14 Apr
2017
14 Apr
'17
11:13 p.m.
The portal has apparently crashed. I have no way to remotely
restart it, so it'll probably be down all night until Chris
wakes up and can take a look at it.
- Brian
14 Apr
14 Apr
11:16 p.m.
On 4/14/17 6:13 PM, Brian Kantor wrote:
(Please trim inclusions from previous messages)
_______________________________________________
The portal has apparently crashed. I have no way to remotely
restart it, so it'll probably be down all night until Chris
wakes up and can take a look at it.
Perhaps Chris can chime in; was this developed on the company's dime as well?
If not, lets open source it.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
11:32 p.m.
Instead of this debate -- why not spec what the software does and start an
open source project to replicate its functionality.
--
------------------------------
John D. Hays
K7VE
PO Box 1223, Edmonds, WA 98020-1223
<http://k7ve.org/blog> <http://twitter.com/#!/john_hays>
<http://www.facebook.com/john.d.hays>
15 Apr
15 Apr
midnight
Because the work has already has already been done. Might as well
focus efforts on improving it rather than rewriting it, uncles the
code base is in a really bad state.
Andrew
> On Apr 14, 2017, at 4:33 PM, K7VE - John <k7ve(a)k7ve.org> wrote:
>
> (Please trim inclusions from previous messages)
> _______________________________________________
> Instead of this debate -- why not spec what the software does and start an
> open source project to replicate its functionality.
>
>
> --
>
> ------------------------------
> John D. Hays
> K7VE
> PO Box 1223, Edmonds, WA 98020-1223
> <http://k7ve.org/blog> <http://twitter.com/#!/john_hays>
> <http://www.facebook.com/john.d.hays>
>
9:09 a.m.
Just to keep everyone in the loop: there have been four DDOS attacks on the portal
recently, two against just port 443 and late last night (UK time) two simultaneous attacks
against 443 and 25.
The first one I don't think anyone noticed (at least nothing was mentioned here), it
was during the day and we mitigated it fairly quickly.
The second was more sustained and took longer to mitigate.
Last nights was the worst with our webserver and mx hosts targeted.
We actively monitor everything here, and got woken up with a text message alert last night
much to my wife's dismay and spent a bleary eyed couple of hours filtering the
attack.
I have no idea why anyone is targeting the portal, nor who is behind it - as per your
standard DDOS the attacks they mainly came from compromised PCs on the end of home DSL
lines.
@Brian - can you confirm your replicated db is still in sync as I took the portal down for
a while to stop the return traffic.
Regards
Chris
G1FEF
On 14 Apr 2017, at 23:13, Brian Kantor
<Brian(a)UCSD.Edu> wrote:
(Please trim inclusions from previous messages)
_______________________________________________
The portal has apparently crashed. I have no way to remotely
restart it, so it'll probably be down all night until Chris
wakes up and can take a look at it.
- Brian
_________________________________________
44Net mailing list
44Net(a)hamradio.ucsd.edu
http://hamradio.ucsd.edu/mailman/listinfo/44net
10:25 a.m.
I believe it is still in sync; the replication process automatically
restarts when the portal goes down and comes back up.
- Brian
On Sat, Apr 15, 2017 at 09:09:01AM +0100, Chris via 44Net wrote:
@Brian - can you confirm your replicated db is still
in sync as I took the portal down for a while to stop the return traffic.
19 Apr
19 Apr
2:44 a.m.
ALL,
I just read some messages from Chris, and I think I can better accept
the odd behavior of my portal. It appears it is up, but I'd like to
review Chris' messages and other in this thread before I respond or
configure further...............!
Remember...I have netflow data...
- Lynwood
30 Apr
30 Apr
5:07 a.m.
Is the portal down again? I went to approve an allocation request that
came in earlier this weekend and I'm getting host timed out/connection
reset.
On Tue, Apr 18, 2017 at 9:44 PM, lleachii--- via 44Net
<44net(a)hamradio.ucsd.edu> wrote:
(Please trim inclusions from previous messages)
_______________________________________________
ALL,
I just read some messages from Chris, and I think I can better accept the
odd behavior of my portal. It appears it is up, but I'd like to review
Chris' messages and other in this thread before I respond or configure
further...............!
