Home forum Help Search Login Register

Site Sections

User Info

Welcome, Guest. Please login or register.
Did you miss your activation email?
December 18, 2018, 12:16:51 PM

Login with username, password and session length

Recent Topics

Site Tips

Did you know that to post outside of the Meta forum you must log in
Pages: [1] 2
Send this topic Print
Author Topic: Temporary Address  (Read 19213 times)
0 Members and 1 Guest are viewing this topic.
Nifelhein
Administrator
*****

Spell Energy / Taint +22/-0
Gender: Male
Posts: 2,117


Whisper's Will


« on: February 08, 2008, 04:27:33 PM »

The shadow can never be destroyed, it can be threatened, weakened, wounded, but in the end, it still lives!

Due to the problems with spoof mail attacks the site has been down for the last few days, I managed to get it back up by setting a sub domain of the other site I own, it is a temporary solution that serves us well in at least keeping it online. The temporary web address is www.ats.unifans.org

I will have to get a new domain and it seems the .net one is available, I will try to get a hold of it as soon as possible, but credit cards, pay pal and the nameservers aren't just that fast, specially on weekends, so expect any changes to take a while now.

In the meantime, I accept ideas, suggestions, complaints, and so on and so forth.

Logged

"We cannot live only for ourselves. A thousand fibers connect us with our fellow men; and among those fibers, as sympathetic threads, our actions run as causes, and they come back to us as effects."
 - Attributed to Herman Melville.
Kane
Administrator
*****

Spell Energy / Taint +12/-3
Posts: 715


« Reply #1 on: February 08, 2008, 04:31:14 PM »

Nif,

You are a saintly trapped spirit for getting the site back. 

Kane
Logged
Nifelhein
Administrator
*****

Spell Energy / Taint +22/-0
Gender: Male
Posts: 2,117


Whisper's Will


« Reply #2 on: February 08, 2008, 04:32:29 PM »

mrgreen

Nothing was lost, by the way, so those who have seen the end of it all, your best attempts at envisioning the future have failed! Tongue
Logged
kimco
Insurgent Spy
**

Spell Energy / Taint +0/-0
Gender: Male
Posts: 108


« Reply #3 on: February 08, 2008, 04:56:01 PM »

Thanks for the hard work.

Welcome back old friend.
Logged
Nifelhein
Administrator
*****

Spell Energy / Taint +22/-0
Gender: Male
Posts: 2,117


Whisper's Will


« Reply #4 on: February 08, 2008, 04:57:43 PM »

mrgreen

I refuse to let this site go anywhere! *shakes hand at the spammers*
Logged
Doomed Hero
Avatar of the Witch Queen
*****

Spell Energy / Taint +11/-4
Gender: Male
Posts: 4,907



« Reply #5 on: February 08, 2008, 05:39:01 PM »

I don't have any idea how much finding a host for this site costs you, but I for one would be perfectly willing to pay a small tithe to the Dark One to help keep it running.

A few days without the site was starting to make me twitchy. I need my fix.
Logged

Jack Chick, Abdul Alhazred, and Aleister Crowley walk into a bar...
Nifelhein
Administrator
*****

Spell Energy / Taint +22/-0
Gender: Male
Posts: 2,117


Whisper's Will


« Reply #6 on: February 08, 2008, 05:44:53 PM »

Well, the price isn't a problem, really, but changing servers won't solve the issue, and we might just end up kicked from any other we end up going to, this one has a great support and they only took dire measures because the spoof mail attacks ended up crashing the server on that day.  ohwell

If it ever gets down to the price being an issue I will surely open donations, but right now it is not a concern so don't worry about it at all, the sit has given me a lot more than the small amount needed to keep it running.

