Just to keep everyone in the loop: there have been four DDOS attacks on the portal recently, two against just port 443 and late last night (UK time) two simultaneous attacks against 443 and 25.
The first one I don't think anyone noticed (at least nothing was mentioned here), it was during the day and we mitigated it fairly quickly.
The second was more sustained and took longer to mitigate.
Last nights was the worst with our webserver and mx hosts targeted.
We actively monitor everything here, and got woken up with a text message alert last night much to my wife's dismay and spent a bleary eyed couple of hours filtering the attack.
I have no idea why anyone is targeting the portal, nor who is behind it - as per your standard DDOS the attacks they mainly came from compromised PCs on the end of home DSL lines.
@Brian - can you confirm your replicated db is still in sync as I took the portal down for a while to stop the return traffic.
Regards Chris G1FEF
On 14 Apr 2017, at 23:13, Brian Kantor Brian@UCSD.Edu wrote:
(Please trim inclusions from previous messages) _______________________________________________ The portal has apparently crashed. I have no way to remotely restart it, so it'll probably be down all night until Chris wakes up and can take a look at it.
- Brian
44Net mailing list 44Net@hamradio.ucsd.edu http://hamradio.ucsd.edu/mailman/listinfo/44net