Re: [Operators] Reporting DDoS attack, the idiot responsible of the attack and the server range which the drones come from.

2012-09-04 Thread Dave Cridland
While I agree with much of what you're saying, making a public service that's not the equivalent of an open relay is hard. Google has a lot of code assigned at detecting abuse, and a lot of this works because of the scale of their operation. I think public servers are possible, but not as they are

Re: [Operators] Reporting DDoS attack, the idiot responsible of the attack and the server range which the drones come from.

2012-09-04 Thread Peter Viskup
On 09/04/2012 09:21 PM, Philipp Hancke wrote: Going further, I think that public servers are an obsolete concept. In the early days of Jabber, when was really hard to install an XMPP server they had their place. And they were usually run by developers gathering operational experience. These

Re: [Operators] Reporting DDoS attack, the idiot responsible of the attack and the server range which the drones come from.

2012-09-04 Thread Philipp Hancke
Am 04.09.2012 18:56, schrieb Dave Cridland: My understanding is that they're both difficult problems to tackle without a lot of data processing and analysis, but that a key issue is that freely The problems get two orders of magnitude harder if you can not trust your local users. available

Re: [Operators] Reporting DDoS attack, the idiot responsible of the attack and the server range which the drones come from.

2012-09-04 Thread Dave Cridland
If you have concrete suggestions for what the XSF should be doing, and/or how servers could defend themselves against spam and DDoS, I'd be interested in hearing them. My understanding is that they're both difficult problems to tackle without a lot of data processing and analysis, but that a key i

Re: [Operators] Reporting DDoS attack, the idiot responsible of the attack and the server range which the drones come from.

2012-09-04 Thread Arsimael Inshan
I am using a prosody Server without mysql Support. This means all accounts are storen as files on my servers harddrive. (Passwords are salted and hashed). I don't host this Server for hundrets of people, I host this Server für friends and colleagues. But i don't want my server to be used as a

Re: [Operators] Reporting DDoS attack, the idiot responsible of the attack and the server range which the drones come from.

2012-09-04 Thread Marco Cirillo
Il 04/09/2012 09:40, Mathias Ertl ha scritto: Thats a load of crap, and believe me, I wish it weren't. Most JIDs you gave only had one JID per server. No matter how far registration is restricted, you will always get a couple of JIDs on a server, if you want to use it. Hardly a load of crap, when

Re: [Operators] Reporting DDoS attack, the idiot responsible of the attack and the server range which the drones come from.

2012-09-04 Thread Friedrich Kron
^^ come down.. maybe check your server first .. seems a little vulnerable ;) btw.. whats your servers domain? mit freundlichen Grüßen / best regards, F Kron - edv dienstschiene Mobile: +43 699 19000414 Mail: friedrich.k...@jaim.at On Sep 4, 2012, at 12:50 AM, Marco Cirillo wrote: > Il 03/09

Re: [Operators] Reporting DDoS attack, the idiot responsible of the attack and the server range which the drones come from.

2012-09-04 Thread Mathias Ertl
On Tue, Sep 04, 2012 at 12:50:26AM +0200, Marco Cirillo wrote: > Il 03/09/2012 22:41, Arsimael Inshan ha scritto: > >I don't think thats a good idea. Every open Jabber-Server can be > >used for this. IF you block all Open Servers, then you might cut > >yourself of the jabber network. And if everyon

Re: [Operators] Reporting DDoS attack, the idiot responsible of the attack and the server range which the drones come from.

2012-09-04 Thread Evgeniy Khramtsov
On 04.09.2012 17:19, Mathias Ertl wrote: On Tue, Sep 04, 2012 at 01:06:23PM +1000, Evgeniy Khramtsov wrote: On 04.09.2012 06:43, Arsimael Inshan wrote: On the other side. How can I make my server "safe"? Our practice on jabber.ru: 1) Registration protected with captcha and sms/email confir

Re: [Operators] Reporting DDoS attack, the idiot responsible of the attack and the server range which the drones come from.

