949500+ entries in 0.692s
smickles: i will send you a
tip if
this works
jurov: yes
tat's exactly what it does
smickles: could it be stopping and waiting for me
to
type it in somehow?
smickles: jurov: i believe i do have a passphrase set on
the key
jurov: so
that apache is stopping somewhere and waiting for it
smickles: and i've come across a handfull of "UPDATE: i fixed it after finding _this_line_ in som OTHER logs" But
they never say what logs
those were
smickles: unfortunately, i don't
think i have
the right kind of mind for
that solution
smickles: the internet is so useful: "Wow after hours of digging I finally found
the solution
thanks
to a post by rajanichand Here what I did in
httpd.conf I commented out
the SSLCACertificateFile line and it worked."
smickles: mircea_popescu: but
this should be simple, and common. I'm sure many people install ssl certs
mircea_popescu: smickles join
the club, my sysadmin ppls have been wrangling with something exactly liek
that for 3 days now.
smickles: how am i supposed
to fix something when
there are no errormessages or logs?
kakobrekla: Inaba: My open offer for a bet: BFL will ship
the promised products within a reasonable
time frame (as determined by a reputable member of
this community, I propose Casascius). I offer BTC from 100 BTC
to 2000 BTC. I am also willing
to accept
the domain name joshzerlan.com in lieu of BTC on
the part of Bryan Micon.
smickles: and i can't find any useful error in
the logs
smickles: RandolphDuke: i believe
that coinbr is
the only mpex broker with a website
RandolphDuke: what about reputation, is coinbr
the same people as mpex?
RandolphDuke: from what i
take it btc-tc
takes 5% of
the dividend ammount
mircea_popescu: parseval software firewalls weren't even being
touched, routers got it.
parseval: Beyond mitigation steps with firewall software, you could architect
the web app
to easily scale
to multiple servers,
then
toss in nodes from AWS on demand during an attack. A bit pricey, but if
the question is whether you pay more or shut down...
dub: good, cheap, fast, pick
two
kakobrekla: >We might drop it altogether and have
to find another node
to rent for Europe.
Namworld: Well we hope
to be able
to be staffed 24/7 later on.
jurov: but prolly
that's
to be expected for $40 vps,
too...
jurov: okay okay, i'm not complaining about
that
dub: jurov: not
to be rude, and
this is why I still use linode, you can't expect any $20 vps
to handle anything critical
dub: there are so many 2 bit (!) shops out
there
Namworld: The switzerland node we have has been getting many issues at
the DC level. We might drop it altogether and have
to find another node
to rent for Europe.
jurov: but couldn't get any good advice except
to pay heavy $$$
jurov: to be honest, i was
thinking about moving somewhere else back after december outage
Namworld: But
there's still a lot of work ahead.
Namworld: Once
that is done we can start improving services.
Namworld: Once we get our own servers instead of renting, we'll be in
the green. For now we're focused on doing
that and moving clients.
Namworld: But we're pretty much investing in a business
that was in
the red.
mircea_popescu: Namworld it's a best effort business, we get it. perhaps
the only improvement is
to have an internal messaging system somehow, so if you hear ddos early warning it can be used somehow
Namworld: and we are pretty much salvaging RG's business which was barely breaken even.
There's no money for 24/7 staff and we all have
to work on it outside our day job/etc.
Namworld: It actually is very expensive. Pretty much any host will kick someone getting DDoSed outright. Not
that it's something we'd wish
to do, but it's not economically feasible at
the cost VPSes/Shared hosting are billed.
mircea_popescu: jurov listen, pretty much nobody offers off
the shelf ddos proof hosting
jurov: well, but if you don't want
to host anything critical, where does
this leave you?
Namworld: We only have a few nodes, we might be
the most popular host in BTC zone but
that's quite small a clientbase.
mircea_popescu: anyway. it doesn't look like
there's much more anyone could have done practically.
Namworld: But apparently yes, words got out quickly and it was DDoS'ed
too.
