Re: cfhttp ignore SSL error
Good point. Here's my writeup on importing certs into the java keystore in ColdFusion: https://docs.google.com/document/d/12Ef1SwddMh0oO11TS3lt5E8VGiVCsdI8WmYn8qQLW4c/edit .jonah On 9/10/12 9:21 PM, Byron Mann wrote: > You can download the certificate and import it into your server jre cacerts > file using the java keytool. > > http://helpx.adobe.com/coldfusion/kb/import-certificates-certificate-stores-coldfusion.html > > Google ColdFusion import ssl, for some more help. That article was based > around Jrun, but applies to whatever jvm you are using. > > You'll need a CF restart after, to get it working. Didn't see that in the > article. > > For years I wish there was an ignore certificate option like wget with > cfhttp, or at the very least would match wildcard certs. > > Byron Mann > Lead Engineer and Architect > Hostmysite.com > > > ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352481 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: cfhttp ignore SSL error
You can download the certificate and import it into your server jre cacerts file using the java keytool. http://helpx.adobe.com/coldfusion/kb/import-certificates-certificate-stores-coldfusion.html Google ColdFusion import ssl, for some more help. That article was based around Jrun, but applies to whatever jvm you are using. You'll need a CF restart after, to get it working. Didn't see that in the article. For years I wish there was an ignore certificate option like wget with cfhttp, or at the very least would match wildcard certs. Byron Mann Lead Engineer and Architect Hostmysite.com ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352480 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Anyone having issues with godaddy DNS? I can't even pull up their website.
Be interesting to see what they say about this. One guy doing a ddos probably has limited resources to do an attack. So, a provider the size of Godaddy, should be able to mitigate that type of attack within a few minutes with little fallout afterwords. The hours of downtime point to something else in the mix. Byron Mann Lead Engineer and Architect Hostmysite.com On Sep 10, 2012 7:09 PM, "Eric Roberts" wrote: > > That is what all the news articles about this are saying... > > > Three Ravens Consulting > Eric Roberts > Owner/Developer > ow...@threeravensconsulting.com > tel: 630-486-5255 > fax: 630-310-8531 > http://www.threeravensconsulting.com > > > -Original Message- > From: Russ Michaels [mailto:r...@michaels.me.uk] > Sent: Monday, September 10, 2012 3:38 PM > To: cf-talk > Subject: RE: Anyone having issues with godaddy DNS? I can't even pull up > their website. > > > Sugest you google dos attacks, it is nothing to do with godaddy > > Regards > Russ Michaels > On Sep 10, 2012 9:28 PM, "Eric Roberts" > wrote: > > > > > I am really glad I moved my sites and DNS away from them LOL. > > Freedns.angy.com is a free dns host site. My actual sites are at > > hostek these days. > > > > > > Three Ravens Consulting > > Eric Roberts > > Owner/Developer > > ow...@threeravensconsulting.com > > tel: 630-486-5255 > > fax: 630-310-8531 > > http://www.threeravensconsulting.com > > > > > > -Original Message- > > From: Casey Dougall - Uber Website Solutions > > [mailto:ca...@uberwebsitesolutions.com] > > Sent: Monday, September 10, 2012 3:07 PM > > To: cf-talk > > Subject: Re: Anyone having issues with godaddy DNS? I can't even pull > > up their website. > > > > > > On Mon, Sep 10, 2012 at 4:04 PM, Scott Stewart > > wrote: > > > > > Their getting DDOS'd > > > > > > > > > http://techcrunch.com/2012/09/10/godaddy-outage-takes-down-millions- > > > of > > > -sites/ > > > > > > > > I like these lines here... > > > > Later, the AnonymousOwn3r account said in response to a question of > > whether he took down the whole block of DNS (Domain Name System) servers: > "yes! > > it's not so complex." > > > > That was followed by: "when i do some DDOS (Distributed Denial of > > Service) attack i like to let it down by many days , the attack for > > unlimited time, it can last one hour or one month." > > > > > > http://news.cnet.com/8301-1009_3-57509753-83/go-daddy-serviced-web-sit > > es-tak > > en-down-in-apparent-attack/ > > > > So a month of down time, NICE! lol > > > > > > > > > > > > > > ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352479 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Anyone having issues with godaddy DNS? I can't even pull up their website.
