[SAC] http://svn.osgeo.org/ or http://trac.osgeo.org/ do not respond

thanks. although i doubt i do 60 requests per minute.

—Spatialys - Geospatial professional services
http://www.spatialys.com

-------- Message d’origine --------
De : Sandro Santilli strk@keybit.net
Date :10/05/2016 19:21 (GMT+01:00)
À : Even Rouault even.rouault@spatialys.com
Cc : sac@lists.osgeo.org
Objet : Re: [SAC] http://svn.osgeo.org/ or http://trac.osgeo.org/ do not respond

On Tue, May 10, 2016 at 06:31:53PM +0200, Even Rouault wrote:

This fail2ban mechanism seems to prevent legitimate uses. Yes, I do refresh
Trac or do svn operations a lot when working on GDAL.

I relaxed the rule to allow up to 60 requests in 60 seconds.
And, I whitelisted your static IP.

–strk;

On Tue, May 10, 2016 at 07:29:19PM +0200, Even Rouault wrote:

thanks. although i doubt i do 60 requests per minute.

You were doing 30, if fail2ban was catching you

--strk;

On Tue, May 10, 2016 at 07:31:55PM +0200, Sandro Santilli wrote:

On Tue, May 10, 2016 at 07:29:19PM +0200, Even Rouault wrote:
> thanks. although i doubt i do 60 requests per minute.

You were doing 30, if fail2ban was catching you

I further tweaked the anti-dos rule to further ignore .js and .png
hits as proj4j main page (for example) triggeret itself 13 requests...

--strk;

So, I tried to clean up old tickets but now I got kicked:

  "Maximum number of posts per hour for this IP exceeded"

Funny since my (I think) static IP was whitelisted the other day.
Time to take rest.

Markus

On Fri, May 13, 2016 at 12:27:42AM +0200, Markus Neteler wrote:

So, I tried to clean up old tickets but now I got kicked:

  "Maximum number of posts per hour for this IP exceeded"

Funny since my (I think) static IP was whitelisted the other day.

This is a new anti-DOS provision: mod_evasive for Apache.
Contrary to fail2ban this one will still respond (rather than drop
TCP packets). See details in this other mail:
https://lists.osgeo.org/pipermail/sac/2016-May/006886.html

Whitelisting _is_ available, see
https://git.osgeo.org/gogs/sac/tracsvn-apache-config/src/master/mods-available/mod-evasive.conf#L4

--strk;

On Fri, May 13, 2016 at 12:27:42AM +0200, Markus Neteler wrote:

So, I tried to clean up old tickets but now I got kicked:

  "Maximum number of posts per hour for this IP exceeded"

Funny since my (I think) static IP was whitelisted the other day.
Time to take rest.

I think this was the SpamFilterPlugin "ip_throttle" filter.
There's no "max_posts_by_ip" setting currently so it uses
a default of 10:
https://trac.edgewall.org/browser/plugins/1.0/spam-filter/tracspamfilter/filters/ip_throttle.py#L31

Do you think we should raise it ?

--strk;

On Sat, May 14, 2016 at 11:54 AM, Sandro Santilli <strk@keybit.net> wrote:

On Fri, May 13, 2016 at 12:27:42AM +0200, Markus Neteler wrote:

So, I tried to clean up old tickets but now I got kicked:

  "Maximum number of posts per hour for this IP exceeded"

Funny since my (I think) static IP was whitelisted the other day.
Time to take rest.

I think this was the SpamFilterPlugin "ip_throttle" filter.
There's no "max_posts_by_ip" setting currently so it uses
a default of 10:
https://trac.edgewall.org/browser/plugins/1.0/spam-filter/tracspamfilter/filters/ip_throttle.py#L31

Do you think we should raise it ?

For me yes :slight_smile: I will try to mass process open tickets for GRASS GIS
7.0.5 and would like to work at my usual pace, not slow down.
Any IP whitelist options there?

10 submissions per hour if definitely too low for a spring time ticket
cleanup sprint.

thanks
Markus

On Sat, May 14, 2016 at 12:06:54PM +0200, Markus Neteler wrote:

On Sat, May 14, 2016 at 11:54 AM, Sandro Santilli <strk@keybit.net> wrote:

> There's no "max_posts_by_ip" setting currently so it uses
> a default of 10:
> ip_throttle.py in plugins/1.0/spam-filter/tracspamfilter/filters – The Trac Project
>
> Do you think we should raise it ?

For me yes :slight_smile: I will try to mass process open tickets for GRASS GIS
7.0.5 and would like to work at my usual pace, not slow down.
Any IP whitelist options there?

No IP whitelist option that I can see, but I hadn't dug much.
Maybe you can look at it, and/or we could provide a patch for
the plugin (after all this is why we prefer to be using free
software, isn't it?).

10 submissions per hour if definitely too low for a spring time ticket
cleanup sprint.

I've added you to the "trac" unix group, so you should be able
to login to trac.osgeo.org and tweak /etc/trac/spamfilter.ini

--strk;

Hi,

I tried to submit the GRASS GIS mesg files (.po files) and the thing
timed out :frowning:

svn ci -m"i18N: message update from template files"
Sending po/grasslibs_ar.po
Sending po/grasslibs_cs.po
Sending po/grasslibs_de.po
Sending po/grasslibs_el.po
...
Sending po/grasswxpy_pt.po
Sending po/grasswxpy_pt_br.po
Sending po/grasswxpy_ro.po
Sending po/grasswxpy_ru.po
Sending po/grasswxpy_th.po
Sending po/grasswxpy_tr.po
Sending po/grasswxpy_vi.po
Sending po/grasswxpy_zh.po
Transmitting file data
................................................................svn:
E175012: Commit failed (details follow):
svn: E175012: Connection timed out

Suboptimal, because now I don't know if garbage was stored on the server.

Any ideas?

Markus