Re: Fwd: Undeliverable: confirm 286441e8a96ed0284e7691c2ef4d59dee8c9cbfc

[Eyal Edri]

On Wed, Aug 16, 2017 at 5:26 AM, Karsten Wade  wrote:

>
>
> On 08/13/2017 12:18 AM, Barak Korren wrote:
> > On 13 August 2017 at 10:02, Eyal Edri  wrote:
> >
> >>
> >>
> >> Hi,
> >> To be honest, Duck is probably the person to ask about oVirt lists,
> >> especially ones that are not common,
>
> Duck is at DebConf 17 through the rest of this week so is unable to
> respond to more than emergency/urgent requests.
>
> >> I don't recall ever using the 'mailman' list or anyone else in the past
> >> few years, so I'm OK with disabling it for now.
> >>
> >
> > Its not the mailman list, its the ovirt-security list.
> >
> > I suppose the purpose of this list was to publish security notices? Not
> > sure, I've never seem any non-spam messages sent to it.
>
> Can you show me an example of what you are seeing?
>
> I presume you mean security@ or security-private@ lists as there is no
> ovirt-security@ list that I've seen or know of.
>
> I'm not an admin for secur...@ovirt.org any longer so I would not be
> receiving these confirmation floods.
>
> I am the only admin for mailman@ as a vestige of having setup and run
> the initial Mailman server and mailing lists as part of open sourcing
> the project.
>
> I suspect that >1 lists are seeing this activity. It has a pattern but
> not one that I can easily see how to make a regexp or algorithm from.
>
> Since I think the mailman@ list is not used by anyone other than Mailman
> itself (and sporadically at that), I'm going to disable subscriptions
> and at least stop this problem for myself.
>
> But that won't stop it for other list admins, so ... more suggestions or
> actions would be helpful. I'm a bit stumped.
>


Hi,
I was able to find the list [1] and remove you from the admin list, so you
shouldn't get any more emails.
Once duck is back we can probably just remove it, I don't think anyone is
using it.


[1] http://lists.phx.ovirt.org/mailman/admin/mailman/


>
> - Karsten
> --
> Karsten Wade
> Community Infrastructure Team : https://osci.io
> Red Hat Open Source and Standards (OSAS) : @redhatopen
> @quaid gpg: AD0E0C41
>
>


-- 

Eyal edri


ASSOCIATE MANAGER

RHV DevOps

EMEA VIRTUALIZATION R


Red Hat EMEA 
 TRIED. TESTED. TRUSTED. 
phone: +972-9-7692018
irc: eedri (on #tlv #rhev-dev #rhev-integ)
___
Infra mailing list
Infra@ovirt.org
http://lists.ovirt.org/mailman/listinfo/infra

Re: Fwd: Undeliverable: confirm 286441e8a96ed0284e7691c2ef4d59dee8c9cbfc

[Karsten Wade]

On 08/13/2017 12:18 AM, Barak Korren wrote:
> On 13 August 2017 at 10:02, Eyal Edri  wrote:
> 
>>
>>
>> Hi,
>> To be honest, Duck is probably the person to ask about oVirt lists,
>> especially ones that are not common,

Duck is at DebConf 17 through the rest of this week so is unable to
respond to more than emergency/urgent requests.

>> I don't recall ever using the 'mailman' list or anyone else in the past
>> few years, so I'm OK with disabling it for now.
>>
> 
> Its not the mailman list, its the ovirt-security list.
> 
> I suppose the purpose of this list was to publish security notices? Not
> sure, I've never seem any non-spam messages sent to it.

Can you show me an example of what you are seeing?

I presume you mean security@ or security-private@ lists as there is no
ovirt-security@ list that I've seen or know of.

I'm not an admin for secur...@ovirt.org any longer so I would not be
receiving these confirmation floods.

I am the only admin for mailman@ as a vestige of having setup and run
the initial Mailman server and mailing lists as part of open sourcing
the project.

I suspect that >1 lists are seeing this activity. It has a pattern but
not one that I can easily see how to make a regexp or algorithm from.

Since I think the mailman@ list is not used by anyone other than Mailman
itself (and sporadically at that), I'm going to disable subscriptions
and at least stop this problem for myself.

But that won't stop it for other list admins, so ... more suggestions or
actions would be helpful. I'm a bit stumped.

- Karsten
-- 
Karsten Wade
Community Infrastructure Team : https://osci.io
Red Hat Open Source and Standards (OSAS) : @redhatopen
@quaid gpg: AD0E0C41



signature.asc
Description: OpenPGP digital signature
___
Infra mailing list
Infra@ovirt.org
http://lists.ovirt.org/mailman/listinfo/infra

Re: Fwd: Undeliverable: confirm 286441e8a96ed0284e7691c2ef4d59dee8c9cbfc

[Barak Korren]

On 13 August 2017 at 10:02, Eyal Edri  wrote:

>
>
> Hi,
> To be honest, Duck is probably the person to ask about oVirt lists,
> especially ones that are not common,
> I don't recall ever using the 'mailman' list or anyone else in the past
> few years, so I'm OK with disabling it for now.
>

Its not the mailman list, its the ovirt-security list.

I suppose the purpose of this list was to publish security notices? Not
sure, I've never seem any non-spam messages sent to it.

