initiating large NCSS downloads, but I've blocked
everything outside of the US. Looking through the logs, I'm seeing
mostly US Govt affiliated connections, and some ISP/AmazonCloud
servers. I kinda sorta know how to use netstat, but I'm having trouble
id'ing the culprit or the culprits. Admittedly, the hardware is old
(soon to be replaced), but I have a hunch this is related to NCSS,
since that was always the service that brought us down in the past.
So, I was wondering if any of you can help with suggestions/best
practices/tips that you use to monitor and secure your incoming
connections with TDS.
Thanks,
Tom
