On Friday, April 17, 2020 at 3:02:13 AM UTC-4, Jeffrey Walton wrote:
>
>
> The Crypto++ website is down.
>
> It appears GoDaddy is suspending the VM due to high cpu usage. GoDaddy
> writes it is due to Apache.
>
> We are not sure what is going on. We have not made any configuration
> changes since last summer. The only changes are documentation updates last
> week, which is copied new HTML files to a docs/ directory.
>
> I suspect something is sideways due to the OOM killer on the VM. OOM
> probably killed MySQL service, which wreaked havoc with Apache.
>
> At the moment I cannot SSH into the machine.
>
The VM is available again.
It looks like someone from China is hammering the web server with useless
requests, and it is causing a DoS:
59.64.129.175 - - [19/Apr/2020:08:53:53 -0400] "GET
/w/index.php?title=Special:WhatLinksHere&limit=50&
printable=yes HTTP/1.1" 301 311
We are trying to block the netblock, but the netfilter rule is not present
after rebooting the machine.
iptables -A INPUT -s 59.64.128.0/19 -p TCP -j DROP
We cannot ifdown/ifup because we lose access the the VM. We have to reboot
to machine to effect changes.
We're now trying to figure out what is wrong with netfilter.
Jeff
--
You received this message because you are subscribed to "Crypto++ Users". More
information about Crypto++ and this group is available at
http://www.cryptopp.com and
http://groups.google.com/forum/#!forum/cryptopp-users.
---
You received this message because you are subscribed to the Google Groups
"Crypto++ Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/cryptopp-users/7e4e9f82-6f69-44a2-8d5c-91eac49d84d8%40googlegroups.com.