That is what all the news articles about this are saying... Three Ravens Consulting Eric Roberts Owner/Developer ow...@threeravensconsulting.com tel: 630-486-5255 fax: 630-310-8531 http://www.threeravensconsulting.com -Original Message- From: Russ Michaels [mailto:r...@michaels.me.uk] Sent: Monday, September 10, 2012 3:38 PM To: cf-talk Subject: RE: Anyone having issues with godaddy DNS? I can't even pull up their website. Sugest you google dos attacks, it is nothing to do with godaddy Regards Russ Michaels On Sep 10, 2012 9:28 PM, "Eric Roberts" wrote: > > I am really glad I moved my sites and DNS away from them LOL. > Freedns.angy.com is a free dns host site. My actual sites are at > hostek these days. > > > Three Ravens Consulting > Eric Roberts > Owner/Developer > ow...@threeravensconsulting.com > tel: 630-486-5255 > fax: 630-310-8531 > http://www.threeravensconsulting.com > > > -Original Message- > From: Casey Dougall - Uber Website Solutions > [mailto:ca...@uberwebsitesolutions.com] > Sent: Monday, September 10, 2012 3:07 PM > To: cf-talk > Subject: Re: Anyone having issues with godaddy DNS? I can't even pull > up their website. > > > On Mon, Sep 10, 2012 at 4:04 PM, Scott Stewart > wrote: > > > Their getting DDOS'd > > > > > > http://techcrunch.com/2012/09/10/godaddy-outage-takes-down-millions- > > of > > -sites/ > > > > > I like these lines here... > > Later, the AnonymousOwn3r account said in response to a question of > whether he took down the whole block of DNS (Domain Name System) servers: "yes! > it's not so complex." > > That was followed by: "when i do some DDOS (Distributed Denial of > Service) attack i like to let it down by many days , the attack for > unlimited time, it can last one hour or one month." > > > http://news.cnet.com/8301-1009_3-57509753-83/go-daddy-serviced-web-sit > es-tak > en-down-in-apparent-attack/ > > So a month of down time, NICE! lol > > > > > ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352478 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Anyone having issues with godaddy DNS? I can't even pull up their website.
Sugest you google dos attacks, it is nothing to do with godaddy Regards Russ Michaels On Sep 10, 2012 9:28 PM, "Eric Roberts" wrote: > > I am really glad I moved my sites and DNS away from them LOL. > Freedns.angy.com is a free dns host site. My actual sites are at hostek > these days. > > > Three Ravens Consulting > Eric Roberts > Owner/Developer > ow...@threeravensconsulting.com > tel: 630-486-5255 > fax: 630-310-8531 > http://www.threeravensconsulting.com > > > -Original Message- > From: Casey Dougall - Uber Website Solutions > [mailto:ca...@uberwebsitesolutions.com] > Sent: Monday, September 10, 2012 3:07 PM > To: cf-talk > Subject: Re: Anyone having issues with godaddy DNS? I can't even pull up > their website. > > > On Mon, Sep 10, 2012 at 4:04 PM, Scott Stewart > wrote: > > > Their getting DDOS'd > > > > > > http://techcrunch.com/2012/09/10/godaddy-outage-takes-down-millions-of > > -sites/ > > > > > I like these lines here... > > Later, the AnonymousOwn3r account said in response to a question of whether > he took down the whole block of DNS (Domain Name System) servers: "yes! > it's not so complex." > > That was followed by: "when i do some DDOS (Distributed Denial of Service) > attack i like to let it down by many days , the attack for unlimited time, > it can last one hour or one month." > > > http://news.cnet.com/8301-1009_3-57509753-83/go-daddy-serviced-web-sites-tak > en-down-in-apparent-attack/ > > So a month of down time, NICE! lol > > > > > ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352477 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Anyone having issues with godaddy DNS? I can't even pull up their website.
