|
Grex > Coop11 > #47: Banning a site from Grex; a discussion of when to do this | |
|
| Author |
Message |
| 25 new of 264 responses total. |
jerome
|
|
response 170 of 264:
|
Dec 15 05:41 UTC 1998 |
(Yeah, E1 runs at 2.048e+6 bps [2M or 2.048M depending on how you want to
state it], 32 channels at 64kbps each)
Around 10:00 or 11:00 PM tonight the system had load averages around 77 again.
Was this a fork bomb from the same site?
|
steve
|
|
response 171 of 264:
|
Dec 15 11:57 UTC 1998 |
No--it was a fork bomb from a different country. ;-)
|
atticus
|
|
response 172 of 264:
|
Dec 15 13:58 UTC 1998 |
(E1 is the standard in India. BTW, in E1 (and I guess in T1 too),
channel 0 cannot be used as a data path -- it carries the framing
information. Hence, the effective bandwidth of a T1 will be 23 * DS0)
|
scg
|
|
response 173 of 264:
|
Dec 15 23:25 UTC 1998 |
That's not usually true.
Point to point data T1s (in the US anyway; I don't know about in India) are
generally sold as "clear channel" T1s. In that case, all 24 channels are
provisioned to carry 64K each of data. You can also get a fractional T1, with
any number of channels less than 24, again with all channels used for data.
You can also get T1s provisioned for 56K per channel, generally using
robbed-bit signaling, where it uses one bit per channel per signaling, but
still has 24 56K channels, or you can get PRI lines which are a T1 with 23
ISDN bearer channels for data, and one ISDN D channel for signalling. That
may be what Sreeni is thinking of.
Anyhow, that's all really off topic for this item.
|
rtg
|
|
response 174 of 264:
|
Dec 16 06:01 UTC 1998 |
spiff:
I'm glad you jumped in here and joined the discussion. I believe in an
early response to this item, someone bemoaned the fact that while we had
over 1000 users who regularly came in from that IP address, we knew of
none who were regular bbs users, and who might be able to participate in
the discussion about what might be appropriate action. Have you been in
the conferences before? Please pardon me, if I've failed to notice your
ID on other posts. Or were you directed here by the MOTD? This item was
specifically mentioned in the MOTD, in the hopes that some users from that
site would find an alternative gateway, and would be willing to help us
brainstorm a way to protect our system, so that we can continue to provide
the maximum service to the most people, within the limited budget we can
muster.
I'd rather not continue to re-hash the past, and I would prefer to work
together to prevent further abuse of the services we provide. The
thousands of IIT students that make legitimate use of our e-mail, party,
and lynx services are as important a part of our user community as anyone.
We want these services to be available to everyone.
Are you willing to help protect these services, for yourself as well as
the 26,000 other legitimate users all over the world? Do you have
personal contact with the people who administer the gateway? Might you be
able to influence them to implement a logging system, so that users of the
gateway may be traced back to their source, should an incident like this
occur again?
|
steve
|
|
response 175 of 264:
|
Dec 16 06:18 UTC 1998 |
We're already in contact with the proper people at IIT; they're
working on it now.
|
keesan
|
|
response 176 of 264:
|
Dec 28 03:50 UTC 1998 |
This was really informative, imagine over a quarter of the students at one
Indian university (all the freshmen?) using grex for email! I am starting
to get some idea of why chatting with India can be so slow, and why some
people tell me they can only communicate by email instead.
What percentage of Indian's go to college? It is probably much higher here,
where 5000 is a small college. But in India 500,000 is, I was told, a 'small
village'. I have found all Indians requesting to chat with me to be highly
intelligent and almost all of them exceptionally polite, too bad there have
been a few exceptions.
Is the IIT reconnected with grex? I have not been getting any chat
requests for a few weeks, but maybe that is due to the long vacation.
(By few exceptions I did not mean people requesting chats, but the fork
bombers).
|
steve
|
|
response 177 of 264:
|
Dec 28 04:16 UTC 1998 |
The ban is still in effect; when the holidays are over I hope to
be able to report better news on this front.
Links to India cost money and the size of those links are small.
Often an institution will have a 64K link (Grex has a 128K link) for
the entire enterprise, which means that the pipe is always completely
saturated.
|
mary
|
|
response 178 of 264:
|
Dec 28 11:09 UTC 1998 |
So, after we lifted the ban we had further instances of the
same vandalism from that same site? I was under the impression
the site was going to remain open unless problems continued.
|
steve
|
|
response 179 of 264:
|
Dec 28 12:49 UTC 1998 |
The ban this time isn't from us, but the administrators at IIT.
During the brief time that access was allowed again, there wern't
any problems, but then poof, no more iit accounts--by order of
higher authorities there.
|
mary
|
|
response 180 of 264:
|
Dec 28 21:47 UTC 1998 |
Yuck.
|
keesan
|
|
response 181 of 264:
|
Dec 28 21:51 UTC 1998 |
Seems like the proper fix for much of this is to allow freshmen email accounts
at their own university. Free ones. What would this actually cost the
university there?
|
steve
|
|
response 182 of 264:
|
Dec 28 22:54 UTC 1998 |
They already have free email. They've had it for a long time.
But its so slow compared to "fast" systems like Grex that they've
flocked en mass to us.
|
steve
|
|
response 183 of 264:
|
Dec 31 19:30 UTC 1998 |
We have a new problem with regard to the the block of IIT-kgp
users.
We now have less than 2.5M free on /var/spool/mail, where mail is
deposited when Grex receives mail. We had even less than that a few
minutes ago but I did a couple things to give us a little more space
which means we have a little more time before we're *out*.
