libera/#devuan-dev/ Tuesday, 2019-09-24

golinuxHere's the new release page https://beta.devuan.org/os/releases if anyone is interested.  Thanks to mason for his excellent input.04:15
Jjp137the link on the bottom that says "source list information" leads to a 40404:20
plasma41Jjp137: I see what the problem is. /os/ in the url is repeated when it shouldn't be.04:25
plasma41golinux: ^^^04:26
golinuxThanks.  I'll go fix that now.04:56
golinuxThanks for catching it.04:57
golinuxFixed05:02
golinuxHere's the new Free Software page for review https://beta.devuan.org/os/free-software08:01
onefangjaromil: my mirror has been getting a botnet attacking my IMAP server for some time as well.  I wonder if any more of us are getting that?14:39
masononefang: I run an aggressive fail2ban here. I'd recommend it.14:40
onefangAlas after I updated to ASCII, fail2ban failed to ban.  It used to work fine.  Now I manually copy IPs into shorewall.14:41
masononefang: Ah, it's the Debian package. Debian ships a bug.14:41
onefangI should go upstream, or a PPA somewhere?14:42
masononefang: Ubuntu fixes it. Half a sec and I'll find the bug. It's an easy config fix.14:42
masonNah, one-line config fix.14:42
onefangCool.14:42
masonI just need to find it. Half a sec.14:42
masononefang: IIRC, it's this: https://github.com/fail2ban/fail2ban/pull/1812/files14:45
jaromilonefang: ACK14:45
jaromilmason: we have fail2ban as well, perhaps not aggressive enough14:46
masonjaromil: I pushed it to "block after a single fail" which is likely more aggressive than most folks would want.14:46
jaromilyes that would cause us some problems14:46
jaromilgolinux: sorry for not letting you know earlier. is a hell of a week14:47
onefangThere's only one user of my IMAP server, me, and I use fetchmail to access it.  Block after single fail will work fine for me.14:47
masonjaromil, onefang: It's also possible to do user certs for IMAP. E.g. https://blog.mortis.eu/blog/2017/06/dovecot-and-postfix-with-client-cert-auth.html14:47
onefangI wonder if Courier can do that?14:47
masononefang: If it's just you, knockd might also be an answer.14:47
masonHm, don't know. I used to use Courier but I switched over some years ago.14:48
onefangI use courier coz it does the lot.14:48
masonjaromil: FWIW, I'm receiving devuan-dev email again today, so at least SpamCop has cleared Dyne.14:48
jaromilyes only spamhaus is left, until tomorrow, that I know of14:52
masonjaromil: Hm, I use zen.spamhaus.org, and they're letting you through.14:52
jaromilok then is some other, can't check now, but is quite terrible as is preventing me to confirm attendance to an academic award gala dinner in hannover, damn. I hope this thing won't cost me a dinner!!14:54
masonI had to go through remediation once and it was incredibly tedious.14:54
masonI think SORBS still lists me, but that's more a badge of honor than an impediment.14:55
jaromilit wasn't too hard once I had a dossier of the incident ready to send14:56
masonThe tedious part was realizing how many different RBLs exist. :)14:57
masonI had no idea before that.14:58
xinomilomail.dyne.org seems clean in all blacklists14:58
onefangOK, now I await some random spammer to fall into my web.  Muahahaha!14:59
masonhah15:00
xinomiloworld's biggest spammers are eternally whitelisted.. (gmail,yahoo,hotmail/live)15:03

Generated by irclog2html.py 2.17.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!