or Steven Pearcy (Ratt) On Mon, Sep 10, 2012 at 4:36 PM, Casey Dougall - Uber Website Solutions < ca...@uberwebsitesolutions.com> wrote: > > On Mon, Sep 10, 2012 at 4:34 PM, Scott Stewart >wrote: > > > but never auto-tune > > > No, that is reserved for T-Pain only > > > ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352476 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Anyone having issues with godaddy DNS? I can't even pull up their website.
On Mon, Sep 10, 2012 at 4:34 PM, Scott Stewart wrote: > but never auto-tune No, that is reserved for T-Pain only ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352475 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Anyone having issues with godaddy DNS? I can't even pull up their website.
but never auto-tune On Mon, Sep 10, 2012 at 4:32 PM, Casey Dougall - Uber Website Solutions < ca...@uberwebsitesolutions.com> wrote: > > Or Delay > > > On Mon, Sep 10, 2012 at 4:28 PM, Scott Stewart >wrote: > > > reverb :) > > > > > > On Mon, Sep 10, 2012 at 4:11 PM, Russ Michaels > > wrote: > > > > > > > > Echo? > > > > > ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352474 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Anyone having issues with godaddy DNS? I can't even pull up their website.
Thanks for the info guys, one of the sites that I previously used to manage is down. This specific case business went ahead to host it on their own and they I'll learn their lesson now On Sep 11, 2012 12:29 AM, "Eric Roberts" wrote: > > I am really glad I moved my sites and DNS away from them LOL. > Freedns.angy.com is a free dns host site. My actual sites are at hostek > these days. > > > Three Ravens Consulting > Eric Roberts > Owner/Developer > ow...@threeravensconsulting.com > tel: 630-486-5255 > fax: 630-310-8531 > http://www.threeravensconsulting.com > > > -Original Message- > From: Casey Dougall - Uber Website Solutions > [mailto:ca...@uberwebsitesolutions.com] > Sent: Monday, September 10, 2012 3:07 PM > To: cf-talk > Subject: Re: Anyone having issues with godaddy DNS? I can't even pull up > their website. > > > On Mon, Sep 10, 2012 at 4:04 PM, Scott Stewart > wrote: > > > Their getting DDOS'd > > > > > > http://techcrunch.com/2012/09/10/godaddy-outage-takes-down-millions-of > > -sites/ > > > > > I like these lines here... > > Later, the AnonymousOwn3r account said in response to a question of whether > he took down the whole block of DNS (Domain Name System) servers: "yes! > it's not so complex." > > That was followed by: "when i do some DDOS (Distributed Denial of Service) > attack i like to let it down by many days , the attack for unlimited time, > it can last one hour or one month." > > > http://news.cnet.com/8301-1009_3-57509753-83/go-daddy-serviced-web-sites-tak > en-down-in-apparent-attack/ > > So a month of down time, NICE! lol > > > > > ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352473 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Anyone having issues with godaddy DNS? I can't even pull up their website.
Or Delay On Mon, Sep 10, 2012 at 4:28 PM, Scott Stewart wrote: > reverb :) > > > On Mon, Sep 10, 2012 at 4:11 PM, Russ Michaels > wrote: > > > > > Echo? > ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352472 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Anyone having issues with godaddy DNS? I can't even pull up their website.
reverb :) On Mon, Sep 10, 2012 at 4:11 PM, Russ Michaels wrote: > > Echo? > > Regards > Russ Michaels > On Sep 10, 2012 9:05 PM, "Scott Stewart" > wrote: > > > > > Their getting DDOS'd > > > > > > > http://techcrunch.com/2012/09/10/godaddy-outage-takes-down-millions-of-sites/ > > > > > > On Mon, Sep 10, 2012 at 2:30 PM, Casey Dougall - Uber Website Solutions < > > ca...@uberwebsitesolutions.com> wrote: > > > > > > > > I'm having issues hitting godaddy and some of my sites that use their > > DNS. > > > Anyone else having this trouble? > > > > > > > > > > > > > > > ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352471 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Anyone having issues with godaddy DNS? I can't even pull up their website.