There are two staff mailboxes that are far larger than others, but
in the grand scheme of things, they don't matter. We normally have
about 50 - 70M available on this partition, but with the IIT users
having mail piling up that space is just about completely gone.
So the question is, what do we do?
Unforunately at the rate we're using up disk--far faster than
I had thought we would--we may have to do something drastic to
keep mail service running on Grex.
Ideas that come to mind are
- Start zapping IIT accounts that are at the 1M limit. There are
several there right now. Disgusting, but would give us space.
Option B would be to just zap the mailboxes, and let mail for
these accounts start piling up again.
- Start moving full mailboxes to their owners home directories.
Much nicer, but places the strain on the /a and /c partitions
and will fill them up before long.
Longer term, we have the 1.7G disk that is on the old Sun-4/260
that we decided to bring over here, which will give us some more
breathing room. Unforunately that takes a little time to do and
demands physical presence at the Pumpkin, and this isn't a great
time for that. Maybe on the weekend.
|
albaugh
|
|
response 184 of 264:
|
Dec 31 21:39 UTC 1998 |
Compress the "large" mailboxes and place them in the users' home directories.
|
rcurl
|
|
response 185 of 264:
|
Dec 31 21:58 UTC 1998 |
What's wrong with enforcing the space limits, after warning the owners?
|
scott
|
|
response 186 of 264:
|
Dec 31 22:51 UTC 1998 |
Our space limits assume that not all users will use up their allowed space.
|
tsty
|
|
response 187 of 264:
|
Dec 31 23:17 UTC 1998 |
what about forwarding to those iit accounts where the accounts *listed*
an alternate email address? i realize that wouiod take a buncha iindividuya
...individual work on the part of staff, however for the sake of keeping
our reputation (nad making it better) as well as not cutting off *cold*
the accoounts that were here . (yeh, *we* didn;t cut the accounts, iit did
the cutting of access) ... we would be providing a tail-end service
in *favor* of smoothing hteir transitin rather than truncating it.
another alternative would be for us to inform iit that their users could
be allowed to receive email on their 'slow' machine *IFF* the are allowed
to log back in here for a 'special consideratin from iit' and specifically
identify the address to which each grex account should be sent. that way each
grex account would maintain its privacy (logging back in here w/passwd), and
the (relative) assurance that a forward-to account would be under the control
of the grex loginid.
in the meantime, gzip the mail files - perhaps into a special partition -
to keep them somewhere.
i hereby volunteer to do this work - it aint hard, it just takes some
time, which i have to volunteer to grex.,
i believe this also would, by example, show iit and their/our users that
we/grex are more than usually compasionate and helpful.
getting truncated from email is NotNiceAtAll (tm).
|
steve
|
|
response 188 of 264:
|
Jan 1 01:56 UTC 1999 |
We can't reasonably put compressed mail in folks home dirs, as we
don't have enough space in /a and /c right now. Remember, these mailboxes
are filling up, through no fault of their owners. They can't get to us
to look at the mail.
Only a few people list other email addressed; those that did and have
given an indian address (ending in .in) would be likely horrified to find
that we were trying to send them their mail. Remember, IIT kgp has a 64K
link for mail (and everything else) to the outside world. We'd clog the
link up completely doing this. Until them mail cleared their sendmail,
it would be sitting here. So that option doesn't work very well.
|
mdw
|
|
response 189 of 264:
|
Jan 1 08:56 UTC 1999 |
Chances are a lot of these people have subscribed to "very active"
mailing lists. MicroSoft, ziff-davis, and several other commercial
places seem to have some big collections of these things. There are
also some *very* active indian mailing lists.
|
mary
|
|
response 190 of 264:
|
Jan 1 14:45 UTC 1999 |
STeve, would you suspect the administrators at this site have
blocked students from accessing it as a clean and easy solution
to a problem? Because they were frustrated with the more than
110 (and counting) pieces of mail you sent? Because
such access is simply not allowed out of India?
|
keesan
|
|
response 191 of 264:
|
Jan 1 18:33 UTC 1999 |
My south Indian email pal says that Indians watch a lot of American movies
in which the women all talk dirty, and so expect all American women to be
interested in hot chats. They may be trying to act modern., or as they think
they are expected to act. It is hard to know what to believe from movies.
|
steve
|
|
response 192 of 264:
|
Jan 1 20:29 UTC 1999 |
Mary, I suspect that the administrators there wern't at all familiar
with what their students were doing on the net, and were genuinely
horrified at the idea of the vandalous activites that occured on Grex.
I received a statement that said they wanted to talk to the student body
before opening access back up. Given that this whole thing blew up at
just about the worst possible time because of vacations and all, I can
see them in a beauracritic wait-loop 'till all the right people are
present before they can continue. Such is the ways of most colleges
(regardless of where they are).
If it is the case that this really is a "clean and simple" solution,
they'll find out it won't be, because I will personally lodge letters
explaining this situation to the farther up people in IIT. But I don't
think that will ever be needed. By Monday I expect the wheels to start
moving on this again. I'm going to do that which I can to ensure this.
I still feel very badly about this entire situation.
|
dpc
|
|
response 193 of 264:
|
Jan 2 17:53 UTC 1999 |
<sigh> The trouble with cats is that they have kittens. I support
everything you've done here, steve. I had no idea that the IIT folks
would be receiving so much mail that it would be clogging our disk.
|
steve
|
|
response 194 of 264:
|
Jan 2 18:18 UTC 1999 |
Well, we are talking of some 900 users.
However, the current mail situation may not be as IIT specific
as I first thought. I've taken some few IIT mailboxes and have
compressed them and found a place to store them for the time being.
Unforunately, the size of mailboxes has grown in general.
|