Remember...I have netflow data...
- Lynwood
_________________________________________
44Net mailing list
44Net(a)hamradio.ucsd.edu
http://hamradio.ucsd.edu/mailman/listinfo/44net
--
Rial F Sloan II
N0OTZ
Georgia Amateur Radio Data Network (GARDN) Administrator
AMPRNet Volunteer Coordinator - State of Georgia
5:09 a.m.
I assume it's wedged again, as although I can connect,
I can't get it to respond either.
- Brian
On Sun, Apr 30, 2017 at 12:07:24AM -0400, Rial Sloan wrote:
Is the portal down again? I went to approve an
allocation request that
came in earlier this weekend and I'm getting host timed out/connection
reset.
8:16 a.m.
Back online now: the ongoing DDOS attack had caused the server to run out of memory before
I could block the attacking IPs. I’m currently filtering over 5,000 IPs. I do hope they
get bored soon!
Chris
On 30 Apr 2017, at 05:09, Brian Kantor
<Brian(a)UCSD.Edu> wrote:
(Please trim inclusions from previous messages)
_______________________________________________
I assume it's wedged again, as although I can connect,
I can't get it to respond either.
- Brian
On Sun, Apr 30, 2017 at 12:07:24AM -0400, Rial Sloan wrote:
Is the portal down again? I went to approve an
allocation request that
came in earlier this weekend and I'm getting host timed out/connection
reset.
_________________________________________
44Net mailing list
44Net(a)hamradio.ucsd.edu
http://hamradio.ucsd.edu/mailman/listinfo/44net
11:40 a.m.
Thank you again for your efforts in this situation!
- Brian
On Sun, Apr 30, 2017 at 08:16:43AM +0100, G1FEF via 44Net wrote:
Back online now: the ongoing DDOS attack had caused
the server to run out of memory before I could block the attacking IPs. I’m currently
filtering over 5,000 IPs. I do hope they get bored soon!
Chris
12:40 p.m.
Hello,
... and thank's too to you, Brian.
:)
73's de Ludovic - F5PBG
http://ampr.org.free.fr
Le 30/04/2017 à 12:40, Brian Kantor a écrit :
_______________________________________________
Thank you again for your efforts in this situation!
- Brian
On Sun, Apr 30, 2017 at 08:16:43AM +0100, G1FEF via 44Net wrote:
> Back online now: the ongoing DDOS attack had caused the server to run out of memory
> before I could block the attacking IPs. I’m currently filtering over 5,000 IPs. I
do hope they get bored soon!
>
> Chris
1:31 p.m.
Sorry to hear this.
Maybe we should start sharing block lists.
Sent from BlueMail
On 30 Apr 2017, 11:18, at 11:18, G1FEF via 44Net <44net(a)hamradio.ucsd.edu> wrote:
(Please trim inclusions from previous messages)
_______________________________________________
Back online now: the ongoing DDOS attack had caused the server to run
out of memory before I could block the attacking IPs. I’m currently
filtering over 5,000 IPs. I do hope they get bored soon!
Chris
_________________________________________
44Net mailing list
44Net(a)hamradio.ucsd.edu
http://hamradio.ucsd.edu/mailman/listinfo/44net
On 30 Apr 2017, at 05:09, Brian Kantor
<Brian(a)UCSD.Edu> wrote:
(Please trim inclusions from previous messages)
_______________________________________________
I assume it's wedged again, as although I can connect,
I can't get it to respond either.
- Brian
On Sun, Apr 30, 2017 at 12:07:24AM -0400, Rial Sloan wrote:
> Is the portal down again? I went to approve an allocation request
that
> came in earlier this weekend and I'm
getting host timed
out/connection
reset.
_________________________________________
44Net mailing list
44Net(a)hamradio.ucsd.edu
http://hamradio.ucsd.edu/mailman/listinfo/44net
2562
days inactive
2578
days old
12 comments
10 participants
participants (10)
-
Andrew Ragone -
Brian Kantor -
Bryan Fields -
Chris -
f5pbg＠free.fr -
G1FEF
-
K7VE - John -
lleachii＠aol.com -
Marc -
Rial Sloan