I am really glad I moved my sites and DNS away from them LOL. Freedns.angy.com is a free dns host site. My actual sites are at hostek these days. Three Ravens Consulting Eric Roberts Owner/Developer ow...@threeravensconsulting.com tel: 630-486-5255 fax: 630-310-8531 http://www.threeravensconsulting.com -Original Message- From: Casey Dougall - Uber Website Solutions [mailto:ca...@uberwebsitesolutions.com] Sent: Monday, September 10, 2012 3:07 PM To: cf-talk Subject: Re: Anyone having issues with godaddy DNS? I can't even pull up their website. On Mon, Sep 10, 2012 at 4:04 PM, Scott Stewart wrote: > Their getting DDOS'd > > > http://techcrunch.com/2012/09/10/godaddy-outage-takes-down-millions-of > -sites/ > > I like these lines here... Later, the AnonymousOwn3r account said in response to a question of whether he took down the whole block of DNS (Domain Name System) servers: "yes! it's not so complex." That was followed by: "when i do some DDOS (Distributed Denial of Service) attack i like to let it down by many days , the attack for unlimited time, it can last one hour or one month." http://news.cnet.com/8301-1009_3-57509753-83/go-daddy-serviced-web-sites-tak en-down-in-apparent-attack/ So a month of down time, NICE! lol ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352470 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Anyone having issues with godaddy DNS? I can't even pull up their website.
Echo? Regards Russ Michaels On Sep 10, 2012 9:05 PM, "Scott Stewart" wrote: > > Their getting DDOS'd > > > http://techcrunch.com/2012/09/10/godaddy-outage-takes-down-millions-of-sites/ > > > On Mon, Sep 10, 2012 at 2:30 PM, Casey Dougall - Uber Website Solutions < > ca...@uberwebsitesolutions.com> wrote: > > > > > I'm having issues hitting godaddy and some of my sites that use their > DNS. > > Anyone else having this trouble? > > > > > > > > ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352469 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Anyone having issues with godaddy DNS? I can't even pull up their website.
On Mon, Sep 10, 2012 at 4:04 PM, Scott Stewart wrote: > Their getting DDOS'd > > > http://techcrunch.com/2012/09/10/godaddy-outage-takes-down-millions-of-sites/ > > I like these lines here... Later, the AnonymousOwn3r account said in response to a question of whether he took down the whole block of DNS (Domain Name System) servers: "yes! it's not so complex." That was followed by: "when i do some DDOS (Distributed Denial of Service) attack i like to let it down by many days , the attack for unlimited time, it can last one hour or one month." http://news.cnet.com/8301-1009_3-57509753-83/go-daddy-serviced-web-sites-taken-down-in-apparent-attack/ So a month of down time, NICE! lol ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352468 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Anyone having issues with godaddy DNS? I can't even pull up their website.
Their getting DDOS'd http://techcrunch.com/2012/09/10/godaddy-outage-takes-down-millions-of-sites/ On Mon, Sep 10, 2012 at 2:30 PM, Casey Dougall - Uber Website Solutions < ca...@uberwebsitesolutions.com> wrote: > > I'm having issues hitting godaddy and some of my sites that use their DNS. > Anyone else having this trouble? > > > ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352467 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Anyone having issues with godaddy DNS? I can't even pull up their website.
