Rocksolid Light

Welcome to RetroBBS

mail  files  register  newsreader  groups  login

Message-ID:  

Computers are not intelligent. They only think they are.


computers / news.software.nntp / Re: DNS TTL on INN

SubjectAuthor
* DNS TTL on INNElia
+* Re: DNS TTL on INNUrs Janßen
|+- Re: DNS TTL on INNJulien ÉLIE
|`- Re: DNS TTL on INNnoel
+* Re: DNS TTL on INNRichard Kettlewell
|`- Re: DNS TTL on INNElia
`- Re: DNS TTL on INNAdam W.

1
DNS TTL on INN

<umfv9g$3lop3$1@dont-email.me>

  copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=2763&group=news.software.nntp#2763

  copy link   Newsgroups: news.software.nntp
Path: i2pn2.org!i2pn.org!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: me@elia.li (Elia)
Newsgroups: news.software.nntp
Subject: DNS TTL on INN
Date: Wed, 27 Dec 2023 02:40:01 +0100
Organization: A noiseless patient Spider
Lines: 12
Message-ID: <umfv9g$3lop3$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Wed, 27 Dec 2023 01:40:00 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="ecab0eca1f6660099b5897ec89f9a39e";
logging-data="3859235"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/D0amO8jipKSNwiVm25NXv"
User-Agent: Mozilla Thunderbird
Cancel-Lock: sha1:pYJZdSTGk9il0objafx9+4ZnJD4=
Content-Language: en-US
 by: Elia - Wed, 27 Dec 2023 01:40 UTC

Good evening,

I have recently changed the IP address of my news server, also updated
the DNS entry. Issue is, the sites I peer with seem to update the IP
address associated to the hostname, meaning that my server cannot
recieve feeds from them, nor are they pulling feeds from mine.

Does anyone have experience with that issue? Don't want to wait a few
days just to find out they have to restart INN or something in that way.

Kind Regards,
Elia

Re: DNS TTL on INN

<umgk3h$bee$1@nntp.de>

  copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=2764&group=news.software.nntp#2764

  copy link   Newsgroups: news.software.nntp
Path: i2pn2.org!i2pn.org!usenet.goja.nl.eu.org!weretis.net!feeder8.news.weretis.net!news.cgarbs.de!nntp.de!.POSTED.akk21-int.akk.kit.edu!not-for-mail
From: urs@buil.tin.org (Urs Janßen)
Newsgroups: news.software.nntp
Subject: Re: DNS TTL on INN
Date: Wed, 27 Dec 2023 07:35:13 -0000 (UTC)
Organization: tin.org
Archive: no
Message-ID: <umgk3h$bee$1@nntp.de>
References: <umfv9g$3lop3$1@dont-email.me>
Injection-Date: Wed, 27 Dec 2023 07:35:13 -0000 (UTC)
Injection-Info: nntp.de; posting-host="akk21-int.akk.kit.edu:2a00:1398:5:f602:cafe:cafe:cafe:21";
logging-data="11726"; mail-complaints-to="abuse@nntp.de"
User-Agent: tin/2.6.4-20231224 ("Banff") (Linux/5.10.0-25-amd64 (x86_64))
Cancel-Lock: sha1:fdqjbLON/IkDpVV+72Q+lhZoDhg=
X-No-Archive: yes
X-No-HTML: yes
 by: Urs Janßen - Wed, 27 Dec 2023 07:35 UTC

Elia wrote:
> Does anyone have experience with that issue? Don't want to wait a few
> days just to find out they have to restart INN or something in that way.

I didn't check the "current" code (still running inn < 2.3 with real
tradspool (i.e no chnaged overview file naming scheeme)), but in the past
inn did the name/ip resolution _only_ at startup (it's not a bug, it's a
feature); so yes - you likely have to inform your peers about the ip-change
so they can restart thier instances.

Re: DNS TTL on INN

<wwvy1dgkscs.fsf@LkoBDZeT.terraraq.uk>

  copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=2765&group=news.software.nntp#2765

  copy link   Newsgroups: news.software.nntp
Path: i2pn2.org!i2pn.org!news.niel.me!nntp.terraraq.uk!.POSTED.tunnel.sfere.anjou.terraraq.org.uk!not-for-mail
From: invalid@invalid.invalid (Richard Kettlewell)
Newsgroups: news.software.nntp
Subject: Re: DNS TTL on INN
Date: Wed, 27 Dec 2023 07:38:27 +0000
Organization: terraraq NNTP server
Message-ID: <wwvy1dgkscs.fsf@LkoBDZeT.terraraq.uk>
References: <umfv9g$3lop3$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
Injection-Info: innmantic.terraraq.uk; posting-host="tunnel.sfere.anjou.terraraq.org.uk:172.17.207.6";
logging-data="9954"; mail-complaints-to="usenet@innmantic.terraraq.uk"
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux)
Cancel-Lock: sha1:aIZ9OVxRibjZB7hlnqI8lvmhWOA=
X-Face: h[Hh-7npe<<b4/eW[]sat,I3O`t8A`(ej.H!F4\8|;ih)`7{@:A~/j1}gTt4e7-n*F?.Rl^
F<\{jehn7.KrO{!7=:(@J~]<.[{>v9!1<qZY,{EJxg6?Er4Y7Ng2\Ft>Z&W?r\c.!4DXH5PWpga"ha
+r0NzP?vnz:e/knOY)PI-
X-Boydie: NO
 by: Richard Kettlewell - Wed, 27 Dec 2023 07:38 UTC

Elia <me@elia.li> writes:
> I have recently changed the IP address of my news server, also updated
> the DNS entry. Issue is, the sites I peer with seem to update the IP
> address associated to the hostname, meaning that my server cannot
> recieve feeds from them, nor are they pulling feeds from mine.
>
> Does anyone have experience with that issue? Don't want to wait a few
> days just to find out they have to restart INN or something in that
> way.