And by leaving the .org domain hanging for a while it may be left alone by the spammers as well, meaning we might end up getting it back up some day... who knows, right?  mrgreen
Logged
sshagent
Lightbearer
*

Spell Energy / Taint +1/-0
Gender: Male
Posts: 81



« Reply #7 on: February 08, 2008, 06:45:38 PM »

so what exactly happened? 

i run my own host, use smf & tp myself.  so am intrigued exactly what has been done.  who knows might even be able to help in someway.
Logged
Nifelhein
Administrator
*****

Spell Energy / Taint +22/-0
Gender: Male
Posts: 2,117


Whisper's Will


« Reply #8 on: February 09, 2008, 02:18:54 AM »

sshagent,

My host said there are far too many spoof mail attacks directed against AtS's domain, enough to have crashed the server more than once, in the last few days before the site was taken down the attacks intensified, they tracked the problem and while the responsible person was doing that, the server crashed again...

They then asked me to remove the domain from their servers... it is paid, it is not an SMF & Tp problem, and wherever we go it may come back to haunt us, and we may have to move again...

He said the best solution I could try is to change domains for the site. ohwell

Any ideas? I am all for keeping AtS's domain as it is, and I trust the host, they have the best support I have seen around and never take long to address any concern, complaint or doubt I have.
Logged
sshagent
Lightbearer
*

Spell Energy / Taint +1/-0
Gender: Male
Posts: 81



« Reply #9 on: February 09, 2008, 04:16:32 AM »

I know spoofing mail to appear to come from another source is pretty simple to do.  The above, unless im misreading it seems to suggest there is mail being directed to your server.  Wouldn't it just be easy to have a host where you don't host mail? 

Ive probably misread what you've said.  I've added your gmail address listed there on your profile to mine, hopefuly i'll catch you online.


Logged
Leviathan
Lightbearer
*

Spell Energy / Taint +3/-0
Gender: Male
Posts: 84



« Reply #10 on: February 09, 2008, 08:24:58 AM »

After the first couple of days of attempting to visit AtS and seeing only a white screen, I had assumed the site had been destroyed or otherwise eliminated somehow and/or for some reason.  I suspected some kind of web attack but was unsure. For the life of me, I don't understand why an "rpg fansite" draws so much fire...

In any event, it's good to see the fansite back up for now, if only at a temporary location and/or on a temporary basis.  If I were you (Nif plus whomever), I would post some simple information as to how you could be contacted in terms of sending you a small monetary donation for the work and expenses you incur with the AtS project.  I would be happy to make a small donation for the cause.

If it turns out that the continued existence of AtS is somehow "not in the cards", so to speak, I just wanted to squeeze in (before it's too late!) that I've enjoyed the AtS website and the Midnight players and fans very much over the last 4 years and will miss it and this nexus.  Hopefully, that farewelll is premature!

L

Logged

"I would say more, but a shadow seems to have passed over my face" - Goodgulf to Frito, paraphrased from Harvard Lampoon's 'Bored of the Rings'
Nifelhein
Administrator
*****

Spell Energy / Taint +22/-0
Gender: Male
Posts: 2,117


Whisper's Will


« Reply #11 on: February 09, 2008, 03:15:15 PM »

sshagent,

It seems it is a Denial of Service attack directed at the domain, I don't want to speculate, but there is a somewhat coincidental moment when the site problems with spammers and all that begun way back, old timers know what i am talking about.

I don't know the specifics and i don't know enough to be able to formulate specific questions, so if you guys know more than me, i would be happy to have your help in understanding the events and how it can be circumvented. Wink

L,

The site won't go away for as long as I can keep it up, that means paying for it and devoting time to keep it going, if the first is an issue I would surely try to get funds from the gentle and great people from the forums and those who just lurk as well, but I don't want to turn this place in a kind of business, if it ever comes down to that, all funds would go toward the hosting, no deal there. If I can't keep it going due to time, then I would have to pass it on to someone else, like Todd did. This is not an issue for the foreseeable future as well. So in short, no the site won't go away, not if I can avoid that by any possible means at my disposal.