-- 
Barak Korren
RHV DevOps team , RHCE, RHCi
Red Hat EMEA
redhat.com | TRIED. TESTED. TRUSTED. | redhat.com/trusted
___
Infra mailing list
Infra@ovirt.org
http://lists.ovirt.org/mailman/listinfo/infra

Re: Fwd: Undeliverable: confirm 286441e8a96ed0284e7691c2ef4d59dee8c9cbfc

[Eyal Edri]

On Sat, Aug 12, 2017 at 12:30 AM, Karsten Wade  wrote:

> On 08/09/2017 09:39 AM, Michael Scherer wrote:
> > Le mardi 08 août 2017 à 12:49 -0700, Karsten Wade a écrit :
> >> Misc & Duck:
> >>
> >> This is what has been flowing sporadically for the last few days (~590
> >> messages so far).
> >>
> >> It appears to be a full mailbox and continuous subscription requests by
> >> a small set of possibly autogenerated email accounts?
> >>
> >> squ...@live.com
> >> sqoon...@live.com
> >> squoon+uj...@live.com
> >>
> >> Is there anything we can do other than blacklisting an entire domain?
> >> Maybe tell mailman to auto-reject anything from sq.*@live.com?
> >
> > It can be done also on postfix directly.
>
> Being that this is stuck behind an ssh access situation, I don't really
> care either way. Appears I'm the only admin so I'm the one getting a few
> dozen of these (or more) a day in the past week.
>
> Looking at the mailman@ list, there are a few subscribers, the archives
> all seem to be nightly gzips and send digests. The last archive was
> middle of May 2017. There are a number of regexp setups to ban gmail.com
> and usc.edu memberships. I never put those in place.
>
> From what I can tell, I've never actually received email from this list.
>
> So I'm unclear what it's purpose is. I vaguely recall that it might be a
> standard list or conceptually is where all Mailman admins discuss admin
> and usage of the Mailman instance.
>
> Any other clues about this list might help to figure out what the best
> thing to do with it is. And also to figure out why it stopped archiving
> and/or sending in May. Archives are a bit sporadic but seemed to kick
> back in in Oct 2015:
>
> http://lists.ovirt.org/pipermail/mailman/
>
> - Karsten
>
>
Hi,
To be honest, Duck is probably the person to ask about oVirt lists,
especially ones that are not common,
I don't recall ever using the 'mailman' list or anyone else in the past few
years, so I'm OK with disabling it for now.



>
>
> > But I can't seems to connect to the list server with ssh, and if there
> > is a specific bastion, I can't find it in the wiki or on read the doc,
> > or on looking on the ansible infra repository.
> >
> >
> >> - Karsten
> >>
> >>  Forwarded Message 
> >> Subject: Undeliverable: confirm 286441e8a96ed0284e7691c2ef4d59
> dee8c9cbfc
> >> Date: Tue, 8 Aug 2017 19:39:52 +
> >> From: postmas...@outlook.com
> >> To: mailman-boun...@ovirt.org
> >>
> >> Delivery has failed to these recipients or groups:
> >>
> >> squoon+uj...@live.com
> >> The recipient's mailbox is full and can't accept messages now. Please
> >> try resending your message later, or contact the recipient directly.
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >> Diagnostic information for administrators:
> >>
> >> Generating server: SN1NAM04HT150.mail.protection.outlook.com
> >>
> >> squoon+uj...@live.com
> >> Remote Server returned '554 5.2.2 mailbox full;
> >> STOREDRV.Deliver.Exception:QuotaExceededException.
> MapiExceptionShutoffQuotaExceeded;
> >> Failed to process message due to a permanent exception with message
> >> Cannot get ID from name. 16.55847:5C06,
> >> 17.43559:8C00,
> >> 20.52176:010F28854010F103, 20.50032:010F288581171031,
> >> 0.35180:, 255.23226:, 255.27962:5600,
> >> 255.17082:B904, 0.16993:1400, 4.21921:B904,
> >> 255.31418:80030400, 0.22753:80030400, 255.21817:B904,
> >> 0.37224:, 4.40808:DD04, 0.24529:382D3763, 4.18385:DD04,
> >> 0.36864:30303030, 4.37120:DD04 [Stage: CreateMessage]'
> >>
> >> Original message headers:
> >>
> >> Received: from SN1NAM04FT057.eop-NAM04.prod.protection.outlook.com
> >>  (10.152.88.58) by SN1NAM04HT150.eop-NAM04.prod.protection.outlook.com
> >>  (10.152.89.108) with Microsoft SMTP Server (version=TLS1_2,
> >>  cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1304.16;
> Tue, 8
> >>  Aug 2017 19:39:51 +
> >> Authentication-Results: spf=pass (sender IP is 66.187.230.42)
> >>  smtp.mailfrom=ovirt.org; live.com; dkim=none (message not signed)
> >>  header.d=none;live.com; dmarc=bestguesspass action=none
> >>  header.from=ovirt.org;
> >> Received-SPF: Pass (protection.outlook.com: domain of ovirt.org
> designates
> >>  66.187.230.42 as permitted sender) receiver=protection.outlook.com;
> >>  client-ip=66.187.230.42; helo=lists.ovirt.org;
> >> Received: from lists.ovirt.org (66.187.230.42) by
> >>  SN1NAM04FT057.mail.protection.outlook.com (10.152.89.46) with
> Microsoft
> >> SMTP
> >>  Server (version=TLS1_2,
> >> cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
> >>  15.1.1304.16 via Frontend Transport; Tue, 8 Aug 2017 19:39:51 +
> >> X-IncomingTopHeaderMarker:
> >> OriginalChecksum:670AE6CBE67B8F6196CDCA9540645F
> 94DBB16ACB7B477495BC4FDD8363FE1F1C;UpperCasedChecksum:
> CAC99FB831F3ACA5FA7FC966D2A02AE20A64E35E2F5E2A1D4B01A6A94DBE
> 

