BOA aegir

Yesterday and today I received ominous automated emails from BOA:
Subject:
URGENT: The xxx.com site on webxx.xxx.com has been HACKED!
Body:
Our system detected that the site xxx.com has been hacked!
Common signatures of an attack which triggered this alert:
The drush command 'drupalgeddon-test' could not be found. [error]

So I installed drupalgeddon (letter 'l' missing in title is purposeful),
drush dl drupalgeddon, and since the project recommends installing site_audit as well, I did that too.

I am continuously getting 502 nginx errors when working on modules, enabling/disabling, updating, etc.
I just ran update barracuda up-stable and octopus up-stable all both, to no avail.
In hostmaster I flushed all caches and ran helath check without major issues reported, I just have to install some minor updates to some modules.
Any idea what is causing these errors?

I want to symlink files directory as omega8cc recommends.
I have a test site at /data/disk/o1/platforms/002/drupal-7.27.1-dev.
That is what I see in filezilla and it works, because that is where I upload modules, libraries and themes, in the /all directory.
I want to move the site's files directory to static/files/mytestsite/files, and symlink back from there.
I ssh as root to one of my server's IPs and I can navigate up to platforms, here is where the problem starts because:

web01:/data/disk/o1/platforms# ls -al
total 8.0K
drwx--x--x 2 o1 users 4.0K Jan 29 10:23 ./

I can't see the footer status messages that tell me how much disk and database space my octopus instance is using. How do I activate it?

Hi,

After updating to BOA 2.1.0 today I can no longer access the main barracuda aegir admin site or my octopus aegir page. Instead it redirects to the first (alphabetically, not in order of creation) drupal web site. At first when I tried to access either they redirected to aegir.mydomain.net/install.php or o1.comp.mydomain.net/install.php and I got a 403 forbidden error. I then tried rebooting and after that it started redirecting to the first website. All other sites are working fine.