On Fri, 22 Sep 2017 at 18:54, Ravishankar N <[email protected]> wrote:
> Hello, > Are our servers still facing the overload issue? My replies to > gluster-users ML are not getting delivered to the list. > Same here. Even this is true for gluster-devel as well. > Regards, > Ravi > > > On 09/19/2017 10:03 PM, Michael Scherer wrote: > > Le samedi 16 septembre 2017 à 20:48 +0530, Nigel Babu a écrit : > > Hello folks, > > We have discovered that for the last few weeks our mailman server was > used > for a spam attack. The attacker would make use of the + feature > offered by > gmail and hotmail. If you send an email to > [email protected],[email protected], [email protected], it goes > to the same > inbox. We were constantly hit with requests to subscribe to a few > inboxes. > These requests overloaded our mail server so much that it gave up. We > detected this failure because a postmortem email [email protected] > bounced. Any emails sent to our mailman > server > may have been on hold for the last 24 hours or so. They should be > processed > now as your email provider re-attempts. > > For the moment, we've banned subscribing with an email address with a > + in > the name. If you are already subscribed to the lists with a + in your > email > address, you will continue to be able to use the lists. > > We're looking at banning the spam IP addresses from being able to hit > the > web interface at all. When we have a working alternative, we will > look at > removing the current ban of using + in address. > > So we have a alternative in place, I pushed a blacklist using > mod_security and a few DNS > blacklist:https://github.com/gluster/gluster.org_ansible_configuration/commit/2f4 > c1b8feeae16e1d0b7d6073822a6786ed21dde > > > > > > Apologies for the outage and a big shout out to Michael for taking > time out > of his weekend to debug and fix the issue. > > Well, you can thanks the airport in Prague for being less interesting > than a spammer attacking us. > > > > > _______________________________________________ > Gluster-users mailing > [email protected]http://lists.gluster.org/mailman/listinfo/gluster-users > > > _______________________________________________ > Gluster-users mailing list > [email protected] > http://lists.gluster.org/mailman/listinfo/gluster-users -- - Atin (atinm)
_______________________________________________ Gluster-users mailing list [email protected] http://lists.gluster.org/mailman/listinfo/gluster-users