Re: Fwd: Undeliverable: confirm 286441e8a96ed0284e7691c2ef4d59dee8c9cbfc

[Karsten Wade]

On 08/09/2017 09:39 AM, Michael Scherer wrote:
> Le mardi 08 août 2017 à 12:49 -0700, Karsten Wade a écrit :
>> Misc & Duck:
>>
>> This is what has been flowing sporadically for the last few days (~590
>> messages so far).
>>
>> It appears to be a full mailbox and continuous subscription requests by
>> a small set of possibly autogenerated email accounts?
>>
>> squ...@live.com
>> sqoon...@live.com
>> squoon+uj...@live.com
>>
>> Is there anything we can do other than blacklisting an entire domain?
>> Maybe tell mailman to auto-reject anything from sq.*@live.com?
> 
> It can be done also on postfix directly. 

Being that this is stuck behind an ssh access situation, I don't really
care either way. Appears I'm the only admin so I'm the one getting a few
dozen of these (or more) a day in the past week.

Looking at the mailman@ list, there are a few subscribers, the archives
all seem to be nightly gzips and send digests. The last archive was
middle of May 2017. There are a number of regexp setups to ban gmail.com
and usc.edu memberships. I never put those in place.

From what I can tell, I've never actually received email from this list.

So I'm unclear what it's purpose is. I vaguely recall that it might be a
standard list or conceptually is where all Mailman admins discuss admin
and usage of the Mailman instance.

Any other clues about this list might help to figure out what the best
thing to do with it is. And also to figure out why it stopped archiving
and/or sending in May. Archives are a bit sporadic but seemed to kick
back in in Oct 2015:

http://lists.ovirt.org/pipermail/mailman/

- Karsten



> But I can't seems to connect to the list server with ssh, and if there
> is a specific bastion, I can't find it in the wiki or on read the doc,
> or on looking on the ansible infra repository. 
> 
> 
>> - Karsten
>>
>>  Forwarded Message 
>> Subject: Undeliverable: confirm 286441e8a96ed0284e7691c2ef4d59dee8c9cbfc
>> Date: Tue, 8 Aug 2017 19:39:52 +
>> From: postmas...@outlook.com
>> To: mailman-boun...@ovirt.org
>>
>> Delivery has failed to these recipients or groups:
>>
>> squoon+uj...@live.com
>> The recipient's mailbox is full and can't accept messages now. Please
>> try resending your message later, or contact the recipient directly.
>>
>>
>>
>>
>>
>>
>>
>>
>> Diagnostic information for administrators:
>>
>> Generating server: SN1NAM04HT150.mail.protection.outlook.com
>>
>> squoon+uj...@live.com
>> Remote Server returned '554 5.2.2 mailbox full;
>> STOREDRV.Deliver.Exception:QuotaExceededException.MapiExceptionShutoffQuotaExceeded;
>> Failed to process message due to a permanent exception with message
>> Cannot get ID from name. 16.55847:5C06,
>> 17.43559:8C00,
>> 20.52176:010F28854010F103, 20.50032:010F288581171031,
>> 0.35180:, 255.23226:, 255.27962:5600,
>> 255.17082:B904, 0.16993:1400, 4.21921:B904,
>> 255.31418:80030400, 0.22753:80030400, 255.21817:B904,
>> 0.37224:, 4.40808:DD04, 0.24529:382D3763, 4.18385:DD04,
>> 0.36864:30303030, 4.37120:DD04 [Stage: CreateMessage]'
>>
>> Original message headers:
>>
>> Received: from SN1NAM04FT057.eop-NAM04.prod.protection.outlook.com
>>  (10.152.88.58) by SN1NAM04HT150.eop-NAM04.prod.protection.outlook.com
>>  (10.152.89.108) with Microsoft SMTP Server (version=TLS1_2,
>>  cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1304.16; Tue, 8
>>  Aug 2017 19:39:51 +
>> Authentication-Results: spf=pass (sender IP is 66.187.230.42)
>>  smtp.mailfrom=ovirt.org; live.com; dkim=none (message not signed)
>>  header.d=none;live.com; dmarc=bestguesspass action=none
>>  header.from=ovirt.org;
>> Received-SPF: Pass (protection.outlook.com: domain of ovirt.org designates
>>  66.187.230.42 as permitted sender) receiver=protection.outlook.com;
>>  client-ip=66.187.230.42; helo=lists.ovirt.org;
>> Received: from lists.ovirt.org (66.187.230.42) by
>>  SN1NAM04FT057.mail.protection.outlook.com (10.152.89.46) with Microsoft
>> SMTP
>>  Server (version=TLS1_2,
>> cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
>>  15.1.1304.16 via Frontend Transport; Tue, 8 Aug 2017 19:39:51 +
>> X-IncomingTopHeaderMarker:
>> OriginalChecksum:670AE6CBE67B8F6196CDCA9540645F94DBB16ACB7B477495BC4FDD8363FE1F1C;UpperCasedChecksum:CAC99FB831F3ACA5FA7FC966D2A02AE20A64E35E2F5E2A1D4B01A6A94DBEE66D;SizeAsReceived:748;Count:17
>> Received: from lists.phx.ovirt.org (localhost [127.0.0.1])
>> by lists.ovirt.org (Postfix) with ESMTP id 0286A8207B0
>> for ; Tue,  8 Aug 2017 19:39:51 + (UTC)
>> MIME-Version: 1.0
>> Content-Type: text/plain; charset="us-ascii"
>> Content-Transfer-Encoding: 7bit
>> From: 
>> To: 
>> Subject: confirm 286441e8a96ed0284e7691c2ef4d59dee8c9cbfc
>> Reply-To: 
>> Message-ID: 

