Re: [arch-general] Crashes in FF 65.0.1

2019-02-26 Thread Marc Ranolfi via arch-general
Hi, any meaningful error messages printed when run from the terminal? Fwiw I'm not getting any errors in Firefox 65.0.1 on Cinnamon. On Wed, Feb 20, 2019 at 8:09 AM Ralf Mardorf via arch-general < arch-general@archlinux.org> wrote: > --safe-mode, --ProfileManager, new user, don't change

Re: [arch-general] HTTP spam from China - CIDR compacting tool

2019-02-26 Thread Juha Kankare via arch-general
On 26/02/2019 23:25, Genes Lists via arch-general wrote: > On 2/26/19 4:01 PM, brent s. wrote: > > ... >> You can (Gene, you may find this particularly useful since you feed to >> ipset) use the pyroute2.IPSet() function to actually manage the live >> > Great thank you - I wasn't aware of this

Re: [arch-general] HTTP spam from China - CIDR compacting tool

2019-02-26 Thread Genes Lists via arch-general
On 2/26/19 4:01 PM, brent s. wrote: ... > > You can (Gene, you may find this particularly useful since you feed to > ipset) use the pyroute2.IPSet() function to actually manage the live > Great thank you - I wasn't aware of this capability. I really like python! ipset made a huge difference -

Re: [arch-general] HTTP spam from China - CIDR compacting tool

2019-02-26 Thread Juha Kankare via arch-general
On 26/02/2019 23:01, brent s. wrote: > On 2/26/19 1:20 PM, Genes Lists via arch-general wrote: >> On 2/26/19 1:13 PM, Juha Kankare via arch-general wrote: >>> On 26/02/2019 20:11, Genes Lists via arch-general wrote: >> ... >>> My current script is just pulling cn.zone from ipdeny.com. This looks

Re: [arch-general] HTTP spam from China - CIDR compacting tool

2019-02-26 Thread brent s.
On 2/26/19 1:20 PM, Genes Lists via arch-general wrote: > On 2/26/19 1:13 PM, Juha Kankare via arch-general wrote: >> On 26/02/2019 20:11, Genes Lists via arch-general wrote: > ... >> >> My current script is just pulling cn.zone from ipdeny.com. This looks >> super useful, I'm saving it. Thank

Re: [arch-general] HTTP spam from China

2019-02-26 Thread David C. Rankin
On 02/26/2019 06:40 AM, Juha Kankare via arch-general wrote: > I'm getting a lot of connections from China it seems. Whenever I check > my journalctl, it's an andless wall of nginx complaints about a single > ip spamming requests fro different php files. This happens with hundreds > of ip's,

Re: [arch-general] What update left mandb scrambled?

2019-02-26 Thread Eli Schwartz via arch-general
On 2/26/19 1:13 PM, David C. Rankin wrote: > On 02/26/2019 06:33 AM, Edvinas Valatka via arch-general wrote: >> After >> https://git.archlinux.org/svntogit/packages.git/commit/trunk?h=packages/man-db=a296a036a34944f714488f43bf576cca58bda604 >> , you have to manualy enable man-db.timer > > +#

Re: [arch-general] HTTP spam from China - CIDR compacting tool

2019-02-26 Thread Genes Lists via arch-general
On 2/26/19 1:13 PM, Juha Kankare via arch-general wrote: > On 26/02/2019 20:11, Genes Lists via arch-general wrote: ... > > My current script is just pulling cn.zone from ipdeny.com. This looks > super useful, I'm saving it. Thank you dude! > You're welcome. I just ran it on cn.zone and it

Re: [arch-general] HTTP spam from China - CIDR compacting tool

2019-02-26 Thread Juha Kankare via arch-general
On 26/02/2019 20:11, Genes Lists via arch-general wrote: > Just an FYI if you pull cidr blocks by country, either doing it > yourself directly from arin et al or by using someone elses list like > ipdeny.com the CIDR blocks are not necessarily compacted. > > i.e. it is often not the most

Re: [arch-general] HTTP spam from China - CIDR compacting tool

2019-02-26 Thread Genes Lists via arch-general
Just an FYI if you pull cidr blocks by country, either doing it yourself directly from arin et al or by using someone elses list like ipdeny.com the CIDR blocks are not necessarily compacted. i.e. it is often not the most minimal CIDR representation. I use is this little python script, which

Re: [arch-general] HTTP spam from China

2019-02-26 Thread Caleb Allen via arch-general
@Juha why not feel comfortable sharing the location of the server? On Tue, Feb 26, 2019 at 9:44 AM Juha Kankare via arch-general < arch-general@archlinux.org> wrote: > On 26/02/2019 18:40, Ralph Corderoy wrote: > > Hi Juha, > > > >>> It's why I keep my SSH servers on a non-standard port. I know

Re: [arch-general] HTTP spam from China

2019-02-26 Thread Juha Kankare via arch-general
On 26/02/2019 18:40, Ralph Corderoy wrote: > Hi Juha, > >>> It's why I keep my SSH servers on a non-standard port. I know it >>> doesn't prevent someone from discovering it, but it cuts out 99.99% >>> of all those attacks, being able to filter out connection attempts >>> to port 22 >> Same. For

Re: [arch-general] HTTP spam from China

2019-02-26 Thread Ralph Corderoy
Hi Juha, > > It's why I keep my SSH servers on a non-standard port. I know it > > doesn't prevent someone from discovering it, but it cuts out 99.99% > > of all those attacks, being able to filter out connection attempts > > to port 22 > > Same. For easy ports to remember, I like to combine

Re: [arch-general] HTTP spam from China

2019-02-26 Thread Zorro via arch-general
On 2/26/19 5:05 PM, Andy Pieters wrote: On Tue, Feb 26, 2019 at 4:02 PM Zorro via arch-general wrote: I see this happen on my SSH server. The journal is full of these failed login attempts. Haven't checked from where those login atttempts come from though. It makes it hard to find something

Re: [arch-general] HTTP spam from China

2019-02-26 Thread Juha Kankare via arch-general
On 26/02/2019 18:02, Zorro via arch-general wrote: > On 2/26/19 1:40 PM, Juha Kankare via arch-general wrote: >> I'm getting a lot of connections from China it seems. Whenever I check >> my journalctl, it's an andless wall of nginx complaints about a single >> ip spamming requests fro different

Re: [arch-general] HTTP spam from China

2019-02-26 Thread Andy Pieters
On Tue, Feb 26, 2019 at 4:02 PM Zorro via arch-general wrote: > I see this happen on my SSH server. > > The journal is full of these failed login attempts. > Haven't checked from where those login atttempts come from though. > > It makes it hard to find something in the journal. It's why I keep

Re: [arch-general] HTTP spam from China

2019-02-26 Thread Zorro via arch-general
On 2/26/19 1:40 PM, Juha Kankare via arch-general wrote: I'm getting a lot of connections from China it seems. Whenever I check my journalctl, it's an andless wall of nginx complaints about a single ip spamming requests fro different php files. This happens with hundreds of ip's, and tens of

Re: [arch-general] HTTP spam from China

2019-02-26 Thread Juha Kankare via arch-general
On 26/02/2019 15:10, Felix Yan via arch-general wrote: > On 2019/2/26 下午8:40, Juha Kankare via arch-general wrote: >> I'm >> curious as to why this happens, and if anyone else has had the same >> problem. > Because your IP might have joined the Chinese firewall poison party: >

Re: [arch-general] HTTP spam from China

2019-02-26 Thread Felix Yan via arch-general
On 2019/2/26 下午8:40, Juha Kankare via arch-general wrote: > I'm > curious as to why this happens, and if anyone else has had the same > problem. Because your IP might have joined the Chinese firewall poison party: https://news.ycombinator.com/item?id=8931827 -- Regards, Felix Yan

Re: [arch-general] HTTP spam from China

2019-02-26 Thread Juha Kankare via arch-general
On 26/02/2019 14:55, Bjoern Franke via arch-general wrote: > On 26.02.19 13:40, Juha Kankare via arch-general wrote: >> I'm getting a lot of connections from China it seems. Whenever I check >> my journalctl, it's an andless wall of nginx complaints about a single >> ip spamming requests fro

Re: [arch-general] HTTP spam from China

2019-02-26 Thread Bjoern Franke via arch-general
On 26.02.19 13:40, Juha Kankare via arch-general wrote: > I'm getting a lot of connections from China it seems. Whenever I check > my journalctl, it's an andless wall of nginx complaints about a single > ip spamming requests fro different php files. This happens with hundreds > of ip's, and

Re: [arch-general] What update left mandb scrambled?

2019-02-26 Thread Ralf Mardorf via arch-general
On Tue, 2019-02-26 at 13:43 +0100, Ralf Mardorf wrote: > On Tue, 2019-02-26 at 14:33 +0200, Edvinas Valatka via arch-general > wrote: > > On Tue, Feb 26, 2019 at 8:57 AM David C. Rankin > > wrote: > > > This was odd, > > > > > > $ apropos memcmp > > > memcmp: nothing appropriate. > > > > > >

Re: [arch-general] What update left mandb scrambled?

2019-02-26 Thread Ralf Mardorf via arch-general
On Tue, 2019-02-26 at 14:33 +0200, Edvinas Valatka via arch-general wrote: > On Tue, Feb 26, 2019 at 8:57 AM David C. Rankin > wrote: > > This was odd, > > > > $ apropos memcmp > > memcmp: nothing appropriate. > > > > In fact, no man pages were available (checked 2 arch installs). I ended up

[arch-general] HTTP spam from China

2019-02-26 Thread Juha Kankare via arch-general
I'm getting a lot of connections from China it seems. Whenever I check my journalctl, it's an andless wall of nginx complaints about a single ip spamming requests fro different php files. This happens with hundreds of ip's, and tens of times daily. Has anyone else been hit by this. I already

Re: [arch-general] What update left mandb scrambled?

2019-02-26 Thread Edvinas Valatka via arch-general
On Tue, Feb 26, 2019 at 8:57 AM David C. Rankin wrote: > > This was odd, > > $ apropos memcmp > memcmp: nothing appropriate. > > In fact, no man pages were available (checked 2 arch installs). I ended up > having to rebuild the database with 'mandb' and now all is well. > > My question is --

Re: [arch-general] What update left mandb scrambled?

2019-02-26 Thread Ralf Mardorf via arch-general
man memcmp is available on my Arch install. I did not just run "apropos", if I run "man" I get the memcmp manual page. [rocketmouse@archlinux ~]$ apropos memcmp TIFFmemory (3tiff) - memory management-related functions for use with TIFF files gnutls_memcmp (3)- API function memcmp (3)