From owner-freebsd-hubs@FreeBSD.ORG Sun Feb 3 17:45:06 2013 Return-Path: Delivered-To: hubs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id C87D0716 for ; Sun, 3 Feb 2013 17:45:06 +0000 (UTC) (envelope-from tesuuji@gmail.com) Received: from mail-qa0-f42.google.com (mail-qa0-f42.google.com [209.85.216.42]) by mx1.freebsd.org (Postfix) with ESMTP id 938342C8 for ; Sun, 3 Feb 2013 17:45:06 +0000 (UTC) Received: by mail-qa0-f42.google.com with SMTP id cr7so979244qab.1 for ; Sun, 03 Feb 2013 09:45:00 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:date:message-id:subject:from:to :content-type; bh=9T3GItGjcWGmw8/67qkH0JOa1GjYW+ggi0FrtXsXFiY=; b=SX8SSM/KnWVZx9kau3h7c0mDPhHAMm/jMf5wjhc+beAqcxsJbvRYe9sexfZBAU0ajl 52gCCs603DB4e/Mmc0/xMe+wQngetok6xVJju9lcSk5SZic6mkoLV2ElKR7rbsmtAb+w iiAudfVRHMXPnqx6Z86V/douIMwDfLfboidtlW8fY57WNUvWbU9H9UUe+2d2T8wvUNLw 4gqrtHxS0Br+fQI6R3ARiQZLOT4IWu9mbV9ovhf+rHwlKLSg5MYSzGnxZLsw6wDxIrXK 7xiYmDPmdih0C7FOu7sqlgghlcma/dmIIpBuZGDQk9KCXZEL8TyuV4tEpuyiIvaRDCo/ 7G0Q== MIME-Version: 1.0 X-Received: by 10.229.137.1 with SMTP id u1mr4140126qct.86.1359913014710; Sun, 03 Feb 2013 09:36:54 -0800 (PST) Received: by 10.49.107.202 with HTTP; Sun, 3 Feb 2013 09:36:54 -0800 (PST) Date: Sun, 3 Feb 2013 17:36:54 +0000 Message-ID: Subject: Can't connect to update.freebsd.org. From: Ben jamin To: hubs@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.14 X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 03 Feb 2013 17:45:06 -0000 When I try to run freebsd-update with a default config I get: > Looking up update.FreeBSD.org mirrors... none found. > Fetching public key from update.FreeBSD.org... failed. > No mirrors remaining, giving up. > update1.freebsd.org and update2.freebsd.org appear to be down. I had to modify the server in freebsd-update.conf to update3.freebsd.org in order for it to work. From owner-freebsd-hubs@FreeBSD.ORG Sun Feb 3 18:00:05 2013 Return-Path: Delivered-To: hubs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 71ABAA2A for ; Sun, 3 Feb 2013 18:00:05 +0000 (UTC) (envelope-from simon@qxnitro.org) Received: from mail-lb0-f178.google.com (mail-lb0-f178.google.com [209.85.217.178]) by mx1.freebsd.org (Postfix) with ESMTP id EF5DB341 for ; Sun, 3 Feb 2013 18:00:04 +0000 (UTC) Received: by mail-lb0-f178.google.com with SMTP id n1so6077343lba.9 for ; Sun, 03 Feb 2013 09:59:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qxnitro.org; s=google; h=mime-version:x-received:x-originating-ip:in-reply-to:references :date:message-id:subject:from:to:cc:content-type; bh=OAfqRYzme3buAXPN38a620zgCK1EKnZu/v+CQT2YPhA=; b=AWlAHOBVwhUwn3eaCZcQMYnO96occ4yuUm7i6oTAM7kGSUgrjjKyGOLX7OOfdn1fEI PSm6K9vHE8q/2RcyC3nLY41Mcb9lRqCoVy75qqTsOH+w8aDOh0nQGLltd0okBtRdV3FK izZG8JvfbqpVX65EEfHeDGYuANOXajy8eNTKc= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:x-received:x-originating-ip:in-reply-to:references :date:message-id:subject:from:to:cc:content-type:x-gm-message-state; bh=OAfqRYzme3buAXPN38a620zgCK1EKnZu/v+CQT2YPhA=; b=TAhcFajSAvPQqHGrHx8lgbA8NrQVviQn+7iW14cKoZUSEvGmlj8QQO1hk379LholWL Kj7ZNu5iqgkMVplP9IYvEBRte5+dM1U6c8WlNq2IDubSLDw6ysbhk5A6TrA0u659a9Aa