Re: Fwd: Undeliverable: confirm 286441e8a96ed0284e7691c2ef4d59dee8c9cbfc

[Barak Korren]

>>
>> Yeah we have OpenVPN setup to grant access to PHX servers if you're
>> not behind the Red Hat firewall.
>
> It also fail from inside the firewall using my system in the Paris
> office.
>
Please ask Evgheni to setup VPN access for you.

(He is addressed in this message, or you can email to infra-supp...@ovirt.org)

-- 
Barak Korren
RHV DevOps team , RHCE, RHCi
Red Hat EMEA
redhat.com | TRIED. TESTED. TRUSTED. | redhat.com/trusted
___
Infra mailing list
Infra@ovirt.org
http://lists.ovirt.org/mailman/listinfo/infra

Re: Fwd: Undeliverable: confirm 286441e8a96ed0284e7691c2ef4d59dee8c9cbfc

[Michael Scherer]

Le mercredi 09 août 2017 à 21:27 +0300, Barak Korren a écrit :
> On 9 August 2017 at 21:21, Michael Scherer  wrote:
> >
> > The problem is that the ssh port is not open.
> > ~ $ sudo nmap -sS  lists.ovirt.org
> >
> > Starting Nmap 6.40 ( http://nmap.org ) at 2017-08-09 20:14 CEST
> > Nmap scan report for lists.ovirt.org (66.187.230.42)
> > Host is up (0.18s latency).
> > rDNS record for 66.187.230.42: lists.phx.ovirt.org
> > Not shown: 996 filtered ports
> > PORTSTATE SERVICE
> > 25/tcp  open  smtp
> > 80/tcp  open  http
> > 443/tcp open  https
> > 993/tcp open  imaps
> >
> > Nmap done: 1 IP address (1 host up) scanned in 15.44 seconds
> >
> > Not open from anywhere I try in fact.
> >
> 
> Yeah we have OpenVPN setup to grant access to PHX servers if you're
> not behind the Red Hat firewall.

It also fail from inside the firewall using my system in the Paris
office.

> Evgheny can setup access for you.



-- 
Michael Scherer
Sysadmin, Community Infrastructure and Platform, OSAS



___
Infra mailing list
Infra@ovirt.org
http://lists.ovirt.org/mailman/listinfo/infra

Re: Fwd: Undeliverable: confirm 286441e8a96ed0284e7691c2ef4d59dee8c9cbfc

[Michael Scherer]

Le mercredi 09 août 2017 à 21:06 +0300, Eyal Edri a écrit :
> Hi misc,
> ssh to lists is done via public key access,
> You need to add your ssh public key to the infra-puppet repo [1] and we
> need to update it also in foreman iirc.

The key is already there:
https://gerrit.ovirt.org/gitweb?p=infra-puppet.git;a=blob;f=site/ovirt_infra/manifests/user/misc.pp;h=b9ab6146f590eea71f225b5ffe0a0f61c8e163c9;hb=42f86bc97dad1910490cdc57c42861fcd66b1970
 


The problem is that the ssh port is not open. 
~ $ sudo nmap -sS  lists.ovirt.org 

Starting Nmap 6.40 ( http://nmap.org ) at 2017-08-09 20:14 CEST
Nmap scan report for lists.ovirt.org (66.187.230.42)
Host is up (0.18s latency).
rDNS record for 66.187.230.42: lists.phx.ovirt.org
Not shown: 996 filtered ports
PORTSTATE SERVICE
25/tcp  open  smtp
80/tcp  open  http
443/tcp open  https
993/tcp open  imaps

Nmap done: 1 IP address (1 host up) scanned in 15.44 seconds

Not open from anywhere I try in fact.