Yes thats what happens on a dos attack, it takes everything down. Imagine a motorway with a huge tailback. Regards Russ Michaels On Sep 10, 2012 9:02 PM, "Eric Roberts" wrote: > > Godaddy itself is even down > > > > Three Ravens Consulting > Eric Roberts > Owner/Developer > ow...@threeravensconsulting.com > tel: 630-486-5255 > fax: 630-310-8531 > http://www.threeravensconsulting.com > > > -Original Message- > From: Scott Stewart [mailto:webmas...@sstwebworks.com] > Sent: Monday, September 10, 2012 1:38 PM > To: cf-talk > Subject: Re: Anyone having issues with godaddy DNS? I can't even pull up > their website. > > > We're seeing the same issue with some of Potomac Digitek's clients > > On Mon, Sep 10, 2012 at 2:30 PM, Casey Dougall - Uber Website Solutions < > ca...@uberwebsitesolutions.com> wrote: > > > > > I'm having issues hitting godaddy and some of my sites that use their > DNS. > > Anyone else having this trouble? > > > > > > > > > > ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352466 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Anyone having issues with godaddy DNS? I can't even pull up their website.
Godaddy itself is even down Three Ravens Consulting Eric Roberts Owner/Developer ow...@threeravensconsulting.com tel: 630-486-5255 fax: 630-310-8531 http://www.threeravensconsulting.com -Original Message- From: Scott Stewart [mailto:webmas...@sstwebworks.com] Sent: Monday, September 10, 2012 1:38 PM To: cf-talk Subject: Re: Anyone having issues with godaddy DNS? I can't even pull up their website. We're seeing the same issue with some of Potomac Digitek's clients On Mon, Sep 10, 2012 at 2:30 PM, Casey Dougall - Uber Website Solutions < ca...@uberwebsitesolutions.com> wrote: > > I'm having issues hitting godaddy and some of my sites that use their DNS. > Anyone else having this trouble? > > > ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352465 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Anyone having issues with godaddy DNS? I can't even pull up their website.
The same thing to could happen to any host or registrar, moving does not provide you any protection. You may even find you have not really moved at all. For example We have had customers move away from us or even be told to leave due to server problems caused by their website which they refused to fix, only to find they had signed up with one of our resellers, so were still on our server. Regards Russ Michaels On Sep 10, 2012 8:52 PM, "Eric Roberts" wrote: > > Wow...I know I was in the process of moving to one of the free dns services > after GoDaddy threw in their support of SIPA...I must have got them all > moved heheheh. That was a several month process as it wasn't a very high > priority. > > > > Three Ravens Consulting > Eric Roberts > Owner/Developer > ow...@threeravensconsulting.com > tel: 630-486-5255 > fax: 630-310-8531 > http://www.threeravensconsulting.com > > > -Original Message- > From: Casey Dougall - Uber Website Solutions > [mailto:ca...@uberwebsitesolutions.com] > Sent: Monday, September 10, 2012 1:34 PM > To: cf-talk > Subject: Re: Anyone having issues with godaddy DNS? I can't even pull up > their website. > > > On Mon, Sep 10, 2012 at 2:30 PM, Casey Dougall - Uber Website Solutions < > ca...@uberwebsitesolutions.com> wrote: > > > I'm having issues hitting godaddy and some of my sites that use their > DNS. > > Anyone else having this trouble? > > > > Ugh! > > > http://techcrunch.com/2012/09/10/godaddy-outage-takes-down-millions-of-sites > / > > GoDaddy Outage Takes Down Millions Of Sites, Anonymous Claims > Responsibility > > > > > ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352464 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Anyone having issues with godaddy DNS? I can't even pull up their website.
