From owner-freebsd-hubs Wed Nov 4 05:13:29 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id FAA19768 for freebsd-hubs-outgoing; Wed, 4 Nov 1998 05:13:29 -0800 (PST) (envelope-from owner-freebsd-hubs@FreeBSD.ORG) Received: from implode.root.com (implode.root.com [198.145.90.17]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id FAA19763 for ; Wed, 4 Nov 1998 05:13:27 -0800 (PST) (envelope-from xroot@implode.root.com) Received: from implode.root.com (localhost [127.0.0.1]) by implode.root.com (8.8.5/8.8.5) with ESMTP id FAA28788 for ; Wed, 4 Nov 1998 05:14:36 -0800 (PST) Message-Id: <199811041314.FAA28788@implode.root.com> To: freebsd-hubs@FreeBSD.ORG Subject: mirroring of ftp.freebsd.org (wcarchive.cdrom.com) From: David Greenman Reply-To: dg@root.com Date: Wed, 04 Nov 1998 05:14:36 -0800 Sender: owner-freebsd-hubs@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org I would like to warn everyone here that I am clamping down a bit a abusive mirrors of ftp.freebsd.org (wcarchive.cdrom.com). An abusive mirror is one that: 1) Mirrors ftp.cdrom.com more than 4 times a day without prior permission 2) Has multiple mirrors running simultaneously 3) Downloads the same files over and over again, day after day If your site falls into any of the above 3 categories and I happen to notice, I will block the machine from further access to wcarchive. I would also highly recommend that any mirrors have a reverse DNS entry. I'm much more likely to kill it off if it has no name and apears to be abusive than I would be if I recognize the machine as legitimate. -DG David Greenman Co-founder/Principal Architect, The FreeBSD Project To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hubs" in the body of the message From owner-freebsd-hubs Wed Nov 4 06:08:36 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id GAA27774 for freebsd-hubs-outgoing; Wed, 4 Nov 1998 06:08:36 -0800 (PST) (envelope-from owner-freebsd-hubs@FreeBSD.ORG) Received: from skraldespand.demos.su (skraldespand.demos.su [194.87.5.19]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id GAA27768 for ; Wed, 4 Nov 1998 06:08:32 -0800 (PST) (envelope-from mishania@skraldespand.demos.su) Received: by skraldespand.demos.su id RAA12030; (8.8.8/D) Wed, 4 Nov 1998 17:07:47 +0300 (MSK) Message-ID: <19981104170747.40886@demos.su> Date: Wed, 4 Nov 1998 17:07:47 +0300 From: "Mikhail A. Sokolov" To: dg@root.com Cc: freebsd-hubs@FreeBSD.ORG Subject: Re: mirroring of ftp.freebsd.org (wcarchive.cdrom.com) References: <199811041314.FAA28788@implode.root.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii In-Reply-To: <199811041314.FAA28788@implode.root.com>; from David Greenman on Wed, Nov 04, 1998 at 05:14:36AM -0800 Organization: Demos Company, Ltd., Moscow, Russian Federation. X-Point-of-View: Gravity is myth, - the earth sucks. X-Useless-Header: Look ma! It's a # sign! Sender: owner-freebsd-hubs@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Very unpleasant attitude towards mirrors. Even worse than Microsoft's, you know. On Wed, Nov 04, 1998 at 05:14:36AM -0800, David Greenman wrote: # I would like to warn everyone here that I am clamping down a bit a abusive # mirrors of ftp.freebsd.org (wcarchive.cdrom.com). An abusive mirror is one # that: # # 1) Mirrors ftp.cdrom.com more than 4 times a day without prior permission # 2) Has multiple mirrors running simultaneously # 3) Downloads the same files over and over again, day after day # # If your site falls into any of the above 3 categories and I happen to # notice, I will block the machine from further access to wcarchive. # I would also highly recommend that any mirrors have a reverse DNS entry. # I'm much more likely to kill it off if it has no name and apears to be # abusive than I would be if I recognize the machine as legitimate. # # -DG # # David Greenman # Co-founder/Principal Architect, The FreeBSD Project -- -mishania To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hubs" in the body of the message From owner-freebsd-hubs Wed Nov 4 06:15:48 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id GAA29153 for freebsd-hubs-outgoing; Wed, 4 Nov 1998 06:15:48 -0800 (PST) (envelope-from owner-freebsd-hubs@FreeBSD.ORG) Received: from implode.root.com (implode.root.com [198.145.90.17]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id GAA29148 for ; Wed, 4 Nov 1998 06:15:47 -0800 (PST) (envelope-from xroot@implode.root.com) Received: from implode.root.com (localhost [127.0.0.1]) by implode.root.com (8.8.5/8.8.5) with ESMTP id GAA29296; Wed, 4 Nov 1998 06:16:50 -0800 (PST) Message-Id: <199811041416.GAA29296@implode.root.com> To: "Mikhail A. Sokolov" cc: freebsd-hubs@FreeBSD.ORG Subject: Re: mirroring of ftp.freebsd.org (wcarchive.cdrom.com) In-reply-to: Your message of "Wed, 04 Nov 1998 17:07:47 +0300." <19981104170747.40886@demos.su> From: David Greenman Reply-To: dg@root.com Date: Wed, 04 Nov 1998 06:16:50 -0800 Sender: owner-freebsd-hubs@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org >Very unpleasant attitude towards mirrors. Even worse than Microsoft's, you > know. In what way is it unpleasant? Abusive mirrors are a form of denial of service attack and I would remiss in my responsibilites if I didn't take action to stop it. -DG David Greenman Co-founder/Principal