> I can change it if you'll tell me what do.
>
> [1] duck's key patch:
> https://gerrit.ovirt.org/gitweb?p=infra-puppet.git;a=blob;f=site/ovirt_infra/manifests/user/duck.pp;h=c63ab9151726450419b29fa8f9933d5759e8c4a2;hb=42f86bc97dad1910490cdc57c42861fcd66b1970
> 
> 
> On Wed, Aug 9, 2017 at 7:39 PM, Michael Scherer  wrote:
> 
> > Le mardi 08 août 2017 à 12:49 -0700, Karsten Wade a écrit :
> > > Misc & Duck:
> > >
> > > This is what has been flowing sporadically for the last few days (~590
> > > messages so far).
> > >
> > > It appears to be a full mailbox and continuous subscription requests by
> > > a small set of possibly autogenerated email accounts?
> > >
> > > squ...@live.com
> > > sqoon...@live.com
> > > squoon+uj...@live.com
> > >
> > > Is there anything we can do other than blacklisting an entire domain?
> > > Maybe tell mailman to auto-reject anything from sq.*@live.com?
> >
> > It can be done also on postfix directly.
> >
> > But I can't seems to connect to the list server with ssh, and if there
> > is a specific bastion, I can't find it in the wiki or on read the doc,
> > or on looking on the ansible infra repository.
> >
> >
> > > - Karsten
> > >
> > >  Forwarded Message 
> > > Subject: Undeliverable: confirm 286441e8a96ed0284e7691c2ef4d59dee8c9cbfc
> > > Date: Tue, 8 Aug 2017 19:39:52 +
> > > From: postmas...@outlook.com
> > > To: mailman-boun...@ovirt.org
> > >
> > > Delivery has failed to these recipients or groups:
> > >
> > > squoon+uj...@live.com
> > > The recipient's mailbox is full and can't accept messages now. Please
> > > try resending your message later, or contact the recipient directly.
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > > Diagnostic information for administrators:
> > >
> > > Generating server: SN1NAM04HT150.mail.protection.outlook.com
> > >
> > > squoon+uj...@live.com
> > > Remote Server returned '554 5.2.2 mailbox full;
> > > STOREDRV.Deliver.Exception:QuotaExceededException.
> > MapiExceptionShutoffQuotaExceeded;
> > > Failed to process message due to a permanent exception with message
> > > Cannot get ID from name. 16.55847:5C06,
> > > 17.43559:8C00,
> > > 20.52176:010F28854010F103, 20.50032:010F288581171031,
> > > 0.35180:, 255.23226:, 255.27962:5600,
> > > 255.17082:B904, 0.16993:1400, 4.21921:B904,
> > > 255.31418:80030400, 0.22753:80030400, 255.21817:B904,
> > > 0.37224:, 4.40808:DD04, 0.24529:382D3763, 4.18385:DD04,
> > > 0.36864:30303030, 4.37120:DD04 [Stage: CreateMessage]'
> > >
> > > Original message headers:
> > >
> > > Received: from SN1NAM04FT057.eop-NAM04.prod.protection.outlook.com
> > >  (10.152.88.58) by SN1NAM04HT150.eop-NAM04.prod.protection.outlook.com
> > >  (10.152.89.108) with Microsoft SMTP Server (version=TLS1_2,
> > >  cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1304.16;
> > Tue, 8
> > >  Aug 2017 19:39:51 +
> > > Authentication-Results: spf=pass (sender IP is 66.187.230.42)
> > >  smtp.mailfrom=ovirt.org; live.com; dkim=none (message not signed)
> > >  header.d=none;live.com; dmarc=bestguesspass action=none
> > >  header.from=ovirt.org;
> > > Received-SPF: Pass (protection.outlook.com: domain of ovirt.org
> > designates
> > >  66.187.230.42 as permitted sender) receiver=protection.outlook.com;
> > >  client-ip=66.187.230.42; helo=lists.ovirt.org;
> > > Received: from lists.ovirt.org (66.187.230.42) by
> > >  SN1NAM04FT057.mail.protection.outlook.com (10.152.89.46) with Microsoft
> > > SMTP
> > >  Server (version=TLS1_2,
> > > cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
> > >  15.1.1304.16 via Frontend Transport; Tue, 8 Aug 2017 19:39:51 +
> > > X-IncomingTopHeaderMarker:
> > > OriginalChecksum:670AE6CBE67B8F6196CDCA9540645F
> > 94DBB16ACB7B477495BC4FDD8363FE1F1C;UpperCasedChecksum:
> > CAC99FB831F3ACA5FA7FC966D2A02AE20A64E35E2F5E2A1D4B01A6A94DBE
> > 

Re: Fwd: Undeliverable: confirm 286441e8a96ed0284e7691c2ef4d59dee8c9cbfc

[Eyal Edri]

Hi misc,
ssh to lists is done via public key access,
You need to add your ssh public key to the infra-puppet repo [1] and we
need to update it also in foreman iirc.

I can change it if you'll tell me what do.

[1] duck's key patch:
https://gerrit.ovirt.org/gitweb?p=infra-puppet.git;a=blob;f=site/ovirt_infra/manifests/user/duck.pp;h=c63ab9151726450419b29fa8f9933d5759e8c4a2;hb=42f86bc97dad1910490cdc57c42861fcd66b1970


On Wed, Aug 9, 2017 at 7:39 PM, Michael Scherer  wrote:

