Fwd: Re: SA Zone from ns.hyperreal.org

2017-05-01 Thread Kevin A. McGrail
The Hyperreal Copy... #2017031501 auto axfr-get Zspamassassin.org:ns.hyperreal.org.:pmc.spamassassin.apache.org.:2017031501:86400:3600:2678400:3600:3600 &spamassassin.org::a.auth-ns.sonic.net.:3600 &spamassassin.org::b.auth-ns.sonic.net.:3600 &spamassassin.org::c.auth-ns.sonic.net.:3600 &spamassas

Fwd: Re: Copy of the current SA Zone?

2017-05-01 Thread Kevin A. McGrail
And the sonic copy spamassassin.org Description: Lotus Organizer

Ready for the Hidden Master to be Polled

2017-05-02 Thread Kevin A. McGrail
urn things back on but it appears you were missing a test DKIM record oddly enough. Perhaps a record length limit or something. Best, KAM -- Kevin A. McGrail Asst. Treasurer, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project

Re: Fwd: Re: Copy of the current SA Zone?

2017-05-02 Thread Kevin A. McGrail
Mis-matches: 1 We should check that after they sync. Missing a record is weird and that's not a new record... regards, KAM -- Kevin A. McGrail Asst. Treasurer, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project

Re: Fwd: Re: Copy of the current SA Zone?

2017-05-02 Thread Kevin A. McGrail
es so expect FPs. -- Kevin A. McGrail Asst. Treasurer, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project

Re: Fwd: Re: Copy of the current SA Zone?

2017-05-02 Thread Kevin A. McGrail
On 5/2/2017 9:31 AM, Dave Jones wrote: On 5/2/17 8:20 AM, Kevin A. McGrail wrote: On 5/2/2017 9:14 AM, Dave Jones wrote: My plan is to setup a script on sa-vm1.apache.org that would run daily and email if there are record differences since we don't have control of the public DNS se

Re: Fwd: Re: Copy of the current SA Zone?

2017-05-02 Thread Kevin A. McGrail
On 5/2/2017 10:01 AM, Dave Jones wrote: I understand. I will have to see the normal cycle of things and adjust when to run the DNS check script and he logic in the script. Maybe it will need to exclude some records from the check that change too frequently. My intention was to catch things li

Fwd: Re: Ready for the Hidden Master to be Polled

2017-05-02 Thread Kevin A. McGrail
spamassassin.org foo.tmp axfr-get: fatal: unable to parse AXFR results: protocol error Any ideas? I'm coming either from 209.237.226.90 or .92, not sure which would be default but I think .92. Brian On Tue, 2 May 2017, Kevin A. McGrail wrote: Gents, I appreciate your patience and I'm cc'

Re: Fwd: Re: Ready for the Hidden Master to be Polled

2017-05-02 Thread Kevin A. McGrail
On 5/2/2017 3:27 PM, Dave Jones wrote: I had .92 in the PowerDNS allowed-axfr list so it must be coming from .90. I have added .90 to the list so please try it again when you get a chance. Will do! P.S. You can easily check the outbound (initiated traffic) IP with 'curl curlmyip.net'. I thi

Re: Fwd: Re: Ready for the Hidden Master to be Polled

2017-05-02 Thread Kevin A. McGrail
9X3sRrvm97EZ8U/LeLOz4IUmv7HbHph5CSyuf4" "fQrUN0GFr2HydC4/DbPqWdCmx4bq+7slE609dUL19ZMv9LYI7E6cpVeX7RmciRTn" "H7jOVQ6RvIav2REzY5KksgL7eAeV/QYLqSAaFZqYKJjYiZj+6p47ef5u+Cd8GrCj" "WQIDAQAB" Here's the docs for axfr-get: https://cr.yp.to/djbdns/axfr-get.html -- Kevin A. McGrail Asst. Treasurer, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project

Re: Fwd: Re: Ready for the Hidden Master to be Polled

2017-05-02 Thread Kevin A. McGrail
On 5/2/2017 10:04 PM, Kevin A. McGrail wrote: On 5/2/2017 9:08 PM, Dave Jones wrote: Maybe those were test AXFRs but they seemed to work based the logs. They were tests. Thought: Open up transfer from 69.171.29.37 and I'll test if I can pull the zone. Is there anything you can see

Re: Next priority to get running on sa-vm1.apache.org

2017-05-04 Thread Kevin A. McGrail
On 5/3/2017 6:53 PM, Dave Jones wrote: Kevin, I am sorting through the backups in /x1 which is a lot. What do you want me to target next while we finish off the DNS hidden master details? Is it the Masscheck? OK, so the next thing I would work on is look for the rsync configuration / passw

Re: Ready for the Hidden Master to be Polled

2017-05-04 Thread Kevin A. McGrail
On 5/2/2017 12:56 PM, Grant Keller wrote: The information located here: https://wiki.sonic.net/wiki/Secondary_DNS_Service is the current configuration information you will need. Thank you, Grant! -- Kevin A. McGrail Asst. Treasurer, Apache Software Foundation Chair Emeritus Apache

Re: Fwd: Re: Ready for the Hidden Master to be Polled

2017-05-04 Thread Kevin A. McGrail
for about 200 zones to various flavors of DNS masters plus it's a master for about 2,000 zones. That sounds awesome. We can add ns2.pccc.com to diversify more. Let me know when you have approval. -- Kevin A. McGrail Asst. Treasurer, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project

Re: Fwd: Re: Ready for the Hidden Master to be Polled

2017-05-04 Thread Kevin A. McGrail
On 5/3/2017 6:18 PM, Dave Jones wrote: I have setup my ns2.ena.com as a slave to the hidden master for testing. Slaving is working perfectly. It's not published in the spamassassin.org NS records yet on the hidden master. If we want to add it to the DNS hosting, I will work on getting proper

Re: Next priority to get running on sa-vm1.apache.org

2017-05-07 Thread Kevin A. McGrail
Rip and shred away. I can also search other backups I likely have. Regards, KAM On May 7, 2017 9:54:01 AM EDT, Dave Jones wrote: >On 05/04/2017 10:18 PM, Kevin A. McGrail wrote: >> On 5/3/2017 6:53 PM, Dave Jones wrote: >>> Kevin, >>> I am sorting through the ba

Re: Next priority to get running on sa-vm1.apache.org

2017-05-08 Thread Kevin A. McGrail
G 28% / /dev/sdb1 1.2T 426G 678G 39% /x1 If we need the space, use it and remount how you would like! Regards, KAM -- Kevin A. McGrail Asst. Treasurer, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project

Re: Fwd: Re: Ready for the Hidden Master to be Polled

2017-05-08 Thread Kevin A. McGrail
On 5/8/2017 10:32 AM, Dave Jones wrote: Are you ready to me to add ns2.pccc.com as an NS record on the hidden master? If so, I vote for ns2.pccc.com should replace ns.hyperreal.org. Yes, go ahead and add it as an NS record and add a test record, increment the serial and test. I've setup 62.210

Re: Intorduction

2017-05-08 Thread Kevin A. McGrail
: My name is Kevin A. McGrail and many know me as KAM. I've worked in computers my entire life (see https://www.linkedin.com/in/kmcgrail/) I started out helping the SpamAssassin project before it came to Apache to help Justin because he was having issues with DNS stability. Over the year

Fwd: Re: At a loss re: hyperreal

2017-05-08 Thread Kevin A. McGrail
Just to bring you all up to speed, I had Brian Behlendorf try and transfer from my BIND server. Same issue: [root@taz4 /etc/tinydns/root]# /usr/local/bin/tcpclient 69.171.29.37 53 /usr/local/bin/axfr-get spamassassin.org spamassassin.org foo.tmp axfr-get: fatal: unable to parse AXFR results:

Onboarding, Documentation, etc.

2017-05-08 Thread Kevin A. McGrail
Write access to that page is to anyone whose wiki login name has been added to https://wiki.apache.org/spamassassin/AdminGroup - Members of SA SysAdmins (SASA): Dave Jones - da...@apache.org Kevin A. McGrail - 703-798-0171 - kmcgr...@apache.org Bryan Vest - bv...@apache.org - Who's in Charge

Tasks I can think of...

2017-05-08 Thread Kevin A. McGrail
7+ merged - Get masscheck back running. NOTE: I have cron logs from the old machines so we can look at output, etc. from the old machines - Check KAM's Crashplan Backups are good to go after Dave finishes some moving data around on /x1 -- Kevin A. McGrail Asst. Treasurer, Ap

Notes from when SpamAssassin zones box died

2017-05-08 Thread Kevin A. McGrail
pdate-6153/dns-backup/3.3.2 /var/named/updates.spamassassin.org.d/3.3.2 cp: accessing `/var/named/updates.spamassassin.org.d/3.3.2': Permission denied + set -e + (( I++ )) + (( I<=3 )) + revert_dns_record 3.3.3 + SA_VERSION=3.3.3 + '[' 0 -eq 1 -a 0 -eq 0 ']' + DNSFILE=/var/named/updates.spamassassin.org.d/3.3.3 + set +e + cp /tmp/sa-mkupdate-6153/dns-backup/3.3.3 /var/named/updates.spamassassin.org.d/3.3.3 cp: accessing `/var/named/updates.spamassassin.org.d/3.3.3': Permission denied + set -e + (( I++ )) + (( I<=3 )) + exit 5 Exit Status 5 is not zero for mkupdate-with-scores -- Kevin A. McGrail Asst. Treasurer, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project

Re: Onboarding, Documentation, etc.