Wow...I know I was in the process of moving to one of the free dns services after GoDaddy threw in their support of SIPA...I must have got them all moved heheheh. That was a several month process as it wasn't a very high priority. Three Ravens Consulting Eric Roberts Owner/Developer ow...@threeravensconsulting.com tel: 630-486-5255 fax: 630-310-8531 http://www.threeravensconsulting.com -Original Message- From: Casey Dougall - Uber Website Solutions [mailto:ca...@uberwebsitesolutions.com] Sent: Monday, September 10, 2012 1:34 PM To: cf-talk Subject: Re: Anyone having issues with godaddy DNS? I can't even pull up their website. On Mon, Sep 10, 2012 at 2:30 PM, Casey Dougall - Uber Website Solutions < ca...@uberwebsitesolutions.com> wrote: > I'm having issues hitting godaddy and some of my sites that use their DNS. > Anyone else having this trouble? > Ugh! http://techcrunch.com/2012/09/10/godaddy-outage-takes-down-millions-of-sites / GoDaddy Outage Takes Down Millions Of Sites, Anonymous Claims Responsibility ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352463 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Anyone having issues with godaddy DNS? I can't even pull up their website.
I'll check in a sec...but I have never had any issues...I'll let you know. Three Ravens Consulting Eric Roberts Owner/Developer ow...@threeravensconsulting.com tel: 630-486-5255 fax: 630-310-8531 http://www.threeravensconsulting.com -Original Message- From: Casey Dougall - Uber Website Solutions [mailto:ca...@uberwebsitesolutions.com] Sent: Monday, September 10, 2012 1:30 PM To: cf-talk Subject: Anyone having issues with godaddy DNS? I can't even pull up their website. I'm having issues hitting godaddy and some of my sites that use their DNS. Anyone else having this trouble? ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352462 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
cfhttp ignore SSL error
Hi. So I know this is not the optimal solution but I could really use it as a temporary workaround right now: one of our vendors has a newly broken SSL cert where, when I call URL with cfhttp, it's returning: I/O Exception: Name in certificate `vendor.com' does not match host name ` download.vendor.com' (I tried using URL with just vendor.com but that did not work.) Is there a way to tell cfhttp to just ignore that error? -- John Bliss - http://about.me/jbliss ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352461 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Anyone having issues with godaddy DNS? I can't even pull up their website.
They have been ddos attacked Regards Russ Michaels On Sep 10, 2012 7:38 PM, "Scott Stewart" wrote: > > We're seeing the same issue with some of Potomac Digitek's clients > > On Mon, Sep 10, 2012 at 2:30 PM, Casey Dougall - Uber Website Solutions < > ca...@uberwebsitesolutions.com> wrote: > > > > > I'm having issues hitting godaddy and some of my sites that use their > DNS. > > Anyone else having this trouble? > > > > > > > > ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352460 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Anyone having issues with godaddy DNS? I can't even pull up their website.
We're seeing the same issue with some of Potomac Digitek's clients On Mon, Sep 10, 2012 at 2:30 PM, Casey Dougall - Uber Website Solutions < ca...@uberwebsitesolutions.com> wrote: > > I'm having issues hitting godaddy and some of my sites that use their DNS. > Anyone else having this trouble? > > > ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352459 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Anyone having issues with godaddy DNS? I can't even pull up their website.
On Mon, Sep 10, 2012 at 2:30 PM, Casey Dougall - Uber Website Solutions < ca...@uberwebsitesolutions.com> wrote: > I'm having issues hitting godaddy and some of my sites that use their DNS. > Anyone else having this trouble? > Ugh! http://techcrunch.com/2012/09/10/godaddy-outage-takes-down-millions-of-sites/ GoDaddy Outage Takes Down Millions Of Sites, Anonymous Claims Responsibility ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352458 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Anyone having issues with godaddy DNS? I can't even pull up their website.
I'm having issues hitting godaddy and some of my sites that use their DNS. Anyone else having this trouble? ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352457 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Denial of Service bug?
