[OSGeo] #3487: wiki.osgeo.org seems to be having problems

Committees SAC tickets
1

#3487: wiki.osgeo.org seems to be having problems
----------------------+---------------------------
Reporter: robe | Owner: sac-tickets@…
     Type: task | Status: new
Priority: normal | Milestone: Unplanned
Component: SysAdmin | Keywords:
----------------------+---------------------------
Seems to be having database issues.
--
Ticket URL: <Making sure you're not a bot!;
OSGeo <Gter - OSGeo;
OSGeo committee and general foundation issue tracker.

2

#3487: wiki.osgeo.org seems to be having problems
----------------------+----------------------------
Reporter: robe | Owner: sac-tickets@…
     Type: task | Status: new
Priority: normal | Milestone: Unplanned
Component: SysAdmin | Resolution:
Keywords: |
----------------------+----------------------------
Comment (by robe):

This seems similar to what was happening to grasswiki a couple of weeks
ago.
--
Ticket URL: <Making sure you're not a bot!;
OSGeo <Gter - OSGeo;
OSGeo committee and general foundation issue tracker.

3

#3487: wiki.osgeo.org seems to be having problems
----------------------+----------------------------
Reporter: robe | Owner: sac-tickets@…
     Type: task | Status: new
Priority: normal | Milestone: Unplanned
Component: SysAdmin | Resolution:
Keywords: |
----------------------+----------------------------
Comment (by neteler):

For now, due to lack of time, I have blocked a few botnet IP ranges.
Seems to help.
--
Ticket URL: <Making sure you're not a bot!;
OSGeo <Gter - OSGeo;
OSGeo committee and general foundation issue tracker.

4

#3487: wiki.osgeo.org seems to be having problems
----------------------+----------------------------
Reporter: robe | Owner: sac-tickets@…
     Type: task | Status: new
Priority: normal | Milestone: Unplanned
Component: SysAdmin | Resolution:
Keywords: |
----------------------+----------------------------
Comment (by neteler):

Ok, that was not enough. Now I have put fail2ban in place.

Status after only a few minutes:

{{{
root@wiki:/home/neteler# fail2ban-client status mediawiki-ddos
Status for the jail: mediawiki-ddos
|- Filter
| |- Currently failed: 74
| |- Total failed: 97
| `- File list: /var/log/apache2/access.log
/var/log/apache2/other_vhosts_access.log /var/log/apache2/wiki_access.log
`- Actions
    |- Currently banned: 40
    |- Total banned: 40
    `- Banned IP list: 47.[...]
}}}

Let's see how it evolves in the next 12hs.
--
Ticket URL: <Making sure you're not a bot!;
OSGeo <Gter - OSGeo;
OSGeo committee and general foundation issue tracker.

5

#3487: wiki.osgeo.org seems to be having problems
----------------------+----------------------------
Reporter: robe | Owner: sac-tickets@…
     Type: task | Status: new
Priority: normal | Milestone: Unplanned
Component: SysAdmin | Resolution:
Keywords: |
----------------------+----------------------------
Comment (by neteler):

As of today, more IPs have been banned and the Wiki seems to be okay'ish
again:

{{{
root@wiki:/home/neteler# fail2ban-client status mediawiki-ddos
Status for the jail: mediawiki-ddos
|- Filter
| |- Currently failed: 264
| |- Total failed: 12301
| `- File list: /var/log/apache2/access.log
/var/log/apache2/other_vhosts_access.log /var/log/apache2/wiki_access.log
`- Actions
    |- Currently banned: 67
    |- Total banned: 106
    `- Banned IP list: 47.[...]
}}}

Moving this fail2ban setup to ansible will be a good idea.
--
Ticket URL: <Making sure you're not a bot!;
OSGeo <Gter - OSGeo;
OSGeo committee and general foundation issue tracker.

6

#3487: wiki.osgeo.org seems to be having problems
----------------------+----------------------------
Reporter: robe | Owner: sac-tickets@…
     Type: task | Status: new
Priority: normal | Milestone: Unplanned
Component: SysAdmin | Resolution:
Keywords: |
----------------------+----------------------------
Comment (by robe):

Thanks @neteler.

I'll leave it to @strk to put into ansible.
--
Ticket URL: <Making sure you're not a bot!;
OSGeo <Gter - OSGeo;
OSGeo committee and general foundation issue tracker.

7

#3487: wiki.osgeo.org seems to be having problems
----------------------+----------------------------
Reporter: robe | Owner: sac-tickets@…
     Type: task | Status: closed
Priority: normal | Milestone: Unplanned
Component: SysAdmin | Resolution: fixed
Keywords: |
----------------------+----------------------------
Changes (by neteler):

* resolution: => fixed
* status: new => closed

Comment:

I can offer (off-trac) the instructions.

Since the wiki is back accessible, I close this ticket.
--
Ticket URL: <Making sure you're not a bot!;
OSGeo <Gter - OSGeo;
OSGeo committee and general foundation issue tracker.