> Le mardi 08 août 2017 à 12:49 -0700, Karsten Wade a écrit :
> > Misc & Duck:
> >
> > This is what has been flowing sporadically for the last few days (~590
> > messages so far).
> >
> > It appears to be a full mailbox and continuous subscription requests by
> > a small set of possibly autogenerated email accounts?
> >
> > squ...@live.com
> > sqoon...@live.com
> > squoon+uj...@live.com
> >
> > Is there anything we can do other than blacklisting an entire domain?
> > Maybe tell mailman to auto-reject anything from sq.*@live.com?
>
> It can be done also on postfix directly.
>
> But I can't seems to connect to the list server with ssh, and if there
> is a specific bastion, I can't find it in the wiki or on read the doc,
> or on looking on the ansible infra repository.
>
>
> > - Karsten
> >
> >  Forwarded Message 
> > Subject: Undeliverable: confirm 286441e8a96ed0284e7691c2ef4d59dee8c9cbfc
> > Date: Tue, 8 Aug 2017 19:39:52 +
> > From: postmas...@outlook.com
> > To: mailman-boun...@ovirt.org
> >
> > Delivery has failed to these recipients or groups:
> >
> > squoon+uj...@live.com
> > The recipient's mailbox is full and can't accept messages now. Please
> > try resending your message later, or contact the recipient directly.
> >
> >
> >
> >
> >
> >
> >
> >
> > Diagnostic information for administrators:
> >
> > Generating server: SN1NAM04HT150.mail.protection.outlook.com
> >
> > squoon+uj...@live.com
> > Remote Server returned '554 5.2.2 mailbox full;
> > STOREDRV.Deliver.Exception:QuotaExceededException.
> MapiExceptionShutoffQuotaExceeded;
> > Failed to process message due to a permanent exception with message
> > Cannot get ID from name. 16.55847:5C06,
> > 17.43559:8C00,
> > 20.52176:010F28854010F103, 20.50032:010F288581171031,
> > 0.35180:, 255.23226:, 255.27962:5600,
> > 255.17082:B904, 0.16993:1400, 4.21921:B904,
> > 255.31418:80030400, 0.22753:80030400, 255.21817:B904,
> > 0.37224:, 4.40808:DD04, 0.24529:382D3763, 4.18385:DD04,
> > 0.36864:30303030, 4.37120:DD04 [Stage: CreateMessage]'
> >
> > Original message headers:
> >
> > Received: from SN1NAM04FT057.eop-NAM04.prod.protection.outlook.com
> >  (10.152.88.58) by SN1NAM04HT150.eop-NAM04.prod.protection.outlook.com
> >  (10.152.89.108) with Microsoft SMTP Server (version=TLS1_2,
> >  cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1304.16;
> Tue, 8
> >  Aug 2017 19:39:51 +
> > Authentication-Results: spf=pass (sender IP is 66.187.230.42)
> >  smtp.mailfrom=ovirt.org; live.com; dkim=none (message not signed)
> >  header.d=none;live.com; dmarc=bestguesspass action=none
> >  header.from=ovirt.org;
> > Received-SPF: Pass (protection.outlook.com: domain of ovirt.org
> designates
> >  66.187.230.42 as permitted sender) receiver=protection.outlook.com;
> >  client-ip=66.187.230.42; helo=lists.ovirt.org;
> > Received: from lists.ovirt.org (66.187.230.42) by
> >  SN1NAM04FT057.mail.protection.outlook.com (10.152.89.46) with Microsoft
> > SMTP
> >  Server (version=TLS1_2,
> > cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
> >  15.1.1304.16 via Frontend Transport; Tue, 8 Aug 2017 19:39:51 +
> > X-IncomingTopHeaderMarker:
> > OriginalChecksum:670AE6CBE67B8F6196CDCA9540645F
> 94DBB16ACB7B477495BC4FDD8363FE1F1C;UpperCasedChecksum:
> CAC99FB831F3ACA5FA7FC966D2A02AE20A64E35E2F5E2A1D4B01A6A94DBE
> E66D;SizeAsReceived:748;Count:17
> > Received: from lists.phx.ovirt.org (localhost [127.0.0.1])
> > by lists.ovirt.org (Postfix) with ESMTP id 0286A8207B0
> > for ; Tue,  8 Aug 2017 19:39:51 +
> (UTC)
> > MIME-Version: 1.0
> > Content-Type: text/plain; charset="us-ascii"
> > Content-Transfer-Encoding: 7bit
> > From: 
> > To: 
> > Subject: confirm 286441e8a96ed0284e7691c2ef4d59dee8c9cbfc
> > Reply-To: 
> > Message-ID: 
> > Date: Tue, 8 Aug 2017 19:39:49 +
> > Precedence: bulk
> > X-BeenThere: mail...@ovirt.org
> > X-Mailman-Version: 2.1.12
> > List-Id: 
> > X-List-Administrivia: yes
> > Sender: 
> > Errors-To: mailman-boun...@ovirt.org
> > X-IncomingHeaderCount: 17
> > Return-Path: mailman-boun...@ovirt.org
> > X-EOPAttributedMessage: 0
> > X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-:0
> > 

Re: Fwd: Undeliverable: confirm 286441e8a96ed0284e7691c2ef4d59dee8c9cbfc

[Michael Scherer]

Le mardi 08 août 2017 à 12:49 -0700, Karsten Wade a écrit :
> Misc & Duck:
> 
> This is what has been flowing sporadically for the last few days (~590
> messages so far).
> 
> It appears to be a full mailbox and continuous subscription requests by
> a small set of possibly autogenerated email accounts?
> 
> squ...@live.com
> sqoon...@live.com
> squoon+uj...@live.com
> 
> Is there anything we can do other than blacklisting an entire domain?
> Maybe tell mailman to auto-reject anything from sq.*@live.com?

It can be done also on postfix directly. 

But I can't seems to connect to the list server with ssh, and if there
is a specific bastion, I can't find it in the wiki or on read the doc,
or on looking on the ansible infra repository. 


