Re: service issues: git protocol for git.linaro.org

2016-09-15 Thread Dave Pigott 
> On 14 Sep 2016, at 17:26, Andy Doan  wrote:
> 
> On 09/14/2016 11:03 AM, Vishal Bhoj wrote:
>> Hi Andy,
>> 
>> This will affect our old releases where manifests use git protocol to
>> pull the code.
> 
> We are currently just blocking on offending IPs and monitoring the
> situation.

This explains a host of Lab problems yesterday afternoon.

Dave



signature.asc
Description: Message signed with OpenPGP using GPGMail
___
linaro-dev mailing list
linaro-dev@lists.linaro.org
https://lists.linaro.org/mailman/listinfo/linaro-dev

Re: service issues: git protocol for git.linaro.org

2016-09-14 Thread Andy Doan 
On 09/14/2016 11:03 AM, Vishal Bhoj wrote:
> Hi Andy,
> 
> This will affect our old releases where manifests use git protocol to
> pull the code.

We are currently just blocking on offending IPs and monitoring the
situation.

___
linaro-dev mailing list
linaro-dev@lists.linaro.org
https://lists.linaro.org/mailman/listinfo/linaro-dev

Re: service issues: git protocol for git.linaro.org

2016-09-14 Thread G Gregory 
On 14 September 2016 at 15:33, Andy Doan  wrote:

> The Linaro git appear to be getting some very suspicious traffic on our
> git protocol port. Its causing our servers to fail and effectively DOS
> us. We are currently trying to block offending IPs. However, the number
> of malicious IPs is growing and we may have to shut off the git protocol
> daemon on our servers while we find a way to prevent this.
>
> If you are using the "smart" protocol, https://git.linaro.org/ you
> will not be affected. If you aren't using the smart protocol, it might
> be a good time to consider updating your .git/config files.
>
> I guess the DOS explains the permission denied I was getting on https and
ssh ports earlier then.

Graeme
___
linaro-dev mailing list
linaro-dev@lists.linaro.org
https://lists.linaro.org/mailman/listinfo/linaro-dev

service issues: git protocol for git.linaro.org

2016-09-14 Thread Andy Doan 
The Linaro git appear to be getting some very suspicious traffic on our
git protocol port. Its causing our servers to fail and effectively DOS
us. We are currently trying to block offending IPs. However, the number
of malicious IPs is growing and we may have to shut off the git protocol
daemon on our servers while we find a way to prevent this.

If you are using the "smart" protocol, https://git.linaro.org/ you
will not be affected. If you aren't using the smart protocol, it might
be a good time to consider updating your .git/config files.

-andy
___
linaro-dev mailing list
linaro-dev@lists.linaro.org
https://lists.linaro.org/mailman/listinfo/linaro-dev