Saturday, August 21, 2004

Back from the ashes

We're back up.

Note that moderator email accounts are still down, but I'll fix that tomorrow.

Thanks for hanging in there, folks, and the kind, supportive words you posted here are much appreciated.

The non-TalkaboutUSA.com web sites I host will be up soonish too. By the end of tomorrow we should have everything more or less restored.

Any oddities, send me email at: hubert AT talkaboutusa.com

Fables of the Reconstruction

And so it begins.

I've been working for awhile today getting things back up. It goes well, but slowly. But I think maybe tonight we'll be on the air again. Worst case, tomorrow.

Thanks again for your patience.

Friday, August 20, 2004

TalkaboutUSA.com Propagation

If you came to this site via the temporary TalkaboutUSA.com placeholder page, please pipe up. It seems like we're getting very unlucky with DNS propagation. Though I do think almost everyone should be redirected to the new host by the end of the weekend.

The restore/rebuild/update process begins in earnest tomorrow. It is confirmed that we'll be rebuilding from an August 14th backup due to our old host being uncooperative. Sorry about that. You don't know how much it upsets me, but we'll marshall on.

Thursday, August 19, 2004

Tonight's progress

I've been begging and pleading our old host to send me a backup more current than the 14th, but they've been giving me the cold shoulder, as if I some how have arranged to have my own site targeted for a DoS attack.

We'll see though. I'm hoping they'll come through for us one last time.

Other than that, you won't see much tonight, or probably tomorrow either. But I'll keep everyone informed.

TalkaboutUSA.com will be back soon for sure (and all my other domains/blogs/nonsense).

The good news is Leo's site (y'know, the forum mascot) was on another host, and has been up without a problem! Too bad it is so out of date...

DoS (Denial of Service) attack

What is a DoS attack, you ask? From the Symantec Security Response web site:
A Denial of Service (DoS) attack is not a virus but a method hackers use to prevent or deny legitimate users access to a computer.

DoS attacks are typically executed using DoS tools that send many request packets to a targeted Internet server (usually Web, FTP, or Mail server), which floods the server's resources, making the system unusable. Any system that is connected to the Internet and is equipped with TCP-based network services is subject to attack.

For example, imagine a hacker creates a program that calls a local pizza store. The pizza store answers the telephone, but learns that it is a prank call. If the program repeats this task continuously, it prevents legitimate customers from ordering pizza because the telephone line is busy. This is a denial of service, and analogous to a DoS attack.

Many DoS attack tools are capable of executing a distributed DoS attack. For example, imagine the hacker secretly plants his program onto many computers on the Internet. This would have a bigger impact because there would be more computers calling the same pizza store. It would also be more difficult to locate the attacker, since the program is not running from the attacker's computer; the attacker is only controlling the computer that secretly had the program installed. This is an analogy for a Distributed DoS (DDoS) attack.

DoS tools such as TFN, TFN2K, and Trinoo are distributed DoS attack tools. The DoS attack tools can be secretly installed onto a large number of innocent systems that can be centrally managed by a hacker to initiate DoS attacks at targeted computers. Systems that unknowingly have DoS attack tools installed are called Zombie agents or Drones.

The methods of how and what resources are flooded differ based on the DoS tools used. For example, Smurf DoS attack uses a forged ICMP (Internet Control Message Protocol) echo request. Other DoS tools, like the TFN (Tribe Flood Network) family, use the SYN flooding technique, which creates half-open connections. More detailed descriptions of several DoS tools can be found later in this document.

How to combat a DoS attack
It is difficult to trace the origin of the request packets in a DoS attack, especially if it is a distributed DoS attack. It is impossible to prevent all DoS attacks, but there are simple precautions server administrators can take to reduce the risk of being compromised by a DoS attack. For example, disabling ICMP response to protect from a Smurf-type attack or configuring a router to filter and check if an IP coming from the outside has an external IP (or vice versa) to avoid a TFN type attack.
Nice to know someone cares enough about our little forum that they feel compelled to try to bring it down.

But we'll just move to a host that runs a shop where they can deal with such things.

Move in progress

It will take up to 48 hours for Talkaboutusa.com to resolve correctly to the new host. In the meantime, I'll be trying to get everything ready.

So, don't expect much today. But at least know that we've started the process.

Wednesday, August 18, 2004

Extended Outage

We're weathering a denial of service attack right now, so this outage may be awhile.

And sadly, our current host has decided that they don't want to deal with us since we seem to draw this type of attention a little too often. So we have to deal with migrating to a new host under rather difficult circumstances. But we've got backups of all the data, so mostly we're looking at a few days of down time.

The good news is we've been getting ready to move to a new host for some time, but I never made the cutover because I wanted to get things perfect on the new host before moving. So almost everything is in place already, and perfection (mostly the way the email server is configured) can come later.

Right now the big priority is getting things back up and running.

I'll keep posting any progress here. Stay tuned.

DNS problems

For some reason, our hosts DNS isn't listing our domain... We're investigating.

Database problems

We're having some problems with the forum database, which is basically keeping everyone out.

We're working with the host to resolve this.

Update 3:05PM
The host pushed the magic reset button, and we are back to normal.

Sunday, August 01, 2004

Restoration complete

Some older posts were dropped from the topics table, and these have been restored.

It also look like no data was lost from the search tables, so that means all the data that can be recovered is back.