> - Karsten
> 
>  Forwarded Message 
> Subject: Undeliverable: confirm 286441e8a96ed0284e7691c2ef4d59dee8c9cbfc
> Date: Tue, 8 Aug 2017 19:39:52 +
> From: postmas...@outlook.com
> To: mailman-boun...@ovirt.org
> 
> Delivery has failed to these recipients or groups:
> 
> squoon+uj...@live.com
> The recipient's mailbox is full and can't accept messages now. Please
> try resending your message later, or contact the recipient directly.
> 
> 
> 
> 
> 
> 
> 
> 
> Diagnostic information for administrators:
> 
> Generating server: SN1NAM04HT150.mail.protection.outlook.com
> 
> squoon+uj...@live.com
> Remote Server returned '554 5.2.2 mailbox full;
> STOREDRV.Deliver.Exception:QuotaExceededException.MapiExceptionShutoffQuotaExceeded;
> Failed to process message due to a permanent exception with message
> Cannot get ID from name. 16.55847:5C06,
> 17.43559:8C00,
> 20.52176:010F28854010F103, 20.50032:010F288581171031,
> 0.35180:, 255.23226:, 255.27962:5600,
> 255.17082:B904, 0.16993:1400, 4.21921:B904,
> 255.31418:80030400, 0.22753:80030400, 255.21817:B904,
> 0.37224:, 4.40808:DD04, 0.24529:382D3763, 4.18385:DD04,
> 0.36864:30303030, 4.37120:DD04 [Stage: CreateMessage]'
> 
> Original message headers:
> 
> Received: from SN1NAM04FT057.eop-NAM04.prod.protection.outlook.com
>  (10.152.88.58) by SN1NAM04HT150.eop-NAM04.prod.protection.outlook.com
>  (10.152.89.108) with Microsoft SMTP Server (version=TLS1_2,
>  cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1304.16; Tue, 8
>  Aug 2017 19:39:51 +
> Authentication-Results: spf=pass (sender IP is 66.187.230.42)
>  smtp.mailfrom=ovirt.org; live.com; dkim=none (message not signed)
>  header.d=none;live.com; dmarc=bestguesspass action=none
>  header.from=ovirt.org;
> Received-SPF: Pass (protection.outlook.com: domain of ovirt.org designates
>  66.187.230.42 as permitted sender) receiver=protection.outlook.com;
>  client-ip=66.187.230.42; helo=lists.ovirt.org;
> Received: from lists.ovirt.org (66.187.230.42) by
>  SN1NAM04FT057.mail.protection.outlook.com (10.152.89.46) with Microsoft
> SMTP
>  Server (version=TLS1_2,
> cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
>  15.1.1304.16 via Frontend Transport; Tue, 8 Aug 2017 19:39:51 +
> X-IncomingTopHeaderMarker:
> OriginalChecksum:670AE6CBE67B8F6196CDCA9540645F94DBB16ACB7B477495BC4FDD8363FE1F1C;UpperCasedChecksum:CAC99FB831F3ACA5FA7FC966D2A02AE20A64E35E2F5E2A1D4B01A6A94DBEE66D;SizeAsReceived:748;Count:17
> Received: from lists.phx.ovirt.org (localhost [127.0.0.1])
> by lists.ovirt.org (Postfix) with ESMTP id 0286A8207B0
> for ; Tue,  8 Aug 2017 19:39:51 + (UTC)
> MIME-Version: 1.0
> Content-Type: text/plain; charset="us-ascii"
> Content-Transfer-Encoding: 7bit
> From: 
> To: 
> Subject: confirm 286441e8a96ed0284e7691c2ef4d59dee8c9cbfc
> Reply-To: 
> Message-ID: 
> Date: Tue, 8 Aug 2017 19:39:49 +
> Precedence: bulk
> X-BeenThere: mail...@ovirt.org
> X-Mailman-Version: 2.1.12
> List-Id: 
> X-List-Administrivia: yes
> Sender: 
> Errors-To: mailman-boun...@ovirt.org
> X-IncomingHeaderCount: 17
> Return-Path: mailman-boun...@ovirt.org
> X-EOPAttributedMessage: 0
> X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-:0
> X-Microsoft-Exchange-Diagnostics:
> 1;SN1NAM04FT057;1:Bcm2MEX+PPudiZmC94OBJ+Xj1LchK2N22ZBgemA9+ZX5zB56o0yq37V5xKApniQjpsOFoiuKWbOijK8sjeNnvKPKjtZaxCKG9GHMM5UJBHjyHGNivHmz3FEytK2rbxCRNlOCKWzt2Owz+d95Rd3mS0q3GZFyycB7mB6D/I5HSRkhccdajp6ygt8ZCcW55XsyB8qGL2ANkHDUGsYrCXe6IZECKu+VQDiHA+U/bJzMenECOgWYQfpBPwDDoXcqCqghlI6Di76N5fipw890KYj+e/B9aqjMFJeXeZtyGvfdSFfhsAtjePqZ+zuCl8CuIbi2p6IyTkpsRIKo0WaN5/4eKaAfbqoknh6UPd7p0tDciy37DnyQ0xOrcFcHg/6sgO16NH11yvxKA1diT0Fao46o1w==
> X-Forefront-Antispam-Report:
> 
> EFV:NLI;SFV:NSPM;SFS:(98901004);DIR:INB;SFP:;SCL:1;SRVR:SN1NAM04HT150;H:lists.ovirt.org;FPR:;SPF:None;LANG:en;
> X-MS-PublicTrafficType: Email
> X-MS-UserLastLogonTime: 8/7/2017 8:27:58 PM
> 

Fwd: Undeliverable: confirm 286441e8a96ed0284e7691c2ef4d59dee8c9cbfc

[Karsten Wade]

Misc & Duck:

This is what has been flowing sporadically for the last few days (~590
messages so far).

It appears to be a full mailbox and continuous subscription requests by
a small set of possibly autogenerated email accounts?

squ...@live.com
sqoon...@live.com
squoon+uj...@live.com

Is there anything we can do other than blacklisting an entire domain?
Maybe tell mailman to auto-reject anything from sq.*@live.com?

