Box-Admins February 2017

box-admins@lists.squeakfoundation.org

8 participants
9 discussions

Access to the new server(s)
by Tobias Pape 05 Apr '19

05 Apr '19

Dear all [ACTIONS AT END] with retroactive blessing of Levente, I have now prepared eight VMs on Rackspace. Here's the overview: ======================================================================================================================= Name Name (ext) intended use Unix Users Public Ports Private Ports Public IPv4 Private IPv4 ----------------------------------------------------------------------------------------------------------------------- ian ssh.squeak.org ssh-gateway ssh 1022 22 104.130.6.82 10.208.225.29 alan *.squeak.org webserver webteam 80, 443 22 104.239.229.92 10.176.200.8 adele lists.... mailinglists (tbd) 25, 587, 465 22, 8080 162.242.237.43 10.208.160.56 andreas -------- source.squeak chrismuller* -------- 22, 8080 irrelevant 10.208.161.222 dan -------- squeaksource davidlewis* -------- 22, 8080 irrelevant 10.176.197.150 ted -------- squeak wiki+map (tbd) -------- 22, 8080, 8081 irrelevant 10.176.130.111 david -------- jenkins (tbd) -------- 22, 8080 irrelevant 10.208.194.45 scott -------- misc (tbd) -------- 22, 8080, 8081 irrelevant 10.176.199.169 ======================================================================================================================= Currently, Levente and me have sudo on all these machines. Users with * also do. Note that _no_ server exposes SSH on port 22 on a public IP. This is intentional to narrow attack vectors for script kiddies. How to login? Ian is the ssh gateway so you have to connect to ian _first_ and use (1) local forwarding or (2) proxy jumping. I have installed the Public keys from most of you for the 'ssh' user on ian. Please verify by ssh -p1022 -lssh 104.130.6.82 you should see restrict shell, no commands # (you get out with crtl-d, ctrl-c, or killing ssh) How to reach the other servers? Example for 'andreas' variant (1): Do a local forward by ssh -AN -L22221:10.176.200.8:22 -p1022 -lssh 104.130.6.82 and then ssh -lYOURNAME -p22221 localhost (-N maybe optional, but then you see 'restrict shell, no commands #') Or in your .ssh/config you can put Host ian.squeak.org User ssh Hostname 104.130.6.82 Port 1022 LocalForward 222221 10.176.200.8:22 Host andreas.squeak.org User YOURNAME Hostname localhost Port 222221 And then say 'ssh -AN ian.squeak.org' and then 'ssh andreas.squeak.org' variant (2): (a) You have OpenSSH >= 7.3 Do a Jump with ssh -J ssh@104.130.6.82:1022 YOURNAME(a)10.176.200.8 Or in your .ssh/config you can put Host ian.squeak.org User ssh Hostname 104.130.6.82 Port 1022 Host andreas.squeak.org User YOURNAME Hostname 10.176.200.8 ProxyJump ian.squeak.org And then say 'ssh andreas.squeak.org' (b) You have OpenSSH >= 5.4 Do a Jump via ssh -o ProxyCommand="ssh -lssh -p1022 -W %h:%p 104.130.6.82" YOURNAME(a)10.176.200.8 Or in your .ssh/config you can put Host ian.squeak.org User ssh Hostname 104.130.6.82 Port 1022 Host andreas.squeak.org User YOURNAME Hostname 10.176.200.8 ProxyCommand ssh -W %h:%p ian.squeak.org And then say 'ssh andreas.squeak.org' (c) You have OpenSSH < 5.4 Use variant (1) We will shortly start RSYNC-ing over data from box3 and box4 as well as replicatiing DNS entries before switching over. [ACTION REQUIRED] - Who needs access to which servers? - Do we need Jenkins anymore? As always, questions appreciated. Best regards -Tobias

8 36

all hosts need reboot, ideas?
by Tobias Pape 24 Feb '17

24 Feb '17

Dear all all our hosts need reboot. When shall we do the cycling? As a reminder, here's what each host does: ian ssh-gateway alan webserver adele mail/mailinglists andreas source.squeak.org dan squeaksource.com ted squeak wiki+map david holds data from old jenkins/old apache scott misc(mantis/codesp.) I'm taking suggestions. Best regards -tobias

2 3

Mantis
by Tobias Pape 24 Feb '17

24 Feb '17

Dear all to be able to maintain Mantis better, I made myself an admin via the database. That way, I finally could help Tim Johnson reset his password… For reference, the current admins with their last login date: Jens Holze 11/25/07 11:39 Michael Rüger 02/25/08 17:31 Randal L. Schwartz 03/18/10 21:53 Bert Freudenberg 03/05/13 11:20 Ken Causey 03/05/14 19:31 Tobias Pape 02/23/17 19:58 Best regards -Tobias

3 3

DMARC :(
by Tobias Pape 17 Feb '17

17 Feb '17

Hey all, just found out that a lot of mails to the lists are being rejected by * yahoo * comcast because dmarc is missing. Bummer. Will see to get it work. Best regards -Tobias

