From: Rui DeSousa <rui@crazybean.net>
To: Lynn Carol Johnson <lcj34@cornell.edu>
Cc: pgsql-admin@lists.postgresql.org <pgsql-admin@lists.postgresql.org>
Subject: Re: Postgres dying after many failed logins
Date: Mon, 8 Nov 2021 12:33:27 -0500
Message-ID: <A5BC5082-07CE-485A-B684-4B3127CCB76A@crazybean.net> (raw)
In-Reply-To: <58143128-71A6-4C51-9BCD-35105A385FA8@cornell.edu>
References: <58143128-71A6-4C51-9BCD-35105A385FA8@cornell.edu>
> On Nov 8, 2021, at 7:45 AM, Lynn Carol Johnson <lcj34@cornell.edu> wrote:
>
> 2021-11-05 14:35:09.197 UTC [1451469] LOG: received smart shutdown request
> 2021-11-05 14:35:09.222 UTC [1451660] postgres@breedbase FATAL: terminating connection due to administrator command
That does not look like PostgreSQL crashed but is being shutdown by RDS services due to a DOS attack.
Two things;
1. A firewall should be blocking the incoming rouge traffic to protect the given server; otherwise the system is open to a DOS attack.
2. Why is PostgreSQL accessible on the internet? Normally DB servers are at least 3 deep from the internet and only internal trusted nodes should be connecting to the database.
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: rui@crazybean.net, lcj34@cornell.edu, pgsql-admin@lists.postgresql.org
Subject: Re: Postgres dying after many failed logins
In-Reply-To: <A5BC5082-07CE-485A-B684-4B3127CCB76A@crazybean.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox