RWO site issues, disruptions, suggestions, announcements

[Danzar]

Ok, we are back up.

All software upgraded
Databases rebuilt and optimised
SSL certificate fixed (that thing which kept saying the site was unsecured).

Note that if it goes down again in the next hour or two, that is deliberate, and it will be brief, so check back in a few minutes later. Want to make sure everything is sorted out before the game.

[Auntie.Gerald]

Mate u are legend

Very much appreciated

Danzar I am very happy to contribute if u would like to PM ur details I will DD today.

Thanks again for all ur hard work behind the scenes.

[Danzar]

Much improved

Testing for errors.

[Danzar]

Pliny the younger

Testing again. Hello!

[Blue Sun]

That’s awesome! Thanks Danzar ????

[Danzar]

Testy McTestface

[Blood Fever]

Mate u are legend

Very much appreciated

Danzar I am very happy to contribute if u would like to PM ur details I will DD today.

Thanks again for all ur hard work behind the scenes.

+1

[Mel_C]

Thanks Danzar. I was worried last night when I couldn't get on for hours. We need this site during game day!

[Thunder Shaker]

Well done on the upgrade.

I've noticed that "Reply with quote" still seems to be problematic. When clicked below a message, sometimes the server doesn't send a response and the webpage just shows an hourglass mouse pointer and a spinny thing next to the link.

[Danzar]

Thanks TS, let me know if there are other issues.

I noticed you can't post with animated emojies?

Any issues, please post here, whether they be new or long-standing ones. Thanks

[Danzar]

One thing I'm keeping an eye on are the number of 'guest' users flooding the site. It could be causing some of the server crashes. 13,000 yesterday. 5k now, when it was 1,500 two hours ago.

[Thunder Shaker]

One thing I'm keeping an eye on are the number of 'guest' users flooding the site. It could be causing some of the server crashes. 13,000 yesterday. 5k now, when it was 1,500 two hours ago.

The old version of vBulletin had some critical security vulnerabilities such as CVE-2019-16759 (remote code execution without authentication). It is possible that the high number of "guest" accounts are attempting to exploit this flaw, and RWO was a target due to having outdated software that was known to be vulnerable to exploits. It is possible that the frequent crashes were caused by this.

RWO is now updated, but there may be high amounts of potentially malicious guest users for a while. I suggest blocking guest access temporarily (a week or two) to see if that helps.

[Danzar]

The old version of vBulletin had some critical security vulnerabilities such as CVE-2019-16759 (remote code execution without authentication). It is possible that the high number of "guest" accounts are attempting to exploit this flaw, and RWO was a target due to having outdated software that was known to be vulnerable to exploits. It is possible that the frequent crashes were caused by this.

RWO is now updated, but there may be high amounts of potentially malicious guest users for a while. I suggest blocking guest access temporarily (a week or two) to see if that helps.

Found the culprit - 6 million requests from Hong Kong, chewing up a heap of bandwith. I just added a Javascript challenge for HK IPs and now the guest users active here are dropping off rapidly.

[liz]

Found the culprit - 6 million requests from Hong Kong, chewing up a heap of bandwith. I just added a Javascript challenge for HK IPs and now the guest users active here are dropping off rapidly.

There were times when I wondered if there was malicious activity involved in our problems. There were strange patterns, whereby we'd sometimes get four or five days of good behaviour, and then the recurrent problems would start again.

[Danzar]

There were times when I wondered if there was malicious activity involved in our problems. There were strange patterns, whereby we'd sometimes get four or five days of good behaviour, and then the recurrent problems would start again.

Yes I've wondered that often

Sent from my SM-S9180 using Tapatalk