The Linaro git appear to be getting some very suspicious traffic on our git protocol port. Its causing our servers to fail and effectively DOS us. We are currently trying to block offending IPs. However, the number of malicious IPs is growing and we may have to shut off the git protocol daemon on our servers while we find a way to prevent this.
If you are using the "smart" protocol, https://git.linaro.org/.... you will not be affected. If you aren't using the smart protocol, it might be a good time to consider updating your .git/config files.
-andy
On 14 September 2016 at 15:33, Andy Doan andy.doan@linaro.org wrote:
The Linaro git appear to be getting some very suspicious traffic on our git protocol port. Its causing our servers to fail and effectively DOS us. We are currently trying to block offending IPs. However, the number of malicious IPs is growing and we may have to shut off the git protocol daemon on our servers while we find a way to prevent this.
If you are using the "smart" protocol, https://git.linaro.org/.... you will not be affected. If you aren't using the smart protocol, it might be a good time to consider updating your .git/config files.
I guess the DOS explains the permission denied I was getting on https and
ssh ports earlier then.
Graeme
Hi Andy,
This will affect our old releases where manifests use git protocol to pull the code.
Regards, Vishal
On 14 September 2016 at 20:11, G Gregory graeme.gregory@linaro.org wrote:
On 14 September 2016 at 15:33, Andy Doan andy.doan@linaro.org wrote:
The Linaro git appear to be getting some very suspicious traffic on our git protocol port. Its causing our servers to fail and effectively DOS us. We are currently trying to block offending IPs. However, the number of malicious IPs is growing and we may have to shut off the git protocol daemon on our servers while we find a way to prevent this.
If you are using the "smart" protocol, https://git.linaro.org/.... you will not be affected. If you aren't using the smart protocol, it might be a good time to consider updating your .git/config files.
I guess the DOS explains the permission denied I was getting on https and
ssh ports earlier then.
Graeme
linaro-dev mailing list linaro-dev@lists.linaro.org https://lists.linaro.org/mailman/listinfo/linaro-dev
On 14 Sep 2016, at 17:26, Andy Doan andy.doan@linaro.org wrote:
On 09/14/2016 11:03 AM, Vishal Bhoj wrote:
Hi Andy,
This will affect our old releases where manifests use git protocol to pull the code.
We are currently just blocking on offending IPs and monitoring the situation.
This explains a host of Lab problems yesterday afternoon.
Dave
-
Andy Doan -
Dave Pigott -
G Gregory -
Vishal Bhoj