1 0

squeaksource.com is down (EOM)
by Bert Freudenberg 17 Feb '17

17 Feb '17

3 5

Re: [Box-Admins] [Board] Request permission to moderate squeak-dev
by Bert Freudenberg 14 Feb '17

14 Feb '17

On Fri, Feb 10, 2017 at 4:52 PM, Levente Uzonyi <leves(a)caesar.elte.hu> wrote: > On Fri, 10 Feb 2017, David T. Lewis wrote: > > On Fri, Feb 10, 2017 at 11:38:18AM +0100, Bert Freudenberg wrote: >> >>> On Fri, Feb 10, 2017 at 11:22 AM, Tobias Pape <Das.Linux(a)gmx.de> wrote: >>> >>> Dear all >>>> >>>> I request the permission to moderate squeak-dev. >>>> I want to: >>>> - approve ok pending messages >>>> - discard held messages that are spam etc. >>>> - add spammers to blacklists. >>>> So that the server stays more clean than it does currently: >>>> - 16 messages in the last 3 days AFTER I purged _all_ ~2000 held >>>> messages that accumulated over the years >>>> >>>> If approved, I'd also change the following options serverside: >>>> - discard mail from not subscribed people instead of holding >>>> - turn off password reminders (those are dagngerous..) >>>> - discard held messages after 30 days (currently indefinitely) >>>> And maybe apply this to all our lists. >>>> >>>> >>>> Best regards >>>> -Tobias >>>> >>>> >>> >>> +1 >>> >>> - Bert - >>> >> >> +1 >> Dave >> >> >> Just one question (not an objection, just a question): >> >> - discard mail from not subscribed people instead of holding >>>> >>> >> Is this a good idea? I don't know if we have a problem with not >> subscribed people posting to the list, but I would be generally >> inclined to avoid adding any new restrictions unless they solve a >> real problem. Again, I am not objecting, just asking because I do >> not know. >> > > I dislike the idea to automatically reject those emails, because that > breaks cross-list conversations. The current situation is no better (as > Tobias described), but with proper moderation it would be better. > > +1 on all the other things. Levente > Tobi was suggesting discarding, not rejecting (but possibly that was a typo). The difference is that the sender gets notified of their possibly honest mistake in one case, whereas it silently fails in the other. I'd personally be in favor of rejecting, not discarding. The third option is holding, but that puts a lot of burden on the moderator, as you said there are dozens of spam mails each day. Perhaps we can hold only messages that pass a spam filter? In any case I'm happy to defer to Levente's opinion as box admins lead. Except for this single issue, the board approves your request Tobi (there were a couple of +1 in this thread that didn't make it to the box-admins list). And thank you for volunteering :) - Bert -

4 7

Request permission to moderate squeak-dev
by Tobias Pape 10 Feb '17

10 Feb '17

Dear all I request the permission to moderate squeak-dev. I want to: - approve ok pending messages - discard held messages that are spam etc. - add spammers to blacklists. So that the server stays more clean than it does currently: - 16 messages in the last 3 days AFTER I purged _all_ ~2000 held messages that accumulated over the years If approved, I'd also change the following options serverside: - discard mail from not subscribed people instead of holding - turn off password reminders (those are dagngerous..) - discard held messages after 30 days (currently indefinitely) And maybe apply this to all our lists. Best regards -Tobias

2 2

Fwd: [Board] Fwd: voters@squeak.org
by Bert Freudenberg 03 Feb '17

03 Feb '17

---------- Forwarded message ---------- From: tim Rowledge <tim(a)rowledge.org> Date: Thu, Feb 2, 2017 at 11:40 PM Subject: [Board] Fwd: voters(a)squeak.org To: Squeak Oversight Board Discussion <board(a)lists.squeakfoundation.org> I’m not sure I can do anything more helpful than forwarding this... Begin forwarded message: *From: *Ron Teitelbaum <ron(a)usmedrec.com> *Subject: **voters(a)squeak.org <voters(a)squeak.org>* *Date: *February 2, 2017 at 1:58:22 PM PST *To: *tim Rowledge <tim(a)rowledge.org> Hi Tim, I was just testing voters(a)squeak.org but didn't get the email. Could you check that to see if we still have that email and that it still goes to me? Sorry I didn't check it earlier. All the best, Ron tim -- tim Rowledge; tim(a)rowledge.org; http://www.rowledge.org/tim Gotta run, the cat's caught in the printer.

3 3

[INFO] I restarted the squeaksource.com process
by David T. Lewis 01 Feb '17

01 Feb '17

The squeaksource.com image had been growing in size for a while, so I fixed it offline and restarted the process about 15 minutes ago. I suspect (but am not sure) that the problem was related to incorrect setting of the smtp server. Just for the record, here is what I did: - In process browser, manually kill the stuck processes. - In the repository, smtpServer was 'localhost, change it to 'mail.squeak.org' (properties at: #smtpServer put: 'mail.squeak.org') - Restart the RFBServer monitor.(RFBServer open)

4 3

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Box-Admins February 2017