No web access possible
This morning, I couldn’t reach the site over the web. Even more weird: then accessing the operator and mail sites, I got the worng certificate, the one of the router-firewall, and so the browser complaiend it was a different site…
It was only after when I got home I could try to locate the problem. Accessing the sites from the inside now didn’t succeed – all machines rendered the site inaccessable. Even accessing the router internally, using it’s web-interface, didn’t work. Just the header showed up, and the remaining data was not found.
Luckily, telnetting to the router was still possible, and that way I found a weird, second DNS mentioned, way outside the normal range but still ‘local’, on address 192.168.51.1. With no external management enabled, this is something where I need to dig deeper.
First of all, I rebooted the router – and after that, HTTP and HTTPS traffic was passed to the VMS box as usual. Next, I took a look to the logging I have enabled – and I found that the outside connection was dropped for a brief moment; followed by a number of PINGS to an external address, originating from the server a few minutes later. But there was no informtion what process issued them.
The weirdiest thing however is that it was just the web-interface having trouble. All outgoing traffic – and incoming mail was not effected at all. Nor was outgoing traffic, it seems.
I’ll have to do some digging. Luckily, I now have the router’s logfiles!