On Mon, Sep 10, 2012 at 1:28 PM, Tony F wrote: > Does 9.0.2 have any fixes not included in "9.0.1 Cumulative Hot Fix 2"? > There are 3 security hotfixes APSB11-29, APSB12-15 and APSB12-06 that were released after 9.0.1 Cumulative Hotfix 2 (which includes all 9.0.1 Security hotfixes prior to and including APSB11-14 for 9.0.1). Those security hotfixes are included in 9.0.2. Some more info here: http://www.petefreitag.com/item/804.cfm The APSB12-06 hotfix is a DOS vulnerability, the HashDos vulnerability but the attack vector for that does not coincide with what you posted. More on HashDos here: http://www.petefreitag.com/tag/hashdos I tested your example and was able to produce the original error but did not see subsequent requests failing even when running through a load tool 2000 requests / 20 concurrent. Not to say the issue doesn't exist in your setup, it could be specific to your setup or common to other - it sound like it would be worth further investigation. You can pass the issue along to Adobe PSIRT http://www.adobe.com/support/security/alertus.html for proper handling, but make sure you have applied all the security hotfixes first. -- Pete Freitag - Adobe Community Professional http://foundeo.com/ - ColdFusion Consulting & Products http://petefreitag.com/ - My Blog http://hackmycf.com - Is your ColdFusion Server Secure? ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352456 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Denial of Service bug?
9.0.2 is just 9.0.1 with all the fixes and updates and VERITY removed. On Mon, Sep 10, 2012 at 6:28 PM, Tony F wrote: > > Hi: > > I THINK we are using the latest patched product, although it's hard to > tell because Adobe has done something funky with the recent updates. They > released a 9.0.2 without having any upgrade path from 9.0.1. > > I just noticed that there's a mystery "9.0.2" "clean install only" version > out there, although no way to update from 9.0.1 to 9.02. > > What we have installed is 9.0 + 9.0.1 updater + Cumulative Hot Fix 2 for > 9.0.1. > > Is what we currently have installed the latest and greatest, containing > all patches issued to date? > > Does 9.0.2 have any fixes not included in "9.0.1 Cumulative Hot Fix 2"? > > I really, really, really don't want to have to reinstall, reconfigure, > retest from scratch our production machines unless there's a very good > reason. > > Thanks > > > > > > In the course of investigating a SQL injection attack attempt on our > > site, I came across a strange set of bugs. > > > Using CF9, linux 64, apache. > > > > > > The attacking machine was sending POST requests to random templates > > containing ampersands inside a POST > > > variable (i.e. not properly URL encoded). I am able to simulate > > the effect of the attack request with this: > > > > > > http://any_site.com/any.cfm"; method="POST"> > > > > type="formfield"> > > > > > > > > > ColdFusion freaks out on seeing this and throws an exception before > > it even gets to the template: > > > > > > ROOT CAUSE: java.lang.IllegalArgumentException at coldfusion.filter. > > FormScope.parseQueryString(FormScope. > > > java:355 > > > > > > HTTP 500 is sent to the user. > > > > > > That's all fine and well, and if that was the only issue here, then > > no big deal. Unfortunately, at least on linux (I can't > > > test other platforms), this error then proceeds to destabilize the > > JRun thread the next time a user loads a page and > > > touches that worker thread, throwing the error: > > > > > > 09/06 22:41:41 error (JRun Service: ProxyService [jrun.servlet.jrpp. > > JRunProxyService@75602291]) JRunPRoxyServer. > > > invokeRunnable: java.lang.IllegalStateException > > > > > > This other user, who had nothing to do with the original attack, > > gets sent an HTTP 503 error message as the thread > > > terminates on them. > > > > > > What happened is that the attacker on our site sent > > hundreds/thousands of these malformed requests (through some > > > mis-configured bot program), which has resulted in disruptions to > > regular users who are getting 503 errors forced onto them. > > > > > > So, I was curious if anyone else has seen this behavior before, and > > if so what can be done to stop it. Is there an underlying > > > issue that has been patched that I'm not aware of? I note that > > there have been similar reports of related instability of threads: > > > http://forums.adobe.com/thread/950350 but this seems to be a > > different case. > > > > What exact version of CF are you using? Has it been patched to the > > latest minor version? A lot of these kinds of issues are found and > > patched over the lifetime of the product. I don't know about this > > issue specifically, but that's what I'd do first - patch to the > > latest > > minor version and see if the problem still exists. > > > > Russ's suggestion to run FuseGuard is good overall, but I don't know > > if it would prevent this problem - since it's a CF app itself, I > > suspect it runs after the request has been handed to CF. It's worth a > > try, though, and it's a very good product. > > > > Dave Watts, CTO, Fig Leaf Software > > http://www.figleaf.com/ > > http://training.figleaf.com/ > > > > Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on > > GSA Schedule, and provides the highest caliber vendor-authorized > > instruction at our training centers, online, or onsite. > > ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352455 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Denial of Service bug?