2012-09-04 Thread Mathias Ertl
On Tue, Sep 04, 2012 at 01:06:23PM +1000, Evgeniy Khramtsov wrote: > On 04.09.2012 06:43, Arsimael Inshan wrote: > >On the other side. How can I make my server "safe"? > > Our practice on jabber.ru: > 1) Registration protected with captcha and sms/email confirmation. > 2) Registration time lim

Re: [Operators] Reporting DDoS attack, the idiot responsible of the attack and the server range which the drones come from.

2012-09-03 Thread Evgeniy Khramtsov
On 04.09.2012 06:43, Arsimael Inshan wrote: On the other side. How can I make my server "safe"? Our practice on jabber.ru: 1) Registration protected with captcha and sms/email confirmation. 2) Registration time limit per IP. 3) Only allow to register 2 accounts per email/phone number. 4) Ma

Re: [Operators] Reporting DDoS attack, the idiot responsible of the attack and the server range which the drones come from.

2012-09-03 Thread Marco Cirillo
Il 03/09/2012 22:41, Arsimael Inshan ha scritto: I don't think thats a good idea. Every open Jabber-Server can be used for this. IF you block all Open Servers, then you might cut yourself of the jabber network. And if everyone does this then we don't have a jabber network anymore, or it's getti

Re: [Operators] Reporting DDoS attack, the idiot responsible of the attack and the server range which the drones come from.

2012-09-03 Thread Kevin Smith
On Mon, Sep 3, 2012 at 9:43 PM, Arsimael Inshan wrote: > On the other side. How can I make my server "safe"? Disable in-band registration, and require out of band sign-up with some protection (capchas, maybe email verification or whatever). /K

Re: [Operators] Reporting DDoS attack, the idiot responsible of the attack and the server range which the drones come from.

2012-09-03 Thread Arsimael Inshan
On the other side. How can I make my server "safe"? Am 03.09.2012 19:29, schrieb Thomas: Hi, these server list are now a bloack list in my server Marco Cirillo

Re: [Operators] Reporting DDoS attack, the idiot responsible of the attack and the server range which the drones come from.

2012-09-03 Thread Arsimael Inshan
I don't think thats a good idea. Every open Jabber-Server can be used for this. IF you block all Open Servers, then you might cut yourself of the jabber network. And if everyone does this then we don't have a jabber network anymore, or it's getting an invite-only

Re: [Operators] Reporting DDoS attack, the idiot responsible of the attack and the server range which the drones come from.

2012-09-03 Thread Thomas
Hi, these server list are now a bloack list in my server Marco Cirillo 03 settembre 2012 16:37 Approximately from 8:50 am to 8:56 am UTC, my server's muc received something like 1.7 millions stanzas from drones spread across 54 servers. r...@jabberworld.net/Mcabber, for

Re: [Operators] Reporting DDoS attack, the idiot responsible of the attack and the server range which the drones come from.

2012-09-03 Thread Marco Cirillo
Il 03/09/2012 16:54, Fabián Bonetti ha scritto: On Mon, 03 Sep 2012 16:37:36 +0200 Marco Cirillo wrote: You can know more or less how many petitions were ip? I'm not sure I understand what are you trying to mean, ip addresses in this case for what it pertains me are "known" but pointless (t

Re: [Operators] Reporting DDoS attack, the idiot responsible of the attack and the server range which the drones come from.

2012-09-03 Thread Fabián Bonetti
On Mon, 03 Sep 2012 16:37:36 +0200 Marco Cirillo wrote: You can know more or less how many petitions were ip? -- Voip Mumble :. http://mumble.com.ar Web Hosting :. http://mamalibre.com.ar Red Social :. http://legadolibre.com.ar Jabber/XMPP :. http://mamalibre.com.ar/xmpp/ MamaLibre,

[Operators] Reporting DDoS attack, the idiot responsible of the attack and the server range which the drones come from.

2012-09-03 Thread Marco Cirillo
Approximately from 8:50 am to 8:56 am UTC, my server's muc received something like 1.7 millions stanzas from drones spread across 54 servers. r...@jabberworld.net/Mcabber, formally "the idiot", did survey the room and remained in there while the attack was having place. This is the list of se