2017-05-10 Thread Kevin A. McGrail
en any replies from Dave unless I missed them before I >joined >the mailing list. I want to make sure we are not wasting time trying to >work on the same things. > >--Bryan Vest > >On Mon, May 8, 2017 at 6:13 PM, Kevin A. McGrail >wrote: > >> Dave and Bryan, below is my l

Re: SVN update area

2017-05-10 Thread Kevin A. McGrail
On 5/10/2017 8:49 PM, Dave Jones wrote: Kevin, I was wanting to setup /usr/local/spamassassin/svn as a check out area and a general update area. Do you normally set it up with your own creds or is there a generic user that was used on the previous server for cron jobs to do commits? Looking

Re: DNS hosting of spamassassin.org

2017-05-10 Thread Kevin A. McGrail
tting very far behind and will be handing out incorrect records when we get everything rolling again soon. Roger that. We had talked about it so it was cool for you to open a JIRA but I did it anyway for you: https://issues.apache.org/jira/browse/INFRA-14135 Regards, KAM -- Kevin A. McGrail

Fwd: [jira] [Updated] (INFRA-14135) Please change DNS Servers for spamassassin.org

2017-05-11 Thread Kevin A. McGrail
-- Key: INFRA-14135 URL: https://issues.apache.org/jira/browse/INFRA-14135 Project: Infrastructure Issue Type: Task Components: DNS Reporter: Kevin A. McGrail Assignee: Chris Lambertus

Re: Fwd: [jira] [Updated] (INFRA-14135) Please change DNS Servers for spamassassin.org

2017-05-11 Thread Kevin A. McGrail
On 5/11/2017 12:54 PM, Dave Jones wrote: Excellent. Now we are all green here (ignore the MX record since we intentionally don't have one): https://intodns.com/spamassassin.org In a week or two we should be able to add in ns2.ena.com after getting the nod from our CTO who is out of pocket for

Re: Next priority to get running on sa-vm1.apache.org

2017-05-12 Thread Kevin A. McGrail
pie 4. Make sure you have the ability to "sudo su -" to become root on sa-vm1.apache.org by using OPIE. Here is the OPIE client I am using: https://reference.apache.org/committer/otp-md5 Dave On 05/08/2017 10:15 AM, Kevin A. McGrail wrote: On 5/7/2017 3:43 PM, Dave Jones wrote:

Re: Next priority to get running on sa-vm1.apache.org

2017-05-12 Thread Kevin A. McGrail
On 5/12/2017 12:34 PM, Bryan Vest wrote: I see the step I missed. I'll get it fixed up. Excellent. When you have done that, then Dave or I need to open a Jira ticket. -- Kevin A. McGrail Asst. Treasurer, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project

Fwd: [jira] [Commented] (INFRA-14045) Setup davej with access to sa-vm1.apache.org with sudo access

2017-05-13 Thread Kevin A. McGrail
ra/browse/INFRA-14045 Project: Infrastructure Issue Type: Task Components: ColoTasks Reporter: Kevin A. McGrail Assignee: Chris Lambertus Priority: Minor Please setup davej so he can ssh to sa-vm1.apache.org after he adds his ssh pu

Re: SVN update area

2017-05-13 Thread Kevin A. McGrail
'd scripts. Dave On 05/10/2017 08:32 PM, Kevin A. McGrail wrote: On 5/10/2017 8:49 PM, Dave Jones wrote: Kevin, I was wanting to setup /usr/local/spamassassin/svn as a check out area and a general update area. Do you normally set it up with your own creds or is there a generic user

Re: Onboarding, Documentation, etc.

2017-05-13 Thread Kevin A. McGrail
On 5/12/2017 7:32 PM, Dave Jones wrote: I have all of this information on https://wiki.apache.org/spamassassin/InfraNotes2017 now. Please review and comment/update as needed. Overall, the organization and edits are very good. Thanks for fixing Tenets, I knew that word looked wrong! I add

Re: Onboarding, Documentation, etc.

2017-05-13 Thread Kevin A. McGrail
On 5/13/2017 9:13 AM, Kevin A. McGrail wrote: On 5/12/2017 7:32 PM, Dave Jones wrote: I have all of this information on https://wiki.apache.org/spamassassin/InfraNotes2017 now. Please review and comment/update as needed. Overall, the organization and edits are very good. Thanks for fixing

Encryption and Backups was Re: Onboarding, Documentation, etc.

2017-05-13 Thread Kevin A. McGrail
On 5/12/2017 7:32 PM, Dave Jones wrote: One thing we need to specify in more detail is the way we are going to encrypt things in the sysadmins repo. We don't want to put the encryption details on the wiki per se since it's public. The only thing I envision in the repo encrypted is passwords. F

Re: Onboarding, Documentation, etc.

2017-05-13 Thread Kevin A. McGrail
On 5/13/2017 9:50 AM, Dave Jones wrote: I am not sure about my goal since it may be in slight conflict with your goal. :) I would like SA to be a little more toward a complete spam filter out of the box so people don't have to spend years learning all of the ins and outs to make it effective.

Re: Onboarding, Documentation, etc.

2017-05-13 Thread Kevin A. McGrail
s on and things change, someone has to update the wiki without knowing what has changed unless we go through the process of onboarding someone every year. I defer to your advice as I don't feel strongly about it. -- Kevin A. McGrail Asst. Treasurer, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project

Re: Encryption and Backups was Re: Onboarding, Documentation, etc.

2017-05-13 Thread Kevin A. McGrail
we can look at that. Regards, KAM -- Kevin A. McGrail Asst. Treasurer, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project

Re: Rsync config on sa-vm1.apache.org

2017-05-13 Thread Kevin A. McGrail
Don't turn it on yet. I run a mirror and will tar it up. Regards, KAM On May 13, 2017 3:00:54 PM EDT, Dave Jones wrote: > > >On 05/13/2017 01:21 PM, Dave Jones wrote: >> >> >> On 05/13/2017 01:15 PM, Dave Jones wrote: >>> Kevin, >>> I am nearly complete setting up the rsyncd again. I have fir

Re: Rsync config on sa-vm1.apache.org

2017-05-13 Thread Kevin A. McGrail
On 5/13/2017 3:16 PM, Dave Jones wrote: Are you going to pop on the box and scp your tar over? Another option is to use https://filedrop.ena.com and send it to me (djo...@ena.com) that way. The /var/www/bbmass.spamassassin.org dir is going to have most of the files. It's a lot of files in t

Re: Rsync config on sa-vm1.apache.org

2017-05-13 Thread Kevin A. McGrail
to open up port 873 to any source and then update DNS to > >point all of the CNAMES to sa-vm1.apache.org. > >Dave > >On 05/13/2017 02:29 PM, Kevin A. McGrail wrote: >> On 5/13/2017 3:16 PM, Dave Jones wrote: >>> Are you going to pop on the box and scp yo

Fwd: SA-Update Mirror Check: http://sa-update.secnap.net/ is up again

2017-05-13 Thread Kevin A. McGrail
NOTE, we'll likely be changing this to go to the sysadmins@s.a.o list since we now have that list. Forwarded Message Subject:SA-Update Mirror Check: http://sa-update.secnap.net/ is up again Date: Sat, 13 May 2017 17:01:12 -0400 From: root To: priv...@spamassa

Re: Rsync config on sa-vm1.apache.org

2017-05-13 Thread Kevin A. McGrail
On 5/13/2017 4:47 PM, Dave Jones wrote: It's working now. Seeing a lot of clients syncing now in rsyncd.log. BTW, I have setup a redundant mirror of sa-update.ena.com to add to the MIRRORED.BY. I have to get some firewall ACL help on Monday to allow port 80 to the servers. After that, you c

SysAdmin Tasklist was Re: Next priority to get running on sa-vm1.apache.org

2017-05-13 Thread Kevin A. McGrail
d after a mass-check announcement has been made on the spamassassin developer mailing list. anoncorpus mass-check result download area, available via anonymous access. -- Kevin A. McGrail Asst. Treasurer, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project #!/bin/sh # script fo

Re: SysAdmin Tasklist was Re: Next priority to get running on sa-vm1.apache.org

2017-05-13 Thread Kevin A. McGrail
e and password. Generally these are only granted after a mass-check announcement has been made on the spamassassin developer mailing list. anoncorpus mass-check result download area, available via anonymous access. -- Kevin A. McGrail Asst. Treasurer, Apache Software Foundation Chair Emeritus

Re: SysAdmin Tasklist was Re: Next priority to get running on sa-vm1.apache.org

2017-05-14 Thread Kevin A. McGrail
Assuming incoming mail works to root, you can then confirm the subscription. Ask if you need help. Regards, KAM -- Kevin A. McGrail Asst. Treasurer, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project

Buildbot is likely a priority

2017-05-14 Thread Kevin A. McGrail
with the files I need and then overridden DNS on my local machine so the scripts just "think" it worked. Regards, KAM -- Kevin A. McGrail Asst. Treasurer, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project

Re: SysAdmin Tasklist was Re: Next priority to get running on sa-vm1.apache.org

2017-05-14 Thread Kevin A. McGrail
On 5/14/2017 10:11 AM, Dave Jones wrote: Do we want to subscribe root like this? It doesn't need to receive any of these emails that will just fill up the root mailbox or possibly create a mail loop. I was thinking about allowing it as a non-member poster. I am more familiar with Mailman t

Re: ruleqa.spamassassin.org

2017-05-14 Thread Kevin A. McGrail
What server and path? I will see if my backups are better Regards, KAM On May 14, 2017 3:00:49 PM EDT, Dave Jones wrote: >Nevermind. I figured it out. I needed to have some data files for the > >script to read. It's working now showing the last backup we had on Jan > >26th. > >Now I am working

Re: You OK? We overloading you?

