Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 154396 - emerge cups causes Denial of Service attack
Summary: emerge cups causes Denial of Service attack
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Printing (show other bugs)
Hardware: All Linux
: Highest critical (vote)
Assignee: Printing Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2006-11-07 12:34 UTC by Michael R Sweet
Modified: 2006-11-18 03:10 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michael R Sweet 2006-11-07 12:34:37 UTC
Hi,

We are weathering another CUPS download storm right now.  Our local link (a measly T-1, which is all we can get where we are) was completely saturated today as Gentoo users all over the world downloaded the latest CUPS release to upgrade. I have disabled the local server temporarily...

I kindly ask that you remove all references to ftp.easysw.com from your package descriptions. We have no problem with you mirroring our source releases on your own servers, but please don't take us down with you!

Thanks!
Comment 1 Stefan Schweizer (RETIRED) gentoo-dev 2006-11-07 14:58:49 UTC
Hi, I have of course immediately changed that. Afaik you have also other mirrors you control yourself - is any of that able to handle the Gentoo load? Also I can recommend you to put it up on sourceforge/berlios for mirroring. I would love to have an upstream-fed source in the ebuild to allow easy conversion to new versions for users even when I am lazy as the maintainer.
Comment 2 Michael R Sweet 2006-11-07 18:41:40 UTC
At the moment, I'm not listed on the "CUPS" project on SourceForge, so I can't add the CUPS releases there...  Historically we've had reliability problems with SF, which is why (until recently) we had our own colo'd server on a 100Mbit link (which still wasn't enough bandwidth for Gentoo users, BTW...) to act as the primary download server...

I've asked Till to add me as a file release developer for the SF CUPS project; we'll at least be able to put the files up there.  I've also received several offers to mirror for us; hopefully I'll be able to provide you with a list of mirrors to use soon...
Comment 3 Stefan Schweizer (RETIRED) gentoo-dev 2006-11-18 03:10:41 UTC
I am now with 1.2.7 using your german tu-bs mirror that has enough bandwidth available. Thanks for reporting!