JfM/+OeKSxdZYpQJFKtFrZJtFKJ9TRAXuKATt3YPDNZvW2VDwsniHQGH9YmfT3fxXpYL JON8e86vbkTY7ZVOZlpDurHOF3T38HXj9PuH3wqf8/MDLhi8Jtq4JWSgfGvfZ8E3Yq0t mmLSlhuKgfuII6VBnvaoI+kCWC8nK0TLEl7Z96KPA55xyH7Zo6WRj6TTitvYnAo0ltTX r/vg== MIME-Version: 1.0 X-Received: by 10.112.11.33 with SMTP id n1mr7311733lbb.18.1359914398231; Sun, 03 Feb 2013 09:59:58 -0800 (PST) Received: by 10.112.40.229 with HTTP; Sun, 3 Feb 2013 09:59:57 -0800 (PST) X-Originating-IP: [89.100.233.26] In-Reply-To: References: Date: Sun, 3 Feb 2013 17:59:58 +0000 Message-ID: Subject: Re: Can't connect to update.freebsd.org. From: "Simon L. B. Nielsen" To: Ben jamin Content-Type: text/plain; charset=UTF-8 X-Gm-Message-State: ALoCoQmQ0cp4dIFVQ9Fq4Swsqr3gOnGR/GdjR+r8Q7cI+6yQCoVoz2uSt+NLtJCcKL+1dIxfSeV0 Cc: hubs@freebsd.org X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 03 Feb 2013 18:00:05 -0000 On 3 February 2013 17:36, Ben jamin wrote: > > When I try to run freebsd-update with a default config I get: > > > Looking up update.FreeBSD.org mirrors... none found. > > Fetching public key from update.FreeBSD.org... failed. > > No mirrors remaining, giving up. > > update1.freebsd.org and update2.freebsd.org appear to be down. I had to > modify the server in freebsd-update.conf to update3.freebsd.org in order > for it to work. Without any details (FreeBSD version, time it happened etc). It's hard to comment on why that fails. It's correct that update1 and update2 doesn't currently work, but there are no guarantees they will. The supported way is using our SRV records at update.freebsd.org which point at the running servers. I suspect the problem might be broken DNS on your / your ISP's end causing freebsd-update's SRV code to fail and falling back to A records. Try running the following: host -t srv _http._tcp.update.freebsd.org It should produce something like this: [root@leto:~] host -t srv _http._tcp.update.freebsd.org _http._tcp.update.freebsd.org has SRV record 1 50 80 update5.freebsd.org. _http._tcp.update.freebsd.org has SRV record 1 5 80 update3.freebsd.org. _http._tcp.update.freebsd.org has SRV record 1 35 80 update4.freebsd.org. PS. freebsd-update.conf should contain: ServerName update.FreeBSD.org for freebsd-update to use the SRV records. -- Simon L. B. Nielsen From owner-freebsd-hubs@FreeBSD.ORG Mon Feb 4 16:48:49 2013 Return-Path: Delivered-To: freebsd-hubs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id EBFBFBEC; Mon, 4 Feb 2013 16:48:49 +0000 (UTC) (envelope-from fabian@wenks.ch) Received: from batman.home4u.ch (batman.home4u.ch [62.12.173.2]) by mx1.freebsd.org (Postfix) with ESMTP id 54D278D7; Mon, 4 Feb 2013 16:48:48 +0000 (UTC) X-Virus-Scanned: amavisd-new at home4u.ch Received: from flashback.wenks.ch (fabian@flashback.wenks.ch [IPv6:2001:8a8:1005:1:223:dfff:fedf:13c9]) (authenticated bits=0) by batman.home4u.ch (8.14.4/8.14.4) with ESMTP id r14GRGRv063066 (version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=NO); Mon, 4 Feb 2013 17:27:16 +0100 (CET) (envelope-from fabian@wenks.ch) Message-ID: <510FE164.6070502@wenks.ch> Date: Mon, 04 Feb 2013 17:27:16 +0100 From: Fabian Wenk User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:17.0) Gecko/20130107 Thunderbird/17.0.2 MIME-Version: 1.0 To: freebsd-security@freebsd.org, freebsd-hubs@freebsd.org Subject: Full-Disclosure posting "FreeBSD 9.1 ftpd Remote Denial of Service" Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Feb 2013 16:48:50 -0000 Hello A few days ago there was the posting "FreeBSD 9.1 ftpd Remote Denial of Service" [1] on the Full-Disclosure mailing list. Is this a known issue to the FreeBSD community? [1] http://lists.grok.org.uk/pipermail/full-disclosure/2013-February/089583.html There are also many ftp.*.freebsd.org mirrors listed in the above mention posting, so I also put freebsd-hubs@ into the recipient list. This will probably help, that ftp mirror operators are alerted and can take any action if needed. bye Fabian From owner-freebsd-hubs@FreeBSD.ORG Mon Feb 4 19:40:09 2013 Return-Path: Delivered-To: freebsd-hubs@freebsd.org Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id 9FD3A170; Mon, 4 Feb 2013 19:40:09 +0000 (UTC) (envelope-from mark@exonetric.com) Received: from relay.exonetric.net (relay0.exonetric.net [178.250.72.161]) by mx1.freebsd.org (Postfix) with ESMTP id 6FD4A8D2; Mon, 4 Feb 2013 19:40:09 +0000 (UTC) Received: from [192.168.0.13] (186.211.187.81.in-addr.arpa [81.187.211.186]) by relay.exonetric.net (Postfix) with ESMTPSA id 5A55A2C8EA; Mon, 4 Feb 2013 19:40:02 +0000 (GMT) Subject: Re: Full-Disclosure posting "FreeBSD 9.1 ftpd Remote Denial of Service" Mime-Version: 1.0 (Apple Message framework v1283) Content-Type: text/plain; charset=us-ascii From: Mark Blackman In-Reply-To: <510FE164.6070502@wenks.ch> Date: Mon, 4 Feb 2013 19:40:01 +0000 Content-Transfer-Encoding: quoted-printable Message-Id: <440A56B8-FA9A-41C4-881E-F454D1B8DE75@exonetric.com> References: <510FE164.6070502@wenks.ch> To: Fabian Wenk X-Mailer: Apple Mail (2.1283) Cc: freebsd-security@freebsd.org, freebsd-hubs@freebsd.org X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Feb 2013 19:40:09 -0000 On 4 Feb 2013, at 16:27, Fabian Wenk wrote: > Hello >=20 > A few days ago there was the posting "FreeBSD 9.1 ftpd Remote Denial = of Service" [1] on the Full-Disclosure mailing list. Is this a known = issue to the FreeBSD community? >=20 > [1] = http://lists.grok.org.uk/pipermail/full-disclosure/2013-February/089583.ht= ml >=20 > There are also many ftp.*.freebsd.org mirrors listed in the above = mention posting, so I also put freebsd-hubs@ into the recipient list. = This will probably help, that ftp mirror operators are alerted and can = take any action if needed. I wasn't aware of this one, thanks for the heads up here. - Mark= From owner-freebsd-hubs@FreeBSD.ORG Mon Feb 4 21:28:54 2013 Return-Path: Delivered-To: freebsd-hubs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id C158330A for ; Mon, 4 Feb 2013 21:28:54 +0000 (UTC) (envelope-from never@nevermind.kiev.ua) Received: from mail-vc0-f178.google.com (mail-vc0-f178.google.com [209.85.220.178]) by mx1.freebsd.org (Postfix) with ESMTP id 6BD9E11C for ; Mon, 4 Feb 2013 21:28:54 +0000 (UTC) Received: by mail-vc0-f178.google.com with SMTP id m8so4224302vcd.9 for ; Mon, 04 Feb 