2017-05-14 Thread Kevin A. McGrail
he opie key. I think im stuck on this part or im reading it >wrong. > >"3. Setup Open a JIRA ticket at issues.apache.org similar to >INFRA-14045 to >get them access to our box." > >Thanks >--Bryan Vest > > >On Sun, May 14, 2017 at 8:18 AM, Kevin A. McGr

Re: Karma to access sa-vm1 with sudo access

2017-05-14 Thread Kevin A. McGrail
https://issues.apache.org/jira/browse/INFRA-14146 Perhaps you can email infra@a.o and ask for some tlc? Regards, KAM On May 14, 2017 9:36:10 PM EDT, Bryan Vest wrote: >Asking for Karma to access sa-vm1 with sudo access > >--Bryan Vest

Re: ApacheCon 2017

2017-05-15 Thread Kevin A. McGrail
Thanks. I think getting 3.4.2 will be my goal. I still have a lot of little issues to fix. Regards, KAM On May 15, 2017 8:40:11 AM EDT, Dave Jones wrote: >Kevin, >Good luck this week in Miami. I think you were trying to get SA 4.0 >built, released, and announced so I hope all goes well. >--

Re: SysAdmin Tasklist was Re: Next priority to get running on sa-vm1.apache.org

2017-05-15 Thread Kevin A. McGrail
Makes sense and thanks. Regards, KAM On May 15, 2017 9:09:05 AM EDT, Dave Jones wrote: > > >On 05/14/2017 09:25 AM, Kevin A. McGrail wrote: >> On 5/14/2017 10:11 AM, Dave Jones wrote: >>> >>> Do we want to subscribe root like this? It doesn't need to rece

Re: My stumbles on-boarding

2017-05-15 Thread Kevin A. McGrail
I would not sweat it. We are all volunteers and it's not like I had a yellow brick road of onboarding that was simple to follow. My two cents is just to be more vocal about hurdles. For example, in the email below there is little way for me to know what you have or have not done for onboardin

Re: checkSAupdateMirrors on sa-vm1.apache.org - 1 mirror DOWN

2017-05-15 Thread Kevin A. McGrail
Dave, is sec nap actually down? Checking manually it is answering and the other script is still running and not flagging either. Regards, KAM On May 15, 2017 12:17:31 PM EDT, r...@sa-vm1.apache.org wrote: >Fetching sa-update URLs from >http://spamassassin.apache.org/updates/MIRRORED.BY > >http

Re: My stumbles on-boarding

2017-05-15 Thread Kevin A. McGrail
Did you mention the ticket to infra? https://issues.apache.org/jira/browse/INFRA-14146 Regards, KAM On May 15, 2017 10:19:19 AM EDT, Bryan Vest wrote: >Time zone is Ohio EDT. I sent an email to infra asking for access since >I >was still getting the LDAP error last night. I have an account set

Re: My stumbles on-boarding

2017-05-15 Thread Kevin A. McGrail
As a side note why do you have multiple key pairs? I have just one, protected with a passphrase and use that on all the machines. Regards, KAM On May 15, 2017 10:37:42 AM EDT, Bryan Vest wrote: >I should have included where the accounts are: >I have the id.a.o account setup with PGP and SSH key

Re: My stumbles on-boarding

2017-05-15 Thread Kevin A. McGrail
Until infra responds about that ticket don't bother trying. Regards, KAM On May 15, 2017 11:45:09 AM EDT, Bryan Vest wrote: >I meant ssh debug turned on. > >On Mon, May 15, 2017 at 11:44 AM, Bryan Vest >wrote: > >> With ssh messenger turned on this is what I am getting right after it >> accepts

Re: checkSAupdateMirrors on sa-vm1.apache.org - 1 mirror DOWN

2017-05-15 Thread Kevin A. McGrail
On 5/15/2017 2:13 PM, Dave Jones wrote: There's something going on with routing between our server and that mirror. # curl -m 10 -s -S http://sa-update.secnap.net/ curl: (28) Connection timed out after 10001 milliseconds I can run the same command from my home Internet and it works fine. From

Re: ruleqa.spamassassin.org

2017-05-15 Thread Kevin A. McGrail
/html OK, from looking, Crashplan backups on sa2 stopped working because Java was out of date on that ancient version of Solaris so tbackup from January is going to be the best we have. Regards, KAM -- Kevin A. McGrail Asst. Treasurer, Apache Software Foundation Chair Emeritus Apache SpamAssassin

Re: PowerDNS web interface

2017-05-15 Thread Kevin A. McGrail
Hi Bryan, A) My default answer is always going to be add it to the wiki with sensitive portions redacted and point to SVN files that are encrypted. This follows in kind to how extremely, sensitive items B) In my line of work, it is absolutely a failure of any security audit to use a default

Re: PowerDNS web interface

2017-05-15 Thread Kevin A. McGrail
feel strongly enough about it to debate it with infra and see what their thoughts are? Regards, KAM -- Kevin A. McGrail Asst. Treasurer, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project

Re: checkSAupdateMirrors on sa-vm1.apache.org - 1 mirror DOWN

2017-05-15 Thread Kevin A. McGrail
On 5/15/2017 4:38 PM, Dave Jones wrote: Here is the ticket if you want to watch it: https://issues.apache.org/jira/browse/INFRA-14163 I am about to send the email to secur...@secnap.net. I will update the ticket comments so watch the ticket if you are interested. :) I saw it and it looks goo

Re: PowerDNS web interface

2017-05-15 Thread Kevin A. McGrail
Greg, Dave Jones brings up a good point about longevity of encrypted things for the foundation. Could infra maintain a key that can be added to things for a backdoor? See below for a snapshot of the relevant thread for background. Regards, KAM KAM: What you should do is use the pub key at

Re: My stumbles on-boarding

2017-05-15 Thread Kevin A. McGrail
On 5/15/2017 3:03 PM, Bryan Vest wrote: opie is all setup I can now sudo su - to root on sa-vm1. Woot! -- Kevin A. McGrail Asst. Treasurer, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project

Re: PowerDNS web interface

2017-05-15 Thread Kevin A. McGrail
we are considering other >options, >but that's neither here/there. if we switch vault providers in six >months... we'll *still* have one for an SA recovery key. > > >On Mon, May 15, 2017 at 5:27 PM, Kevin A. McGrail >> wrote: > >> Greg, >> >&g

Re: sa-update mirror addition

2017-05-15 Thread Kevin A. McGrail
You should be able to edit mirrored by and good to go. Might want to start out with a low weight. We should also try and svn that info without the actual updates. Regards, KAM On May 15, 2017 6:58:30 PM EDT, Dave Jones wrote: >Have setup sa-update.ena.com and they are ready to be checked and a

Re: sa-update mirror addition

2017-05-15 Thread Kevin A. McGrail
nd when I SFTP into people.apache.org I am limited to my home >directory. > >I searched the wiki and didn't find any details so I guess when I >figure >this out it needs to go on our new wiki page. > >Dave > >On 05/15/2017 08:00 PM, Kevin A. McGrail wrote: >> Y

Fwd: [auto] do-nightly-rescore-example 127

2017-05-16 Thread Kevin A. McGrail
Dave, there should have been cron logs as well but I didn't see them come into moderation. Regards, KAM Forwarded Message Subject:[auto] do-nightly-rescore-example 127 Date: Tue, 16 May 2017 02:25:02 -0700 (PDT) From: UpdatesD Cron Reply-To: rul...@spamas

Fwd: Re: [Ticket#954980087406] SpamAssassin update mirror hosting at http://sa-update.secnap.net

2017-05-18 Thread Kevin A. McGrail
Woot! Forwarded Message Subject: Re: [Ticket#954980087406] SpamAssassin update mirror hosting at http://sa-update.secnap.net Date: Thu, 18 May 2017 13:40:42 -0400 From: SECNAP Network Security Organization: SECNAP Network Security To: da...@apache.org CC: kev

Fwd: Re: https://issues.apache.org/jira/browse/INFRA-14092 ping?

2017-05-20 Thread Kevin A. McGrail
Just a note that I had no idea we had a Waiting for Infra button in Jira: "Please use the "WaitingForInfra" at the top of the Jira issue when you want somebody to look at it, rather than escalating." I've added this to the InfraNotes2017

Re: > The machines that run sa-update stuff are offline at the moment.

2017-05-20 Thread Kevin A. McGrail
gards, KAM -- Kevin A. McGrail Asst. Treasurer, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project

Re: Question about sabuildtools/bin

2017-05-21 Thread Kevin A. McGrail
I have been trying to.get rid of sabintools. It is a collection of many different items so you might have to look exe by exe and ask me questions Years ago I got all the items in sabuildtools working on a developer box of mine. It might be our only hope. Regards, KAM On May 21, 2017 6:00:44

Re: Questions about build/mkupdates/run_part2

2017-05-21 Thread Kevin A. McGrail
I can only guess that wasn't run. Did the cron file logs i sent over show it running? Regards, KAM On May 21, 2017 5:50:36 PM EDT, Dave Jones wrote: >Kevin, > >The old server had a cron job to run this but the script itself says it > >needing to be run interactively for a PGP key passphrase pro