Namworld: ...
that's not really
the point
mircea_popescu: well... he promised
to be surprised, he was surprised. no scam.
jurov: ^exactly
this i was speaking about
mircea_popescu: Mar 07 03:46:04 <jurov> Namworld if
this causes
to overstep my bitvps bandwidth, or causes bitvps
to be included in ddos outright
jurov: but having
to wait 6 hours and
then another 2 hours fo r
the staff
trying
to figure out if it's really an attack
jurov: okay, it was
the server
then, not
the dc. and yes, i shouldn't have expected any
thing else
dub: and yes I
took out linodes fremont facility once
dub: I
think while
there could have been a quicker response (and really
the pain here is for any other customer of bitvps), a $20 vps is not expected
to handle any kind of dos in a way
that mitigates
the attack for its
target
jurov: well, having an alert for such cases is well within
their economical reach... instead of waiting 8 hours
till whole dc is in ashes
mircea_popescu: so practically a vps host can't do much more
than "sorry, we can't host you, you're
too big".
mircea_popescu: on
the other hand
there's never going
to be an economical solution
to offer vps servers and yet scale it up in case of a serious ddos
mircea_popescu: if i may, everyone has a point here. in fairness we didnt really know how hot
things will get early on. in retrospect it can be said
that "well duh, obviously if it can
take out mpex's main it will wipe a vps somewhere". but at
the
time i was busy and i guess nobody else realised it.
jurov: and even
then,
the ddos was raging for 6 hours
till anyone started
to do anything with it!!!!
jurov: Namworld, i wanted you
to consider
the possibility beforehand. not being caught like a deer in
the headlights
Namworld: It's just not feasible for us
to do so.
Namworld: Oh, We don't have
the infrastructure
to handle any large DoS
tho, we're relatively a very small host. Not
the kind
that was being conducted against MPEx. Not sure what you would ahve wanted us
to do.
jurov: and move
the info
to
tech staff
jurov: No, I
think
the right answer would be
to ask
the client why
they expect
the dos and where
Namworld: What's
that about? We don't bill extra
traffic, we'd ask
the person
to upgrade. In your case
tho, would have been impossible
to support you further. We'd have
to drop DDoSed clients
jurov: Namworld: what? you don't know what
to do in
this case?
Namworld: <jurov> okay, so i'll ask only one
thing. next
time client asks you "in case of ddos, will i be billed
the
traffic?" what do you answer?
jurov: now you probably aren't aware
this happened but damn well it did. in
this very channel.
jurov: i hope not "i'll be surprised" like you did last week just few hours before
the ddos
jurov: okay, so i'll ask only one
thing. next
time client asks you "in case of ddos, will i be billed
the
traffic?" what do you answer?
Namworld: I've cancelled
the service, you'll no longer receive invoices/notices.
Namworld: Doesn't seem like
the let go was handled properly at all.
jurov: eh, not gonna
to discuss
this again, you're never aware of anything
mircea_popescu: well in fairness vps wasn't going
to be able
to
take it.
jurov: not like "oh coinbr.com seems under dos,
too"
jurov: Namworld, PR-side I recommend
that next
time a client mentions ddos possibility, you damn well listen
to
them
Namworld: It is if
that's
the way
things are announced.
Namworld: urgh,
then service should also have been cancelled
jurov: they clearly kicked me out. so
they should also cancel my acct
themselves.
jurov: really should i dig
them for you?
jurov: look into #bitvps logs, it's
there
smickles: "...users using hotmail.com email address may have difficulty in receiving
their hosting welcome emails from us. We strongly recommend
that you use some other email address at
this
time. We also would advise you
to contact our support using a non-hotmail email address
to receive replies properly. It is especially hard
to
track email delivery failure with Hotmail, as Hotmail servers do not return a failed status, but silently discard emails which d
Namworld: I hope he wasn't as harsh as
that short sentence makes it sound.
jurov: so he's now responsible for any cancella
tions
jurov: Namworld, phungus clearly said "we won't ever
turn your vps again."
mircea_popescu: sounds like a great plan, strategic manager should get a bonus for
that oen.
mircea_popescu: and btw,
to all
the people who
think
they are safe from ddos because "cloudflare" or equal bs :
jurov: startssl prolly says
they don't endorse fecal humor
jurov: not if it nas *coin* in
the domain
smickles: well, i'm not finding
this 10 euro guy who you have