- Karsten

 Forwarded Message 
Subject: Undeliverable: confirm 286441e8a96ed0284e7691c2ef4d59dee8c9cbfc
Date: Tue, 8 Aug 2017 19:39:52 +
From: postmas...@outlook.com
To: mailman-boun...@ovirt.org

Delivery has failed to these recipients or groups:

squoon+uj...@live.com
The recipient's mailbox is full and can't accept messages now. Please
try resending your message later, or contact the recipient directly.








Diagnostic information for administrators:

Generating server: SN1NAM04HT150.mail.protection.outlook.com

squoon+uj...@live.com
Remote Server returned '554 5.2.2 mailbox full;
STOREDRV.Deliver.Exception:QuotaExceededException.MapiExceptionShutoffQuotaExceeded;
Failed to process message due to a permanent exception with message
Cannot get ID from name. 16.55847:5C06,
17.43559:8C00,
20.52176:010F28854010F103, 20.50032:010F288581171031,
0.35180:, 255.23226:, 255.27962:5600,
255.17082:B904, 0.16993:1400, 4.21921:B904,
255.31418:80030400, 0.22753:80030400, 255.21817:B904,
0.37224:, 4.40808:DD04, 0.24529:382D3763, 4.18385:DD04,
0.36864:30303030, 4.37120:DD04 [Stage: CreateMessage]'

Original message headers:

Received: from SN1NAM04FT057.eop-NAM04.prod.protection.outlook.com
 (10.152.88.58) by SN1NAM04HT150.eop-NAM04.prod.protection.outlook.com
 (10.152.89.108) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1304.16; Tue, 8
 Aug 2017 19:39:51 +
Authentication-Results: spf=pass (sender IP is 66.187.230.42)
 smtp.mailfrom=ovirt.org; live.com; dkim=none (message not signed)
 header.d=none;live.com; dmarc=bestguesspass action=none
 header.from=ovirt.org;
Received-SPF: Pass (protection.outlook.com: domain of ovirt.org designates
 66.187.230.42 as permitted sender) receiver=protection.outlook.com;
 client-ip=66.187.230.42; helo=lists.ovirt.org;
Received: from lists.ovirt.org (66.187.230.42) by
 SN1NAM04FT057.mail.protection.outlook.com (10.152.89.46) with Microsoft
SMTP
 Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
 15.1.1304.16 via Frontend Transport; Tue, 8 Aug 2017 19:39:51 +
X-IncomingTopHeaderMarker:
OriginalChecksum:670AE6CBE67B8F6196CDCA9540645F94DBB16ACB7B477495BC4FDD8363FE1F1C;UpperCasedChecksum:CAC99FB831F3ACA5FA7FC966D2A02AE20A64E35E2F5E2A1D4B01A6A94DBEE66D;SizeAsReceived:748;Count:17
Received: from lists.phx.ovirt.org (localhost [127.0.0.1])
by lists.ovirt.org (Postfix) with ESMTP id 0286A8207B0
for ; Tue,  8 Aug 2017 19:39:51 + (UTC)
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
From: 
To: 
Subject: confirm 286441e8a96ed0284e7691c2ef4d59dee8c9cbfc
Reply-To: 
Message-ID: 
Date: Tue, 8 Aug 2017 19:39:49 +
Precedence: bulk
X-BeenThere: mail...@ovirt.org
X-Mailman-Version: 2.1.12
List-Id: 
X-List-Administrivia: yes
Sender: 
Errors-To: mailman-boun...@ovirt.org
X-IncomingHeaderCount: 17
Return-Path: mailman-boun...@ovirt.org
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-:0
X-Microsoft-Exchange-Diagnostics:
1;SN1NAM04FT057;1:Bcm2MEX+PPudiZmC94OBJ+Xj1LchK2N22ZBgemA9+ZX5zB56o0yq37V5xKApniQjpsOFoiuKWbOijK8sjeNnvKPKjtZaxCKG9GHMM5UJBHjyHGNivHmz3FEytK2rbxCRNlOCKWzt2Owz+d95Rd3mS0q3GZFyycB7mB6D/I5HSRkhccdajp6ygt8ZCcW55XsyB8qGL2ANkHDUGsYrCXe6IZECKu+VQDiHA+U/bJzMenECOgWYQfpBPwDDoXcqCqghlI6Di76N5fipw890KYj+e/B9aqjMFJeXeZtyGvfdSFfhsAtjePqZ+zuCl8CuIbi2p6IyTkpsRIKo0WaN5/4eKaAfbqoknh6UPd7p0tDciy37DnyQ0xOrcFcHg/6sgO16NH11yvxKA1diT0Fao46o1w==
X-Forefront-Antispam-Report:

EFV:NLI;SFV:NSPM;SFS:(98901004);DIR:INB;SFP:;SCL:1;SRVR:SN1NAM04HT150;H:lists.ovirt.org;FPR:;SPF:None;LANG:en;
X-MS-PublicTrafficType: Email
X-MS-UserLastLogonTime: 8/7/2017 8:27:58 PM
X-MS-Office365-Filtering-Correlation-Id:
3c960a29-d57e-4e43-4276-08d4de953cd8
X-Microsoft-Antispam:

BCL:0;PCL:0;RULEID:(30500095)(30013595)(30501095)(300135300095)(23075)(22001)(30502095)(300135100095)(583)(610149)(650150)(8291501071);SRVR:SN1NAM04HT150;
X-Microsoft-Exchange-Diagnostics: