C&CZ Problem Card

A change in the firewall config had the uncalculated effect that ssh-sessions got blocked/dropped. The config has been reversed.

We need to move a server to another location, during the move some of the services are unavailable, including licenses for: Cadence Labview Originlab Cst Maple Server ExelisIdl Mathematica Synopsys Genesys Matlab VirtualMachine GurobiTokenServer Mentorgraphics Xilinx Hdlworks Moe IntelCompiler New Everything should be completed by 10:00.

Due to the gateway change the printing traffic followed a different route which ran into default blockages in the central firewall, after the problem was found a fix was implemented to allow this traffic to the printserver via the new route.

After switching the gateway for one of our busiest vlans to our own firewalls, a lot of websites were only available from outside that vlan, it took a while to understand the issue and find a fix for it. We now have a temporary fix in place that should make the websites work again.

Due to an unfortunate manual command, the package for filemaker was removed from the server. Service was restored after the weekend, when the backup was restored.

Due to an unfortunate manual command, the package for DHZ was removed from the servers, causing all attempts to login with MFA to fail on for example roundcube and lilo ssh login. Service was restored about half an hour later when the DHZ package was installed again.

Due to a change in how the Microsoft Exchange server validates e-mail, mails sent to an @science.ru.nl address (or similar domains for which we accept e-mail) from an external domain and with a forward to your @ru.nl mail are very likely to be dropped, because the receiving server at Microsoft considers this mail forged, in the sense that the sending client did not address the same domain as the receiving domain....

After an automatic update, Mattermost no longer starts. The issue has been identified; the solution requires relocating the installation. This may take some time. Mattermost is now running on a different server as gitlab, which was a lot of work to figure out, but all should be well now. For some people it may have been longer before everything worked, due to dns caching of the hostname mattermost.science.ru.nl to the wrong address....

FNWI users have been experiencing delays in email reception since early this morning. We have been working on this issue but have not solved it yet. No emails have been lost, but we suspect certificate issues between the Science mail servers and the central RU mail filter. Update: the exact cause remains unknown. During investigations together with RU-ILS, we noticed a long-standing Certificate Chain issue. However, even after resolving this, the problem remained....

In the process of migrating our server networks to new and faster stuff, we are moving the gateways to our (C&CZ) managed firewalls. These firewalls already handle the traffic to our 25Gbit networks, while the older 1Gbit/s connected nodes had the gateway in a temporary router, which came to replace the old DR-HUYG router a few years ago. While we don’t expect too much trouble, a hiccup may occur for up to a minute or so, while the network changes are being applied....