Re: Questions about build/mkupdates/run_part2

2017-05-21 Thread Kevin A. McGrail
On 5/21/2017 9:45 PM, Dave Jones wrote: It does look like run_part2 was working from cron so I guess I will continue to do the same thing. Maybe someone removed the passphrase from the gpgkey so it could be completely automated and didn't update the script description in the heading. That wo

Re: Question about sabuildtools/bin

2017-05-21 Thread Kevin A. McGrail
On 5/21/2017 9:36 PM, Dave Jones wrote: I can replace them if that is the direction you want to go. They look like old versions of perl and GnuPG. I will start with what the script is actually calling from that bin directory and try to replace with system versions from packages. Agreed. Th

Re: sa-update mirror addition

2017-05-21 Thread Kevin A. McGrail
very low weight and bump it up after a few days. svn commit the change and that's it. I don't think there is anything more formal than that. Regards, KAM On 5/15/2017 9:39 PM, Kevin A. McGrail wrote: I don't think those servers are involved. I will brain dump on this tomorrow

Re: sa-update mirror addition

2017-05-24 Thread Kevin A. McGrail
I think there is a leap missing, sorry. Ok, so mirrored.by is in svn in site/. The copy for rsync should perhaps be a checkout with the extra files on top. Then an svn up keeps things in sync. Mirrored.by should be cleared.up how to update. On 5/22/2017 8:15 PM, Dave Jones wrote: I understan

Re: sa-update mirror addition

2017-05-24 Thread Kevin A. McGrail
es directory to be managed by SVN >with >> exclusions for all of the extra files. >> >> The link I was missing that I understand now is the >> spamassassin.apache.org/updates is managed from SVN. Makes complete >> sense now. >> >> Dave >> >

Re: > The machines that run sa-update stuff are offline at the moment.

2017-05-25 Thread Kevin A. McGrail
rs) >The last thing I have done with Windows was my MCP on NT4. The last >Windows I used was Windows7. So here I can't help too much. > >Greetings > >Frank > >Am 20.05.2017 um 16:26 schrieb Kevin A. McGrail: >> On 5/18/2017 2:35 PM, Frank Urban

Re: SA updates files archive

2017-05-30 Thread Kevin A. McGrail
r.gz* for 3.3.3 and greater I would like to move all other versions of files to an archive subdirectory that is excluded in the rsyncd.conf that are older than 1 month if that is OK with everyone else. This could become important if we start building new rules more than once a day. -- K

Re: SA updates files archive

2017-05-30 Thread Kevin A. McGrail
On 5/30/2017 9:47 AM, Dave Jones wrote: Ok. That's fine. To be clear, if we can confirm better backup situation, the archive dir idea sounds great! Working through your other emails. I was camping with BSA for Memorial Day weekend. Regards, KAM On 05/30/2017 08:23 AM, Kevin A. Mc

Re: SA updates files archive

2017-05-30 Thread Kevin A. McGrail
On 5/30/2017 9:57 AM, Dave Jones wrote: I setup an archive dir under the updates dir that is excluded from rsync so we would still keep the files on the server but they would drop off of the rsync out to the mirrors. I haven't moved any files yet. What I'd suggest is: - See my "soon to be s

Backups & Crashplan was Re: What a mess!

2017-05-30 Thread Kevin A. McGrail
minister things. They call this managing a headless box. See https://support.code42.com/CrashPlan/4/Configuring/Use_CrashPlan_on_a_headless_computer_version_4.2_and_earlier for more details. Regards, KAM -- Kevin A. McGrail Asst. Treasurer & VP Fundraising, Apache Software Foundation Ch

Re: What a mess!

2017-05-30 Thread Kevin A. McGrail
On 5/28/2017 5:29 PM, Dave Jones wrote: I have been all day on the do-stable-update-with-scores script. There is a build problem now that has me stumped. All of these scripts are a mess! They all do similar things in very different ways making it very hard to follow and troubleshoot. I fou

Re: Potential problem with do-stable-update-with-scores cron job

2017-05-30 Thread Kevin A. McGrail
bining servers, etc. is too much for me to remember, sorry. I can try and dig too but it's confusing to me as well. However, an important thing is are we running the correct scripts. Since I don't see /home/dos on spamassassin-vm1 in my backups, I'm guessing it was on a differ

Re: > The machines that run sa-update stuff are offline at the moment.

2017-05-30 Thread Kevin A. McGrail
On 5/26/2017 1:04 AM, Frank Urban wrote: Oh yes. I believe its a very good idea to check everyone very well who will get root access to any system. Are there anyone around Frankfurt/Germany who is still working for you? Maybe I can speak with this person. The sysadmins group is only a few peop

Re: Backups & Crashplan was Re: What a mess!