The temporary address is here because:

1. We don't know if we will move servers, it doesn't seem to solve anything, so why do it?

2. We don't know if we will change domain address, it wouldn't hurt too much, but it would surely mean a loss, plus I msut check what .net domains have as limitations compared to .org

So in short, it is temporary because I am evaluating the next step, and all opinions are welcome and appreciated here, help even more. Grin
Logged
Pheros
Avatar of the Witch Queen
*****

Spell Energy / Taint +6/-2
Gender: Male
Posts: 1,500



WWW
« Reply #12 on: February 10, 2008, 03:28:05 PM »

Nif, how much do we use the "@ats.org" email addresses?  If they are used rarely-if-never, perhaps just disabling all email to the site might stop the problem.  Or is it something where even just bouncing the incoming emails is enough to crash the server?

Joe
Logged

1.6180339887...
Dunkin stats
sshagent
Lightbearer
*

Spell Energy / Taint +1/-0
Gender: Male
Posts: 81



« Reply #13 on: February 11, 2008, 08:38:50 AM »

That was pretty much what i was thinking. 
Logged
Nifelhein
Administrator
*****

Spell Energy / Taint +22/-0
Gender: Male
Posts: 2,117


Whisper's Will


« Reply #14 on: February 12, 2008, 02:59:23 AM »

Okay, now I know exactly what is going on, here is the information provided by my host:

Quote
Your domain is being "spoofed" (immitated), which means that your actual website, is fine. However, your ATS domain isn't.

Quote
You aren't being attacked, per se. Someone is using your domain name, as a From: header, when sending spam. This makes it look like the spam is coming from your site - when this email is bounced, our servers get the bounce messages, which is what overloads the server, and causes the downtime.

Given my knowledge of how things work, there is no way I can avoid that in this host, bouncing mail does return to the sender and then the problem happens. If someone wants to host the www.againsttheshadow.org domain and point it to the new domain, I would be happy to try, this would mean we would have a new address but the old one would be routed, sshagent, given your mail (which I didn't reply because I was waiting a reply from my host) you could see about hosting AtS.org for us?

It seems the problem we have is nothing more than a reflection of the spammers action, we are being targeted without even being targeted... ohwell
Logged
castellan
Lightbearer
*

Spell Energy / Taint +0/-0
Gender: Male
Posts: 51


« Reply #15 on: February 12, 2008, 11:46:24 PM »

You know, the really pathetic thing is that if the service provider knew what they were doing, they could reject all of that email and their servers wouldn't be overloaded.

Sounds to me like moving is a good idea -- maybe you'll find a provider who knows more about internet technologies.
Logged
Nifelhein
Administrator
*****

Spell Energy / Taint +22/-0
Gender: Male
Posts: 2,117


Whisper's Will


« Reply #16 on: February 13, 2008, 03:16:47 AM »

castellan, the amount of mail makes the simple action of rejecting enough to crash the server, see, the problem?
Logged
castellan
Lightbearer
*

Spell Energy / Taint +0/-0
Gender: Male
Posts: 51


« Reply #17 on: February 13, 2008, 10:42:24 AM »

It still seems strange, if you ask me. In my IT positions, I've run into similar issues with email spoofing, but rejecting the bouncebacks was not that hard, even on an aging Windows server with too little RAM.

Obviously, I don't know the ISP's setup, but SpamAssassin and Amavis aren't heavyweights when it comes to system resources. Hence, my suspicion about competency.

Not to worry, though. I'm with you in keeping the site going. It's a must!!!
Logged
Nifelhein
Administrator
*****

Spell Energy / Taint +22/-0
Gender: Male
Posts: 2,117


Whisper's Will


« Reply #18 on: February 13, 2008, 12:16:42 PM »

Hmm, I will run this by my host and hear what they say.
Logged
Nifelhein
Administrator
*****

Spell Energy / Taint +22/-0
Gender: Male
Posts: 2,117


Whisper's Will


« Reply #19 on: February 17, 2008, 09:39:48 AM »

Quote
The server does reject mail from your domain. However, when mail comes
in at 12,000 messages per hour, the server can't reject them as fast
as it is receiving them.