2013 13:28:53 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:x-received:in-reply-to:references:date:message-id :subject:from:to:cc:content-type:x-gm-message-state; bh=2k2Ulesc4BTTc5LDTTnLI4TMoXJfE3jZuFIaypHmjQo=; b=OJ+cO+IBXg6fuNjVKm4gjl9SuLfH0ZzOBpo7N57b+4b1i+E4TLyKu2wWYnaTXEaIIx Yfur2o+U+OIHHV2VS2LCx6ThbStv2c/KzsozCiHRrSJ0aeQ4AvdAztdjj9+D2vENIrKx qIKLwm/6i1WzrdlSui2NkPFFz+AzqpQ57WlFjNHzN02DJDnUILvsj/ytuAI29Jsqm6ox uEarw6eQ9kl7O2TK8U+JifzsR0AL7MbhzS9n26kySFyAbIA1c3IDa1ED+yRElbmGE8vf XD8UnuH6TevLh92jiN5gHGUhk8x0xwaTglFDFXe0JgRsxE0cTs69Jrq8z3xn7534UW+n WcAQ== MIME-Version: 1.0 X-Received: by 10.220.119.200 with SMTP id a8mr24176006vcr.38.1360013333543; Mon, 04 Feb 2013 13:28:53 -0800 (PST) Received: by 10.220.82.7 with HTTP; Mon, 4 Feb 2013 13:28:53 -0800 (PST) In-Reply-To: <510FE164.6070502@wenks.ch> References: <510FE164.6070502@wenks.ch> Date: Mon, 4 Feb 2013 23:28:53 +0200 Message-ID: Subject: Re: Full-Disclosure posting "FreeBSD 9.1 ftpd Remote Denial of Service" From: Alexandr Kovalenko To: Fabian Wenk Content-Type: text/plain; charset=ISO-8859-1 X-Gm-Message-State: ALoCoQnuqCptSDqMdZfjXXVFD9xFWMtoMT/ojXr9DLaCP91CDdRlwIYBqY3AiXaP7m0xsNDXUHsz Cc: freebsd-security@freebsd.org, freebsd-hubs@freebsd.org X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Feb 2013 21:28:54 -0000 On Mon, Feb 4, 2013 at 6:27 PM, Fabian Wenk wrote: > A few days ago there was the posting "FreeBSD 9.1 ftpd Remote Denial of > Service" [1] on the Full-Disclosure mailing list. Is this a known issue to > the FreeBSD community? > > [1] > http://lists.grok.org.uk/pipermail/full-disclosure/2013-February/089583.html > > There are also many ftp.*.freebsd.org mirrors listed in the above mention > posting, so I also put freebsd-hubs@ into the recipient list. This will > probably help, that ftp mirror operators are alerted and can take any action > if needed. I can confirm this is an issue on stable/9 r245742. Though I hardly can call it DoS as normally ftp account is running with well-defined ulimits and proper ftpd usage pattern does not generate much CPU usage, so you can keep limits pretty much low, thus not being affected by so-called "DoS". Nevertheless any ideas on how to fix our glob(3)? Regards, Alexandr. From owner-freebsd-hubs@FreeBSD.ORG Mon Feb 4 22:01:41 2013 Return-Path: Delivered-To: freebsd-hubs@freebsd.org Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id 3A236425; Mon, 4 Feb 2013 22:01:41 +0000 (UTC) (envelope-from marck@rinet.ru) Received: from woozle.rinet.ru (woozle.rinet.ru [195.54.192.68]) by mx1.freebsd.org (Postfix) with ESMTP id A2D482DB; Mon, 4 Feb 2013 22:01:40 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by woozle.rinet.ru (8.14.5/8.14.5) with ESMTP id r14M1WXV083092; Tue, 5 Feb 2013 02:01:32 +0400 (MSK) (envelope-from marck@rinet.ru) Date: Tue, 5 Feb 2013 02:01:32 +0400 (MSK) From: Dmitry Morozovsky To: Alexandr Kovalenko Subject: Re: Full-Disclosure posting "FreeBSD 9.1 ftpd Remote Denial of Service" In-Reply-To: Message-ID: References: <510FE164.6070502@wenks.ch> User-Agent: Alpine 2.00 (BSF 1167 2008-08-23) X-NCC-RegID: ru.rinet X-OpenPGP-Key-ID: 6B691B03 MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.2.7 (woozle.rinet.ru [0.0.0.0]); Tue, 05 Feb 2013 02:01:32 +0400 (MSK) Cc: freebsd-hubs@freebsd.org, freebsd-security@freebsd.org, Fabian Wenk X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Feb 2013 22:01:41 -0000 On Mon, 4 Feb 2013, Alexandr Kovalenko wrote: > On Mon, Feb 4, 2013 at 6:27 PM, Fabian Wenk wrote: > > A few days ago there was the posting "FreeBSD 9.1 ftpd Remote Denial of > > Service" [1] on the Full-Disclosure mailing list. Is this a known issue to > > the FreeBSD community? > > > > [1] > > http://lists.grok.org.uk/pipermail/full-disclosure/2013-February/089583.html > > > > There are also many ftp.*.freebsd.org mirrors listed in the above mention > > posting, so I also put freebsd-hubs@ into the recipient list. This will > > probably help, that ftp mirror operators are alerted and can take any action > > if needed. > > I can confirm this is an issue on stable/9 r245742. Though I hardly > can call it DoS as normally ftp account is running with well-defined > ulimits and proper ftpd usage pattern does not generate much CPU > usage, so you can keep limits pretty much low, thus not being affected > by so-called "DoS". > > Nevertheless any ideas on how to fix our glob(3)? Not the global fix, but workaround (kinda) for current situation, via dadv: Add to your /etc/login.conf ftp:\ :priority=20:\ :cputime=5: :tc=default: and rebuild yout login.conf database via cap_mkdb /etc/login.conf Than, apply newly create class to anonymous ftp user: pw usermod ftp -L ftp This should not affect regular ftp consumer, as they are hardly comsume host' resources, but will stop malicious anonymous users from eating your CPU resources. -- Sincerely, D.Marck [DM5020, MCK-RIPE, DM3-RIPN] [ FreeBSD committer: marck@FreeBSD.org ] ------------------------------------------------------------------------ *** Dmitry Morozovsky --- D.Marck --- Wild Woozle --- marck@rinet.ru *** ------------------------------------------------------------------------ From owner-freebsd-hubs@FreeBSD.ORG Tue Feb 5 10:12:23 2013 Return-Path: Delivered-To: freebsd-hubs@freebsd.org Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id CB69FB54 for ; Tue, 5 Feb 2013 10:12:23 +0000 (UTC) (envelope-from pseudo@colocall.net) Received: from out.smtp.colocall.net (out.smtp.colocall.net [62.149.2.61]) by mx1.freebsd.org (Postfix) with ESMTP id 5D7E0AAA for ; Tue, 5 Feb 2013 10:12:22 +0000 (UTC) Received: from colocall.net (root@zeus.colocall.net [62.149.2.1]) by out.smtp.colocall.net with ESMTP id r15AC1Bf069479 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Tue, 5 Feb 2013 12:12:02 +0200 (EET) (envelope-from pseudo@colocall.net) X-SPAM-Check-IP: 62.149.2.1 Received: from zeus.colocall.net (pseudo@localhost [127.0.0.1]) by colocall.net with ESMTP id r15AC1aD055189 for ; Tue, 5 Feb 2013 12:12:01 +0200 (EET) (envelope-from pseudo@zeus.colocall.net) Received: (from pseudo@localhost) by zeus.colocall.net (8.14.5/8.14.5/Submit) id r15AC1C3055185 for freebsd-hubs@freebsd.org; Tue, 5 Feb 2013 12:12:01 +0200 (EET) (envelope-from pseudo) Date: Tue, 5 Feb 2013 12:12:01 +0200 From: mirrors@colocall.net To: freebsd-hubs@freebsd.org Subject: ftp6.ua.freebsd.org Message-ID: <20130205101201.GX55842@colocall.net> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.5.21.nntp (FreeBSD 9.1-RELEASE amd64) Organization: Internet Data Center "ColoCALL" X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Feb 2013 10:12:23 -0000 Hello! There is no ftp6.ua.freebsd.org among Ukrainian ftp mirrors: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mirrors-ftp.html#handbook-mirrors-chapter-xml-mirrors-ua-ftp But this mirror is up and serving ftp, http, cvsup and rsync. How can be this problem fixed? -- WBR, Max A. Krasilnikov "Colocall" Internet Data Center From owner-freebsd-hubs@FreeBSD.ORG Tue Feb 5 11:01:19 2013 Return-Path: Delivered-To: freebsd-hubs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 5520D785 for ; Tue, 5 Feb 2013 11:01:19 +0000 (UTC) (envelope-from fabian@wenks.ch) Received: from batman.home4u.ch (batman.home4u.ch [62.12.173.2]) by mx1.freebsd.org (Postfix) with ESMTP id C092DDFF for ; Tue, 5 Feb 2013 11:01:18 +0000 (UTC) X-Virus-Scanned: amavisd-new at home4u.ch Received: from colossus.wenks.ch (superman.wenks.ch [62.12.173.3]) (authenticated bits=0) by batman.home4u.ch (8.14.4/8.14.4) with ESMTP id r15B00H6069264 (version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=NO) for ; Tue, 5 Feb 2013 12:00:00 +0100 (CET) (envelope-from fabian@wenks.ch) Message-ID: <5110E630.7060409@wenks.ch> Date: Tue, 05 Feb 2013 12:00:00 +0100 From: Fabian Wenk User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:17.0) Gecko/20130107 Thunderbird/17.0.2 MIME-Version: 1.0 To: freebsd-hubs@freebsd.org Subject: Re: ftp6.ua.freebsd.org References: <20130205101201.GX55842@colocall.net> In-Reply-To: <20130205101201.GX55842@colocall.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Feb 2013 11:01:19 -0000 Hello On 05.02.2013 11:12, mirrors@colocall.net wrote: > There is no ftp6.ua.freebsd.org among Ukrainian ftp mirrors: > http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mirrors-ftp.html#handbook-mirrors-chapter-xml-mirrors-ua-ftp > > But this mirror is up and serving ftp, http, cvsup and rsync. > > How can be this problem fixed? Create a PR for www with the requested changes, like I did this in PR #162363 [1] for the Swiss mirrors. [1] http://www.freebsd.org/cgi/query-pr.cgi?pr=162363 bye Fabian From owner-freebsd-hubs@FreeBSD.ORG Tue Feb 5 14:22:33 2013 Return-Path: Delivered-To: freebsd-hubs@freebsd.org Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id AFCD61DF; Tue, 5 Feb 2013 14:22:33 +0000 (UTC) (envelope-from des@des.no) Received: from smtp.des.no (smtp.des.no [194.63.250.102]) by mx1.freebsd.org (Postfix) with ESMTP id 5AA32BED; Tue, 5 Feb 2013 14:22:33 +0000 (UTC) Received: from ds4.des.no (smtp.des.no [194.63.250.102]) by smtp-int.des.no (Postfix) with ESMTP id DC51E6AD3; Tue, 5 Feb 2013 14:22:25 +0000 (UTC) Received: by ds4.des.no (Postfix, from userid 1001) id 93403ADD5; Tue, 5 Feb 2013 15:22:25 +0100 (CET) From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= To: Fabian Wenk Subject: Re: Full-Disclosure posting "FreeBSD 9.1 ftpd Remote Denial of Service" References: <510FE164.6070502@wenks.ch> Date: Tue, 05 Feb 2013 15:22:25 +0100 In-Reply-To: <510FE164.6070502@wenks.ch> (Fabian Wenk's message of "Mon, 04 Feb 2013 17:27:16 +0100") Message-ID: <86r4kulu1q.fsf@ds4.des.no> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.4 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Cc: freebsd-security@freebsd.org, freebsd-hubs@freebsd.org X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Feb 2013 14:22:33 -0000 Fabian Wenk writes: > A few days ago there was the posting "FreeBSD 9.1 ftpd Remote Denial > of Service" [1] on the Full-Disclosure mailing list. Is this a known > issue to the FreeBSD community? It's an old issue (first reported in 2010) which was fixed in head last December: http://svnweb.freebsd.org/base?view=3Drevision&revision=3D243779 I have no idea why it hasn't been merged. DES --=20 Dag-Erling Sm=C3=B8rgrav - des@des.no From owner-freebsd-hubs@FreeBSD.ORG Thu Feb 7 13:21:45 2013 Return-Path: Delivered-To: freebsd-hubs@freebsd.org Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id D5A6F819 for ; Thu, 7 Feb 2013 13:21:45 +0000 (UTC) (envelope-from klaus@mx.7he.at) Received: from smtp-02.sil.at (smtp-02.sil.at [78.142.186.23]) by mx1.freebsd.org (Postfix) with ESMTP id 9B717DCF for ; Thu, 7 Feb 2013 13:21:45 +0000 (UTC) Received: from mx.7he.at ([86.59.13.138]) by smtp-02.sil.at with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.72) (envelope-from ) id 1U3RQ7-0006ec-TU for freebsd-hubs@freebsd.org; Thu, 07 Feb 2013 14:21:44 +0100 Received: from mx.7he.at (mx.7he.at [86.59.13.138]) by mx.7he.at (8.14.3/8.14.3) with ESMTP id r17DLSfJ098886 for ; Thu, 7 Feb 2013 13:21:28 GMT (envelope-from klaus@mx.7he.at) Received: (from klaus@localhost) by mx.7he.at (8.14.3/8.14.3/Submit) id r17DLRiG098885 for freebsd-hubs@freebsd.org; Thu, 7 Feb 2013 13:21:27 GMT (envelope-from klaus) Date: Thu, 7 Feb 2013 13:21:27 +0000 From: "Klaus P. Ohrhallinger" To: freebsd-hubs@freebsd.org Subject: ftp.at.freebsd.org offline // replacement Message-ID: <20130207132127.GH57174@mx.7he.at> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4.2.3i X-Political-Attitude: Anarchistic X-PGP-Key: http://www.klaus.priv.at/klaus.asc X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED,RP_MATCHES_RCVD autolearn=unavailable version=3.3.0 X-Spam-Checker-Version: SpamAssassin 3.3.0 (2010-01-18) on mx.7he.at X-Scan-Signature: 93bcf8bcf5b43a413839c06b069c6020 X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Feb 2013 13:21:45 -0000 Hello. The University, which provided the only offical FreeBSD mirror for Austria, decided to stop it and already did shut it down. So now there is not even one mirror for Austria. I have resources and also I have been providing mirror service for other opensource projects since years. What do I have to do to get the DNS authority for at.freebsd.org? The staff at the university told me to ask the persons responsible for FreeBSD's mirror network. Best regards, Klaus -- * * * * * * http://www.ipv6actnow.org/ * * * * * * From owner-freebsd-hubs@FreeBSD.ORG Sat Feb 9 22:40:57 2013 Return-Path: Delivered-To: freebsd-hubs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 536251EA for ; Sat, 9 Feb 2013 22:40:57 +0000 (UTC) (envelope-from simon@qxnitro.org) Received: from mail-lb0-f181.google.com (mail-lb0-f181.google.com [209.85.217.181]) by mx1.freebsd.org (Postfix) with ESMTP id D1F71BDE for ; Sat, 9 Feb 2013 22:40:56 +0000 (UTC) Received: by mail-lb0-f181.google.com with SMTP id gm6so3787695lbb.40 for ; Sat, 09 Feb 2013 14:40:50 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qxnitro.org; s=google; h=mime-version:x-received:x-originating-ip:in-reply-to:references :date:message-id:subject:from:to:cc:content-type; bh=AhPvABW0xiImXNSuihzCDRiTfgftpKrEWOIRwrZM3oA=; b=cEkYTetNwB78v7rvCY+1ODRdBauXLiQ+wDvriAyWhtLiq1b2GVuNQCtERNacEDR5Gh sCwmyR1C5NcPW+sTyT/Max3+Keglj83dHKWpsxhnzSfoiKkaJleG93u2ABT2n+HA0yJP wEUxhSYoinmTT12vE1t439e4Shn7Wr8BmylhM= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:x-received:x-originating-ip:in-reply-to:references :date:message-id:subject:from:to:cc:content-type:x-gm-message-state; bh=AhPvABW0xiImXNSuihzCDRiTfgftpKrEWOIRwrZM3oA=; b=VeBjgqEAmQvxxcANmuOh2ab1qe4ZL+ZQR2r1hMOpDKtcjXTMUMi5KLpEs+W1Xp5vvM +sos9d0pgCw53uQbrkhOnx/Dri1bxDZl+LmOGBnRKdhXORW8+I+JC1mUo5Gk75d5bsu+ 2f3a4gz+e+7SklWOPElOagmWRixuGLmJdGuOKyFITEGd49zeuIlOEDfx8/rCN8LZd9ex zq5CiKX23pvaMh4s74/FioVWvbNQnIh3GtpAKsI8JevJd5I61ulPrnTXwnF5MUXruVIN Wk9eU6UARZsq3RoQOcMhBR0l5+LDY99LtblkwUk1E2HvivQiAFml5zr5AqZLn0/M7QTI 9eUQ== MIME-Version: 1.0 X-Received: by 10.112.28.101 with SMTP id a5mr3996953lbh.0.1360449649930; Sat, 09 Feb 2013 14:40:49 -0800 (PST) Received: by 10.112.146.65 with HTTP; Sat, 9 Feb 2013 14:40:49 -0800 (PST) X-Originating-IP: [89.100.233.26] In-Reply-To: <20130207132127.GH57174@mx.7he.at> References: <20130207132127.GH57174@mx.7he.at> Date: Sat, 9 Feb 2013 22:40:49 +0000 Message-ID: Subject: Re: ftp.at.freebsd.org offline // replacement From: "Simon L. B. Nielsen" To: "Klaus P. Ohrhallinger" Content-Type: text/plain; charset=UTF-8 X-Gm-Message-State: ALoCoQkqU+2NC0AzsaNjFCYKuONYBTc2D0JVQLNguJtrFdOp4gr8poIjg+zlk5rl6KjOjkANCxzx Cc: freebsd-hubs@freebsd.org X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 09 Feb 2013 22:40:57 -0000 On 7 February 2013 13:21, Klaus P. Ohrhallinger wrote: > The University, which provided the only offical FreeBSD mirror for > Austria, decided to stop it and already did shut it down. > So now there is not even one mirror for Austria. > > I have resources and also I have been providing mirror service for > other opensource projects since years. What do I have to do to get > the DNS authority for at.freebsd.org? The staff at the university > told me to ask the persons responsible for FreeBSD's mirror network. So currently at.FreeBSD.org is run by ns[12].wu-wien.ac.at. Are those the people you have talked to? Running mirrors and running the DNS part does not have to anything to do with each other, but if wu-wien.ac.at prefers not to run the DNS anymore we can just pull the zone back into the main FreeBSD.org zone, and then create records ftpX records for your server in the zone. -- Simon L. B. Nielsen Hat: FreeBSD.org mirror admin / clusteradm etc.