Re: [Operators] XMPP github PRs

2021-11-07 Thread Jonas Schäfer
Hi, On Sonntag, 7. November 2021 03:51:08 CET Shadow Chat wrote: > Sorry for bothering you. I’m really confused then. Why does xmpp.org and the > GitHub specifically say to email this group? Melinda I didn’t mean to upset > you with my question I was just following the directions. > > So no one i

Re: [Operators] STUN/TURN servers are being abused in DDoS attacks (even with auth enabled)

2021-04-28 Thread Jonas Schäfer
Hi Philipp, Thanks for you reply. On Mittwoch, 28. April 2021 20:21:09 CEST Philipp Hancke wrote: > Am 28.04.21 um 17:37 schrieb Jonas Schäfer: > > Hi fellow operators, > > > > TL;DR: STUN/TURN servers are vulnerable to abuse to facilitate reflected > > ampli

[Operators] STUN/TURN servers are being abused in DDoS attacks (even with auth enabled)

2021-04-28 Thread Jonas Schäfer
Hi fellow operators, TL;DR: STUN/TURN servers are vulnerable to abuse to facilitate reflected amplified DDoS attacks even with authentication enabled. Roll a few dice and choose a random port number for your STUN server for the better of the internet. DESCRIPTION With the advent of widesprea

Re: [Operators] Querying XEP-0157 information from servers

2020-09-23 Thread Jonas Schäfer
On Montag, 21. September 2020 20:49:58 CEST Christian Weiske wrote: > Hi, > > > How can I query XMPP server contact information like the abuse and > support information[1]? > Are there special tools for this, or do some clients support that? XEP-0157 information is exposed in disco#info data. So

[Operators] [ANN][BETA] observe.jabber.network -- Free Monitoring-as-a-Service for Federated XMPP Domains

2020-04-25 Thread Jonas Schäfer
Hi everyone, I am hereby starting to offer a public beta free Monitoring-as-a-Service for Federated XMPP Domains. The full description of the service and instructions to make use of it are available on the website: https://observe.jabber.network/ In short, this makes use of the previously a

[Operators] [ANN] prometheus-xmpp-blackbox-exporter v0.3.1 released

2020-03-29 Thread Jonas Schäfer
Hi all, I am happy to announce the release of prometheus-xmpp-blackbox-exporter [1] version 0.3.1. The most recent binary and accompanying checksums are available at: https://github.com/horazont/prometheus-xmpp-blackbox-exporter/releases/ The docker image is available as xsfjonas/prometheus-xm

Re: [Operators] s2s connectivity to jabber.ru -- dh key too small

2019-08-12 Thread Jonas Schäfer
On Sonntag, 11. August 2019 14:15:56 CEST Evgeny wrote: > On Sun, Aug 11, 2019 at 2:51 PM, Jonas Schäfer > > wrote: > > Thanks. I understand that jabber.ru tried to up their DH key size? > > Apparently, > > that did not work. I still see dh key size too small. I have

Re: [Operators] s2s connectivity to jabber.ru -- dh key too small

2019-08-11 Thread Jonas Schäfer
On Freitag, 9. August 2019 09:12:35 CEST Holger Weiß wrote: > * Jonas Schäfer [2019-08-08 19:14]: > > I was contacted by someone @jabber.ru, but I cannot reply because the DH > > key size used by their server for TLS is too small to be accepted by the > > TLS libraries di

Re: [Operators] s2s connectivity to jabber.ru -- dh key too small

2019-08-11 Thread Jonas Schäfer
On Donnerstag, 8. August 2019 21:07:11 CEST Evgeny wrote: > On Thu, Aug 8, 2019 at 8:14 PM, Jonas Schäfer > > wrote: > > Dear list, > > > > Hopefully someone from jabber.ru is here or someone knows someone > > there. > > I forwarded your email to the admi

[Operators] dh key size too small -- DH key sizes less than 2048 bits rejected by OpenSSL in Debian stable

2019-08-08 Thread Jonas Schäfer
Dear list, Here a quick heads up: DH groups with less than 2048 bits are rejected by OpenSSL as shipped with Debian stable. This poses interop issues for domains which do have such groups (e.g. jabber.org, jabber.ru). Please check your service configuration for the DH group size. I think the e

[Operators] s2s connectivity to jabber.ru -- dh key too small

2019-08-08 Thread Jonas Schäfer
Dear list, Hopefully someone from jabber.ru is here or someone knows someone there. I was contacted by someone @jabber.ru, but I cannot reply because the DH key size used by their server for TLS is too small to be accepted by the TLS libraries distributed with Debian stable. Can someone forwar

[Operators] [ANN] Prometheus blackbox prober for XMPP

2019-07-01 Thread Jonas Schäfer
Hi all, Prometheus [1] is a (currently) very popular time-series database and overall monitoring solution. In Prometheus terminology, an exporter is a piece of software which provides metrics for the Prometheus server to ingest ("scrape"). The Prometheus XMPP Blackbox Exporter [2], which is he