Hi: I THINK we are using the latest patched product, although it's hard to tell because Adobe has done something funky with the recent updates. They released a 9.0.2 without having any upgrade path from 9.0.1. I just noticed that there's a mystery "9.0.2" "clean install only" version out there, although no way to update from 9.0.1 to 9.02. What we have installed is 9.0 + 9.0.1 updater + Cumulative Hot Fix 2 for 9.0.1. Is what we currently have installed the latest and greatest, containing all patches issued to date? Does 9.0.2 have any fixes not included in "9.0.1 Cumulative Hot Fix 2"? I really, really, really don't want to have to reinstall, reconfigure, retest from scratch our production machines unless there's a very good reason. Thanks > > In the course of investigating a SQL injection attack attempt on our > site, I came across a strange set of bugs. > > Using CF9, linux 64, apache. > > > > The attacking machine was sending POST requests to random templates > containing ampersands inside a POST > > variable (i.e. not properly URL encoded). I am able to simulate > the effect of the attack request with this: > > > > http://any_site.com/any.cfm"; method="POST"> > > type="formfield"> > > > > > > ColdFusion freaks out on seeing this and throws an exception before > it even gets to the template: > > > > ROOT CAUSE: java.lang.IllegalArgumentException at coldfusion.filter. > FormScope.parseQueryString(FormScope. > > java:355 > > > > HTTP 500 is sent to the user. > > > > That's all fine and well, and if that was the only issue here, then > no big deal. Unfortunately, at least on linux (I can't > > test other platforms), this error then proceeds to destabilize the > JRun thread the next time a user loads a page and > > touches that worker thread, throwing the error: > > > > 09/06 22:41:41 error (JRun Service: ProxyService [jrun.servlet.jrpp. > JRunProxyService@75602291]) JRunPRoxyServer. > > invokeRunnable: java.lang.IllegalStateException > > > > This other user, who had nothing to do with the original attack, > gets sent an HTTP 503 error message as the thread > > terminates on them. > > > > What happened is that the attacker on our site sent > hundreds/thousands of these malformed requests (through some > > mis-configured bot program), which has resulted in disruptions to > regular users who are getting 503 errors forced onto them. > > > > So, I was curious if anyone else has seen this behavior before, and > if so what can be done to stop it. Is there an underlying > > issue that has been patched that I'm not aware of? I note that > there have been similar reports of related instability of threads: > > http://forums.adobe.com/thread/950350 but this seems to be a > different case. > > What exact version of CF are you using? Has it been patched to the > latest minor version? A lot of these kinds of issues are found and > patched over the lifetime of the product. I don't know about this > issue specifically, but that's what I'd do first - patch to the > latest > minor version and see if the problem still exists. > > Russ's suggestion to run FuseGuard is good overall, but I don't know > if it would prevent this problem - since it's a CF app itself, I > suspect it runs after the request has been handed to CF. It's worth a > try, though, and it's a very good product. > > Dave Watts, CTO, Fig Leaf Software > http://www.figleaf.com/ > http://training.figleaf.com/ > > Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on > GSA Schedule, and provides the highest caliber vendor-authorized > instruction at our training centers, online, or onsite. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352454 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
