SSL 3.0 and older disabled

Effective immediately, all hireahit.com servers will no longer accept SSL 3.0. We have also shuffled our cyphers to prioritize cyphers that include Perfect Forward Secrecy

In general, this means that for HTTPS sites, clients running XP and Internet Explorer 6 will no longer be able to connect. Upgrading to a newer browser on XP, or upgrading to a supported, non-legacy operating system, will allow users to continue accessing HTTPS websites.

HTTP connections will not see any changes, and XP+IE6 users will still be able to access websites.

This change applies not only to web, but also email and other services which use encryption. If you still use XP and have only IE6 installed, you may experience difficulties checking email, if this is the case, please upgrade to a newer version of Internet Explorer as this will update your schannel encryption libraries and will allow your non-web browser services to connect.

As always, please contact support if you have any questions.

WordPress 4.0

Just a quick update about our managed WordPress platform: We have been testing WordPress 4.0 and are ready to upgrade all managed sites to WordPress 4.0.

Each site will go offline for approximately 30-45 seconds, and sites that have enabled HTTP caching will have their cache cleared. You will need to re-authenticate to the management console, and your database will be upgraded upon administrator login.

For more details on the changes, see the WordPress 4.0 announcement.

As always, contact us if you have any questions.

Web server outage resolved

The primary web server went offline earlier this morning, the problem has now been resolved.

The cause was a corrupted config file, steps will be taken to ensure this doesn’t happen again.

We apologize for the inconvenience.

Mail server – Strong passwords required

Effective immediately, we have changed the rules for changing passwords for mail server accounts. In order to create an account, or change an existing account’s password, a password must meet the following criteria:

  • A minimum of 6 characters (longer is recommended)
  • Contain at least one upper case letter, lower case letter, and number.
  • Not contain the full name or mailbox.
  • Not match a list of very common/passwords.
  • Not match any of the passwords recently used by that account.

This will not affect accounts that already exist, even if you have a terribly weak password, you can continue using it for the moment. However, we will be starting to require password changes for accounts with extremely weak passwords, when this happens, you’ll be prompted to change your password on the next login.

If you have any questions, please contact support.

Email password CaSe Sensitivity

We recently discovered that not all passwords on our email server had case sensitivity enforced correctly. The result was that, depending on the particular protocol and client or device being used, passwords were sometimes case sensitive, and sometimes case insensitive.

This issue has now been resolved and all passwords are case sensitive.

If you’re suddenly unable to access your account, please contact us, we can reset your password to be all lower-case letters and then allow you to change it back to whatever password you’d like.

If you need assistance, please submit a ticket.

Scheduled maintenance on mail server – COMPLETED

The previously mentioned maintenance is now complete, and mail is flowing normally again.

Mail from the backup mail server may take up to an hour to arrive, but we have confirmed that mail delivery has started. If you see any remaining issues, please open a support ticket for assistance.

Thanks for your patience during this migration, we expect the resulting network stability will be worth the hassle.

Scheduled maintenance on mail server

Just a quick reminder that today’s scheduled maintenance window for the primary mail server is beginning at approximately 18:00 (6pm) pacific time.

For more information, see the original post at 2014-08-12 – Upcoming mail server outage

This will impact all SMTP, POP3, IMAP, ActiveSync, SyncML, archiving and web mail access. We have taken steps to ensure that no inbound mail will be lost, mail will be queued and delivered once the primary mail server is up and running again.

2014-08-12 – Upcoming mail server outage

The datacenter where our primary mail server is hosted has notified us that our server is being migrated to a new facility. Beginning August 12th at 6PM Pacific Daylight Time, the mail server will be shut down to be physically moved to a new location. There will be no change to assigned IP addresses, hostnames or similar.

This was previously scheduled for August 1st, and was rescheduled for August 12th.

We have taken precautions with additional off-server and off-site backups, and deployed a backup mail server which will accept and hold mail for the duration of the outage, so we do not expect any mail to be lost or misdirected during the outage.

The total amount of downtime experienced by each server will vary based on its location in our current facility, but we expect that most systems will be down for no more than 4 hours, and that the greatest impact should not exceed a maximum of 8 hours.

If you have any questions or concerns, please open a support ticket. Note that our support ticket system will be functional during the outage, however, you may not receive email notifications.

 

2014-08-01 – Mail server outage postponed

We have received word from our provider that the mail server move is not going to proceed today, and will be rescheduled for an unknown date in the future.

More information will be posted as it becomes available.

2014-08-01 – Upcoming mail server outage

The datacenter where our primary mail server is hosted has notified us that our server is being migrated to a new facility. Beginning August 1st at 6PM Pacific Daylight Time, the mail server will be shut down to be physically moved to a location. There will be no change to assigned IP addresses, hostnames or similar.

We have taken precautions with additional off-server and off-site backups, and deployed a backup mail server which will accept and hold mail for the duration of the outage, so we do not expect any mail to be lost or misdirected during the outage.

The total amount of downtime experienced by each server will vary based on its location in our current facility, but we expect that most systems will be down for no more than 4 hours, and that the greatest impact should not exceed a maximum of 8 hours.

If you have any questions or concerns, please open a support ticket. Note that our support ticket system will be functional during the outage, however, you may not receive email notifications.