It seems to be a really large volume... shock
Logged
VagrantWhisper
Heepa-Heepa


Spell Energy / Taint +0/-1
Gender: Male
Posts: 42


« Reply #20 on: February 19, 2008, 12:28:30 AM »

wow ...

The mail server(s) I'm in charge of at the office process 86000 emails a week, and I thought that was a lot.

I was going to echo Castellan that in my experience people who claim filtering is too difficult are generally incompetent, but the resources to filter that many emails an hour is likely going above and beyond what an average ISP is making from a client, so I can't really blame the IT guys for wanting to clean their hands of it.

Still;  I haven't quite wrapped my head around why email problems have them terminating your web-hosting contract - the two are very distinct service offerings and one should not impact the other.

Logged
Nifelhein
Administrator
*****

Spell Energy / Taint +22/-0
Gender: Male
Posts: 2,117


Whisper's Will


« Reply #21 on: February 19, 2008, 04:31:30 AM »

Note, this is a shared server as well. I for one have two sites hosted on the same account, they terminated my account because
the server crashed, then they merely asked me to remove that domain from their nameservers. I can still go to a new host, but with that number of spoofed mail being routed "back" the odds are I will still have problems...
Logged
Nifelhein
Administrator
*****

Spell Energy / Taint +22/-0
Gender: Male
Posts: 2,117


Whisper's Will


« Reply #22 on: February 20, 2008, 06:32:29 AM »

So, technical guys, what do you say? new host? New domain? I would like to hear your thoughts before making a decision.
Logged
Dain
Insurgent Commander
***

Spell Energy / Taint +17/-2
Gender: Male
Posts: 318



« Reply #23 on: February 20, 2008, 04:53:34 PM »

Hi guys,

Well, let's mathematically think about the problem and the solution you already have found.

- Spoofed mails have crashed the server and your host asked you to backup the database and all the stuff
- You did it and uploaded everything in this temporary adress
- Did spoofed mails continued to crash the server on this temporary adress? It's seems not.

So then, it appears that the old domain was the only target and, since Domains are not letters but IP adresses, we can guess that "againsttheshadow.org" is completely different from "againsttheshadow.net" as much possible it can be. And we shouldn't expect spoofed mails with a brand new domain.

Regarding this, ordering the new domain "againsttheshadow.net" should be the best solution and will not bug members a lot, as long as the site is still available.
Domains costs are very cheap at the moment, so then if I were you (and I'm not Tongue ) i will run on this Wink

Just my opinion, anyway Wink
Logged
VagrantWhisper
Heepa-Heepa


Spell Energy / Taint +0/-1
Gender: Male
Posts: 42


« Reply #24 on: February 20, 2008, 08:00:31 PM »

So, technical guys, what do you say? new host? New domain? I would like to hear your thoughts before making a decision.

Personally, if the host is good to you in general, there's no reason to change.

I'd register a new domain, and then if possible also have againsttheshadow.org's A (alias records; or rather the www.; ftp; etc part that people type) record redirected to the new site so that when folks contine to type that address into their browser or find it in old forum posts they can still access the new site.

Now having said that, i'd make sure that your host can redirect A records *without* having to redirect the corresponding MX Record (aka as Mail Exchange Record) ... otherwise the mail problem will follow you. If they can do that, you should be good.  I'd even have them redirect the old mail record to some non-existent IP or something.

If none of that made sense, let me know...
Logged
Pages: [1] 2
Send this topic Print
Against the Shadow  |  Forum  |  Midnight & RPGs  |  News (Moderators: Kane, Bleak Knight, Glacialis)  |  Topic: Temporary Address
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.21 | SMF © 2015, Simple Machines
AtS Dark Mercury design by Nifelhein, based on the Mercury theme by Bloc
Valid XHTML 1.0! Valid CSS!
Page created in 0.115 seconds with 73 queries.
TinyPortal © 2005-2011