The portal has apparently crashed. I have no way to remotely restart it, so it'll probably be down all night until Chris wakes up and can take a look at it. - Brian
On 4/14/17 6:13 PM, Brian Kantor wrote:
(Please trim inclusions from previous messages) _______________________________________________ The portal has apparently crashed. I have no way to remotely restart it, so it'll probably be down all night until Chris wakes up and can take a look at it.
Perhaps Chris can chime in; was this developed on the company's dime as well?
If not, lets open source it.
Instead of this debate -- why not spec what the software does and start an open source project to replicate its functionality.
Because the work has already has already been done. Might as well focus efforts on improving it rather than rewriting it, uncles the code base is in a really bad state.
Andrew
On Apr 14, 2017, at 4:33 PM, K7VE - John k7ve@k7ve.org wrote:
(Please trim inclusions from previous messages) _______________________________________________ Instead of this debate -- why not spec what the software does and start an open source project to replicate its functionality.
--
John D. Hays K7VE PO Box 1223, Edmonds, WA 98020-1223 http://k7ve.org/blog http://twitter.com/#!/john_hays http://www.facebook.com/john.d.hays
Just to keep everyone in the loop: there have been four DDOS attacks on the portal recently, two against just port 443 and late last night (UK time) two simultaneous attacks against 443 and 25.
The first one I don't think anyone noticed (at least nothing was mentioned here), it was during the day and we mitigated it fairly quickly.
The second was more sustained and took longer to mitigate.
Last nights was the worst with our webserver and mx hosts targeted.
We actively monitor everything here, and got woken up with a text message alert last night much to my wife's dismay and spent a bleary eyed couple of hours filtering the attack.
I have no idea why anyone is targeting the portal, nor who is behind it - as per your standard DDOS the attacks they mainly came from compromised PCs on the end of home DSL lines.
@Brian - can you confirm your replicated db is still in sync as I took the portal down for a while to stop the return traffic.
Regards Chris G1FEF
On 14 Apr 2017, at 23:13, Brian Kantor Brian@UCSD.Edu wrote:
(Please trim inclusions from previous messages) _______________________________________________ The portal has apparently crashed. I have no way to remotely restart it, so it'll probably be down all night until Chris wakes up and can take a look at it.
- Brian
44Net mailing list 44Net@hamradio.ucsd.edu http://hamradio.ucsd.edu/mailman/listinfo/44net
I believe it is still in sync; the replication process automatically restarts when the portal goes down and comes back up. - Brian
On Sat, Apr 15, 2017 at 09:09:01AM +0100, Chris via 44Net wrote:
@Brian - can you confirm your replicated db is still in sync as I took the portal down for a while to stop the return traffic.
ALL,
I just read some messages from Chris, and I think I can better accept the odd behavior of my portal. It appears it is up, but I'd like to review Chris' messages and other in this thread before I respond or configure further...............!
Remember...I have netflow data...
- Lynwood
Is the portal down again? I went to approve an allocation request that came in earlier this weekend and I'm getting host timed out/connection reset.
On Tue, Apr 18, 2017 at 9:44 PM, lleachii--- via 44Net 44net@hamradio.ucsd.edu wrote:
(Please trim inclusions from previous messages) _______________________________________________ ALL,
I just read some messages from Chris, and I think I can better accept the odd behavior of my portal. It appears it is up, but I'd like to review Chris' messages and other in this thread before I respond or configure further...............!
Remember...I have netflow data...
- Lynwood
44Net mailing list 44Net@hamradio.ucsd.edu http://hamradio.ucsd.edu/mailman/listinfo/44net
I assume it's wedged again, as although I can connect, I can't get it to respond either. - Brian
On Sun, Apr 30, 2017 at 12:07:24AM -0400, Rial Sloan wrote:
Is the portal down again? I went to approve an allocation request that came in earlier this weekend and I'm getting host timed out/connection reset.
Back online now: the ongoing DDOS attack had caused the server to run out of memory before I could block the attacking IPs. I’m currently filtering over 5,000 IPs. I do hope they get bored soon!
Chris
On 30 Apr 2017, at 05:09, Brian Kantor Brian@UCSD.Edu wrote:
(Please trim inclusions from previous messages) _______________________________________________ I assume it's wedged again, as although I can connect, I can't get it to respond either.
- Brian
On Sun, Apr 30, 2017 at 12:07:24AM -0400, Rial Sloan wrote:
Is the portal down again? I went to approve an allocation request that came in earlier this weekend and I'm getting host timed out/connection reset.
44Net mailing list 44Net@hamradio.ucsd.edu http://hamradio.ucsd.edu/mailman/listinfo/44net
Thank you again for your efforts in this situation! - Brian
On Sun, Apr 30, 2017 at 08:16:43AM +0100, G1FEF via 44Net wrote:
Back online now: the ongoing DDOS attack had caused the server to run out of memory before I could block the attacking IPs. I’m currently filtering over 5,000 IPs. I do hope they get bored soon!
Chris
Hello,
... and thank's too to you, Brian.
:)
73's de Ludovic - F5PBG http://ampr.org.free.fr
Le 30/04/2017 à 12:40, Brian Kantor a écrit :
Thank you again for your efforts in this situation!
- Brian
On Sun, Apr 30, 2017 at 08:16:43AM +0100, G1FEF via 44Net wrote:
Back online now: the ongoing DDOS attack had caused the server to run out of memory before I could block the attacking IPs. I’m currently filtering over 5,000 IPs. I do hope they get bored soon!
Chris
Sorry to hear this. Maybe we should start sharing block lists.
Sent from BlueMail
On 30 Apr 2017, 11:18, at 11:18, G1FEF via 44Net 44net@hamradio.ucsd.edu wrote:
(Please trim inclusions from previous messages) _______________________________________________ Back online now: the ongoing DDOS attack had caused the server to run out of memory before I could block the attacking IPs. I’m currently filtering over 5,000 IPs. I do hope they get bored soon!
Chris
On 30 Apr 2017, at 05:09, Brian Kantor Brian@UCSD.Edu wrote:
(Please trim inclusions from previous messages) _______________________________________________ I assume it's wedged again, as although I can connect, I can't get it to respond either.
- Brian
On Sun, Apr 30, 2017 at 12:07:24AM -0400, Rial Sloan wrote:
Is the portal down again? I went to approve an allocation request
that
came in earlier this weekend and I'm getting host timed
out/connection
reset.
44Net mailing list 44Net@hamradio.ucsd.edu http://hamradio.ucsd.edu/mailman/listinfo/44net
44Net mailing list 44Net@hamradio.ucsd.edu http://hamradio.ucsd.edu/mailman/listinfo/44net
-
Andrew Ragone -
Brian Kantor -
Bryan Fields -
Chris -
f5pbg＠free.fr -
G1FEF
-
K7VE - John -
lleachii＠aol.com -
Marc -
Rial Sloan