Bug 41261

Comment 1 Murray Stokely 2002-08-02 15:36:20 UTC

FYI, the CGI was being used as part of a DoS attack against freefall
so Warner disabled it.  I do not have any further details, nor do I
know where we need to go from here.  Warner?

     - Murray

On Fri, Aug 02, 2002 at 05:47:25AM -0700, Brian Candler wrote:
> 
> >Number:         41261
> >Category:       www
> >Synopsis:       PR query engine returns no results
> >Confidential:   no
> >Severity:       serious
> >Priority:       high
> >Responsible:    freebsd-www
> >State:          open
> >Quarter:        
> >Keywords:       
> >Date-Required:
> >Class:          sw-bug
> >Submitter-Id:   current-users
> >Arrival-Date:   Fri Aug 02 05:50:01 PDT 2002
> >Closed-Date:
> >Last-Modified:
> >Originator:     Brian Candler
> >Release:        Not applicable
> >Organization:
> >Environment:
> >Description:
> PR search page at
> http://www.FreeBSD.org/cgi/query-pr-summary.cgi?query
> 
> does not seem to generate any answers. (e.g. enter just "kernel" in
> the single-line field, click on "closed reports too", and search. You
> get no results. I think that's unlikely to be correct :-)
> 
> Secondary problem: the "Category", "Class" and "State" drop-down menus
> only provide "Any" as an option, no other value can be selected.
> 
> This page _is_ linked from the main website; from www.freebsd.org click
> "View Open Reports" then "Formulate a specific query"
> >How-To-Repeat:
>       
> >Fix:
>       
> >Release-Note:
> >Audit-Trail:
> >Unformatted:
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-www" in the body of the message

In message: <20020802073620.I26495@freebsdmall.com>
            Murray Stokely <murray@FreeBSD.org> writes:
: FYI, the CGI was being used as part of a DoS attack against freefall
: so Warner disabled it.  I do not have any further details, nor do I
: know where we need to go from here.  Warner?

Last night Freefall was unusable.  There were 8400 requests for the
entire gnats database coming from one location.  There were dozens of
query-pr processes and freefall was not usable.  To mitigate this, I
chmod -x query-pr.  If the attack is over, I suppose we can turn it
back on, but it would be nice to rate limit these things in the
future or something.

Warner

Comment 3 Tom Rhodes 2002-08-07 04:43:25 UTC

State Changed
From-To: open->closed

This was recently fixed.  Thanks.