2017-05-30 Thread Kevin A. McGrail
We should add /etc and /var/www and exclude /usr/local/spamassassin/backups since it's so large. Added/excluded as suggested. Thanks very much for the feedback We still need to create a recovery gpg key and re-sign everything with that key before we get too far down that road. I haven't forgot

Re: Potential problem with do-stable-update-with-scores cron job

2017-05-30 Thread Kevin A. McGrail
ratch. Dave On 05/30/2017 12:17 PM, Kevin A. McGrail wrote: On 5/27/2017 3:12 PM, Dave Jones wrote: This script: https://svn.apache.org/repos/asf/spamassassin/trunk/masses/rule-update-score-gen/do-nightly-rescore-example refers to '/home/dos/sa-score-gen/nightly-rescore-via-cron' w

Re: Questions about build/mkupdates/run_part2

2017-05-30 Thread Kevin A. McGrail
he GPG key so it was completely automated for a while. "A while" = "years" like 7 or more... Best, KAM -- Kevin A. McGrail Asst. Treasurer & VP Fundraising, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project

Re: Potential problem with do-stable-update-with-scores cron job

2017-05-30 Thread Kevin A. McGrail
ur advice and post on the dev mailing list to see if anyone knows >anything or has some backups somewhere. > >Dave > >On 05/30/2017 07:00 PM, Kevin A. McGrail wrote: >> Ahh. This was for the quick masschecks for the preflight rules. I >> don't think it is used no

Re: Fwd: Cron cd /var/www/bbmass.spamassassin.org/updates && svn update > /dev/null

2017-05-31 Thread Kevin A. McGrail
than the rules (i.e. 1796871.tar.gz, 1796871.tar.gz.asc, and 1796871.tar.gz.sha1) which are excluded from SVN. This is mainly to keep the MIRRORED.BY and a few other files current. Dave On 05/31/2017 01:36 PM, Kevin A. McGrail wrote: I thought this was odd... Forwarded Message

Re: Cron cd / && run-parts --report /etc/cron.hourly

2017-05-31 Thread Kevin A. McGrail
Sounds awesome and feel free to spam sysadmins@ I did not get to look at the other issue but I will. Regards, KAM On May 31, 2017 7:27:53 PM EDT, Dave Jones wrote: >This is a script I am testing out just for notifications to my email >address. I will set it up to be silent now like it should h

Re: Backups & Crashplan

2017-06-01 Thread Kevin A. McGrail
On 5/31/2017 2:52 PM, Dave Jones wrote: On 05/30/2017 05:44 PM, Kevin A. McGrail wrote: We should add /etc and /var/www and exclude /usr/local/spamassassin/backups since it's so large. Added/excluded as suggested. Thanks very much for the feedback Do we need to setup crashplan to run

Re: Backups & Crashplan

2017-06-01 Thread Kevin A. McGrail
On 6/1/2017 9:30 AM, Dave Jones wrote: Where should I put the private key then? If you are going to personally see Greg, then it may make more sense for you to generate it offline so the private key is not checked into SVN or emailed from me to you. Sorry, I wasn't clear. In my head, I had b

Re: Potential problem with do-stable-update-with-scores cron job

2017-06-02 Thread Kevin A. McGrail
I think you are right. And that the system needs a run to create the files for the scores on the new server. On 5/30/2017 8:25 PM, Kevin A. McGrail wrote: It's quite possible bb does update rule qa. Don't take what I say as absolute... Will look at this more tomorrow. Regards, K

Re: Questions about build/mkupdates/run_part2

2017-06-02 Thread Kevin A. McGrail
r 4.0? Regards, KAM -- Kevin A. McGrail Asst. Treasurer & VP Fundraising, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project

Re: Potential problem with do-stable-update-with-scores cron job

2017-06-02 Thread Kevin A. McGrail
On 6/2/2017 9:10 AM, Dave Jones wrote: On the ruleqa list yesterday, John Hardin confirmed that buildbot was running before to centrally process the full uploaded corpora. Sigh. This is going to be difficult to figure out and get going again so we need to focus on the distributed masscheck con

Re: Questions about build/mkupdates/run_part2

2017-06-02 Thread Kevin A. McGrail
last email about QA'ing the update file from last night then we should be ready to start updating DNS again for sa-update. Dave On 06/02/2017 08:05 AM, Kevin A. McGrail wrote: On 5/30/2017 8:46 PM, Dave Jones wrote: Only in old/: 72_scores.cf Only in old/: languages Only i

Re: Forced a ruleqa run and scores update for sa-update

2017-06-05 Thread Kevin A. McGrail
On 6/5/2017 2:55 PM, Dave Jones wrote: Here are the current values: 0.3.3.updates.spamassassin.org.TXT"1786853" 1.3.3.updates.spamassassin.org.TXT"1786853" 2.3.3.updates.spamassassin.org.TXT"1786853" 3.3.3.updates.spamassassin.org.TXT"1786853" Do we want to put t

  1   2   3   4   >