Architect, The FreeBSD Project To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hubs" in the body of the message From owner-freebsd-hubs Wed Nov 4 06:40:45 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id GAA03761 for freebsd-hubs-outgoing; Wed, 4 Nov 1998 06:40:45 -0800 (PST) (envelope-from owner-freebsd-hubs@FreeBSD.ORG) Received: from skraldespand.demos.su (skraldespand.demos.su [194.87.5.19]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id GAA03753 for ; Wed, 4 Nov 1998 06:40:39 -0800 (PST) (envelope-from mishania@skraldespand.demos.su) Received: by skraldespand.demos.su id RAA14207; (8.8.8/D) Wed, 4 Nov 1998 17:39:51 +0300 (MSK) Message-ID: <19981104173951.09434@demos.su> Date: Wed, 4 Nov 1998 17:39:51 +0300 From: "Mikhail A. Sokolov" To: dg@root.com Cc: "Mikhail A. Sokolov" , freebsd-hubs@FreeBSD.ORG Subject: Re: mirroring of ftp.freebsd.org (wcarchive.cdrom.com) References: <19981104170747.40886@demos.su> <199811041416.GAA29296@implode.root.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii In-Reply-To: <199811041416.GAA29296@implode.root.com>; from David Greenman on Wed, Nov 04, 1998 at 06:16:50AM -0800 Organization: Demos Company, Ltd., Moscow, Russian Federation. X-Point-of-View: Gravity is myth, - the earth sucks. X-Useless-Header: Look ma! It's a # sign! Sender: owner-freebsd-hubs@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Wed, Nov 04, 1998 at 06:16:50AM -0800, David Greenman wrote: # >Very unpleasant attitude towards mirrors. Even worse than Microsoft's, you # > know. # # In what way is it unpleasant? Abusive mirrors are a form of denial of # service attack and I would remiss in my responsibilites if I didn't take # action to stop it. People are either mirroring ftp.freebsd.org, or they do DoS attack trying to abuse ftpd. In the first case, the reminder to behave is offending, in the second it's useless. If you once see somebody is abusing, you will kill/close the access for the machine [by default], since it's normal internet service which is being held by/with those unspoken laws to close access in cases of offence. # -DG # # David Greenman # Co-founder/Principal Architect, The FreeBSD Project -- -mishania To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hubs" in the body of the message From owner-freebsd-hubs Wed Nov 4 07:04:11 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id HAA07482 for freebsd-hubs-outgoing; Wed, 4 Nov 1998 07:04:11 -0800 (PST) (envelope-from owner-freebsd-hubs@FreeBSD.ORG) Received: from implode.root.com (implode.root.com [198.145.90.17]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id HAA07477 for ; Wed, 4 Nov 1998 07:04:09 -0800 (PST) (envelope-from xroot@implode.root.com) Received: from implode.root.com (localhost [127.0.0.1]) by implode.root.com (8.8.5/8.8.5) with ESMTP id HAA29916; Wed, 4 Nov 1998 07:05:06 -0800 (PST) Message-Id: <199811041505.HAA29916@implode.root.com> To: "Mikhail A. Sokolov" cc: freebsd-hubs@FreeBSD.ORG Subject: Re: mirroring of ftp.freebsd.org (wcarchive.cdrom.com) In-reply-to: Your message of "Wed, 04 Nov 1998 17:39:51 +0300." <19981104173951.09434@demos.su> From: David Greenman Reply-To: dg@root.com Date: Wed, 04 Nov 1998 07:05:06 -0800 Sender: owner-freebsd-hubs@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org >On Wed, Nov 04, 1998 at 06:16:50AM -0800, David Greenman wrote: ># >Very unpleasant attitude towards mirrors. Even worse than Microsoft's, you ># > know. ># ># In what way is it unpleasant? Abusive mirrors are a form of denial of ># service attack and I would remiss in my responsibilites if I didn't take ># action to stop it. > >People are either mirroring ftp.freebsd.org, or they do DoS attack trying >to abuse ftpd. In the first case, the reminder to behave is offending, in >the second it's useless. If you once see somebody is abusing, you will >kill/close the access for the machine [by default], since it's normal >internet service which is being held by/with those unspoken laws to >close access in cases of offence. First to address the second part of the above; I have no other recourse in most cases than to temporarily block the site since 1) we don't log the anonymous 'password' (for security reasons), and 2) the machines I often see the abuse from have no reverse DNS, making it difficult or impossible to find out who to contact about the problem. To address the first part, perhaps I am addressing the wrong crowd with this warning, but I want to make sure that legitimate mirrors aren't mistaken as denial of service attacks just because they've chosen to use an overly aggressive mirroring strategy. We've never established any formal FTP mirroring policy for wcarchive, so I can't presume that people know what is okay and what is not. FTP/mirror is not a very good protocol for synchronizing source trees. We've developed cvsup for that purpose and we have special machines to serve it. With that said, there is nothing wrong with mirroring wcarchive once or twice a day, or even more frequently if you ask first, but if your goal is to keep up to date with -current, then I strongly encourage using our cvsup servers for that. -DG David Greenman Co-founder/Principal Architect, The FreeBSD Project To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hubs" in the body of the message