Re: [Operators] Reporting DDoS attack, the idiot responsible of the attack and the server range which the drones come from.

2012-09-04 Thread Dave Cridland
While I agree with much of what you're saying, making a public service that's not the equivalent of an open relay is hard. Google has a lot of code assigned at detecting abuse, and a lot of this works because of the scale of their operation. I think public servers are possible, but not as they are

Re: [Operators] Reporting DDoS attack, the idiot responsible of the attack and the server range which the drones come from.

2012-09-04 Thread Peter Viskup
On 09/04/2012 09:21 PM, Philipp Hancke wrote: Going further, I think that public servers are an obsolete concept. In the early days of Jabber, when was really hard to install an XMPP server they had their place. And they were usually run by developers gathering operational experience. These

Re: [Operators] Reporting DDoS attack, the idiot responsible of the attack and the server range which the drones come from.

2012-09-04 Thread Philipp Hancke
Am 04.09.2012 18:56, schrieb Dave Cridland: My understanding is that they're both difficult problems to tackle without a lot of data processing and analysis, but that a key issue is that freely The problems get two orders of magnitude harder if you can not trust your local users. available

Re: [Operators] Reporting DDoS attack, the idiot responsible of the attack and the server range which the drones come from.

2012-09-04 Thread Dave Cridland
If you have concrete suggestions for what the XSF should be doing, and/or how servers could defend themselves against spam and DDoS, I'd be interested in hearing them. My understanding is that they're both difficult problems to tackle without a lot of data processing and analysis, but that a key i

Re: [Operators] Reporting DDoS attack, the idiot responsible of the attack and the server range which the drones come from.

2012-09-04 Thread Arsimael Inshan
I am using a prosody Server without mysql Support. This means all accounts are storen as files on my servers harddrive. (Passwords are salted and hashed). I don't host this Server for hundrets of people, I host this Server für friends and colleagues. But i don't want my server to be used as a

Re: [Operators] Reporting DDoS attack, the idiot responsible of the attack and the server range which the drones come from.

2012-09-04 Thread Marco Cirillo
Il 04/09/2012 09:40, Mathias Ertl ha scritto: Thats a load of crap, and believe me, I wish it weren't. Most JIDs you gave only had one JID per server. No matter how far registration is restricted, you will always get a couple of JIDs on a server, if you want to use it. Hardly a load of crap, when

Re: [Operators] Reporting DDoS attack, the idiot responsible of the attack and the server range which the drones come from.

2012-09-04 Thread Friedrich Kron
^^ come down.. maybe check your server first .. seems a little vulnerable ;) btw.. whats your servers domain? mit freundlichen Grüßen / best regards, F Kron - edv dienstschiene Mobile: +43 699 19000414 Mail: friedrich.k...@jaim.at On Sep 4, 2012, at 12:50 AM, Marco Cirillo wrote: > Il 03/09

Re: [Operators] Reporting DDoS attack, the idiot responsible of the attack and the server range which the drones come from.

2012-09-04 Thread Mathias Ertl
On Tue, Sep 04, 2012 at 12:50:26AM +0200, Marco Cirillo wrote: > Il 03/09/2012 22:41, Arsimael Inshan ha scritto: > >I don't think thats a good idea. Every open Jabber-Server can be > >used for this. IF you block all Open Servers, then you might cut > >yourself of the jabber network. And if everyon

Re: [Operators] Reporting DDoS attack, the idiot responsible of the attack and the server range which the drones come from.

2012-09-04 Thread Evgeniy Khramtsov
On 04.09.2012 17:19, Mathias Ertl wrote: On Tue, Sep 04, 2012 at 01:06:23PM +1000, Evgeniy Khramtsov wrote: On 04.09.2012 06:43, Arsimael Inshan wrote: On the other side. How can I make my server "safe"? Our practice on jabber.ru: 1) Registration protected with captcha and sms/email confir

Re: [Operators] Reporting DDoS attack, the idiot responsible of the attack and the server range which the drones come from.

2012-09-04 Thread Mathias Ertl
On Tue, Sep 04, 2012 at 01:06:23PM +1000, Evgeniy Khramtsov wrote: > On 04.09.2012 06:43, Arsimael Inshan wrote: > >On the other side. How can I make my server "safe"? > > Our practice on jabber.ru: > 1) Registration protected with captcha and sms/email confirmation. > 2) Registration time lim