We have now made the shutdown. Server thus unreachable.

After 48 hours of further observation, we could not detect any new errors or other problems. Incident is hereby closed.

After more than 24 hours, we could not find the error. We removed the redirection route, as no mailboxes were accessible.

We set up our incoming mail server again and removed the redirection route. So that actually the delivery of emails to our mailboxes should be running again. Some tests are currently still running, partly we could conditionally reach our mailboxes from external services.

In the meantime, our team management interface is available again. The reason for this was already known and was due to a misconfigured file. However, restrictions are still to be expected there as well.

The telephone system is partially back in operation, a complete functionality can not yet be guaranteed - because our internal network seems to be very busy. This should resolve itself within the next few hours. Starting tomorrow, we expect full availability within our business hours.

We set up redirection for incoming emails. It can take up to 24 hours for the redirection to be properly active due to DNS changes. The telephone system has been given a reputation by the provider, so that an older status results. However, we do not yet know how it looks in the part.

We could not find any other circumstantial evidence. The incident is therefore closed.

Monitoring could not detect any other abnormalities after 15 minutes.

Unless another infection appears after two hours, the incident is automatically closed.