On Fri, 1 Nov 2024, John Hardin wrote:

On Thu, 31 Oct 2024, Bill Cole wrote:

 For the past few days we've had alerts out of the Rule QA subsystem that
 indicate a lack of current "masscheck" results for running the nightly
 rescore.

 I'm not sure what is going on here, and it is not an emergency situation,
 as SA active rules and scores don't really change a great deal from one
 day to the next. Anyone submitting masscheck results who can share a
 sender-side view of whatever is going on is urged to do so.

No errors in my masscheck submissions.

I'm trying to ssh into sa-vm.apache.org now to take a look but it's being **very** sluggish and isn't completing the public key check process before something times out and disconnects me...


Nope, no joy getting logged in via ssh after repeated attempts.

This box also hosts the ruleqa website, and that's been DDoS'd before. Perhaps there's another DDoS attack that's causing the webserver to swamp the CPU? Or maybe a DDoS against sshd?

I don't remember what we did last time - were mitigations put in place to prevent that happening again?


--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org                         pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  "Bother," said Pooh as he struggled with /etc/sendmail.cf, "it never
  does quite what I want. I wish Christopher Robin was here."
                                           -- Peter da Silva in a.s.r
-----------------------------------------------------------------------
 2 days until Daylight Saving Time ends in U.S. - Fall Back
  Getting an extra hour of 2024 is like
  getting a free bonus track on a Yoko Ono album.

Reply via email to