Depends on the server, but with INN, the peer must use ctlinnd to reload
incoming.conf. Many servers do this automatically once a day. Because of
this it’s worth a note to peers when you renumber (and also worth
keeping renumbering very rare!)

In my logs, there’s an outage for your server overnight between
approximately 2330 and 0302 UTC (when my daily reload happens), after
which connectivity returns to normal.

--
https://www.greenend.org.uk/rjk/

Re: DNS TTL on INN

<umgn9t$22i82$1@news.trigofacile.com>

  copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=2766&group=news.software.nntp#2766

  copy link   Newsgroups: news.software.nntp
Path: i2pn2.org!i2pn.org!paganini.bofh.team!news.trigofacile.com!.POSTED.2a01cb080adc110064f789ec459a3a25.ipv6.abo.wanadoo.fr!not-for-mail
From: iulius@nom-de-mon-site.com.invalid (Julien ÉLIE)
Newsgroups: news.software.nntp
Subject: Re: DNS TTL on INN
Date: Wed, 27 Dec 2023 09:29:48 +0100
Organization: Groupes francophones par TrigoFACILE
Message-ID: <umgn9t$22i82$1@news.trigofacile.com>
References: <umfv9g$3lop3$1@dont-email.me> <umgk3h$bee$1@nntp.de>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Wed, 27 Dec 2023 08:29:49 -0000 (UTC)
Injection-Info: news.trigofacile.com; posting-account="julien"; posting-host="2a01cb080adc110064f789ec459a3a25.ipv6.abo.wanadoo.fr:2a01:cb08:adc:1100:64f7:89ec:459a:3a25";
logging-data="2181378"; mail-complaints-to="abuse@trigofacile.com"
User-Agent: Mozilla Thunderbird
Cancel-Lock: sha1:vfsqeTacm5kDFsxLWgUeBxotAqg= sha256:6l6VHUtTr6AysUxI6AWmvIPR78eYjEI3WENTGojtSF0=
sha1:6BTUAwPeZypg359SP5qWaFeegLE= sha256:2JkugXbVN9JhuSQdjFNpQoIMbFsbfvUIuuf83xvKTfA=
In-Reply-To: <umgk3h$bee$1@nntp.de>
 by: Julien ÉLIE - Wed, 27 Dec 2023 08:29 UTC

Hi all,

>> Does anyone have experience with that issue? Don't want to wait a few
>> days just to find out they have to restart INN or something in that way.
>
> I didn't check the "current" code (still running inn < 2.3 with real
> tradspool (i.e no changed overview file naming scheeme)), but in the past
> inn did the name/ip resolution _only_ at startup (it's not a bug, it's a
> feature)

This is unfortunately still a feature, indeed :)

The expected move is to use libevent in INN to handle asynchronous DNS
lookups, but that's a bit of work still not tackled:
https://github.com/InterNetNews/inn/issues/89

(Implementing libevent in innd and innfeed would then also ease a native
support of TLS and COMPRESS between peers.)

In addition to Richard's message about reloading incoming.conf, yes,
that's the current way to handle the issue. Some distributions (like at
least Debian) come with an already configured crontab to do that.
I suggest, Elia, if you don't already have the reload in crontab, to
have a look at the "Setting Up the Cron Jobs" section of INSTALL:
https://www.eyrie.org/~eagle/software/inn/docs/install.html#S12

--
Julien ÉLIE

« If you lie to the compiler, it will get its revenge. » (Henry Spencer)

Re: DNS TTL on INN

<658cc817$1@news.ausics.net>

  copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=2771&group=news.software.nntp#2771

  copy link   Newsgroups: news.software.nntp
From: deletethis@invalid.lan (noel)
Subject: Re: DNS TTL on INN
Newsgroups: news.software.nntp
References: <umfv9g$3lop3$1@dont-email.me> <umgk3h$bee$1@nntp.de>
X-No-Archive: Yes
User-Agent: Pan/0.141 (Tarzan's Death; 168b179 git.gnome.org/pan2)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
NNTP-Posting-Host: news.ausics.net
Message-ID: <658cc817$1@news.ausics.net>
Date: 28 Dec 2023 10:57:59 +1000
Organization: Ausics - https://ausics.net
Lines: 40
X-Complaints: abuse@ausics.net
Path: i2pn2.org!i2pn.org!news.bbs.nz!news.ausics.net!not-for-mail
 by: noel - Thu, 28 Dec 2023 00:57 UTC

On Wed, 27 Dec 2023 07:35:13 +0000, Urs Janßen wrote:

> Elia wrote:
>> Does anyone have experience with that issue? Don't want to wait a few
>> days just to find out they have to restart INN or something in that
>> way.
>
> I didn't check the "current" code (still running inn < 2.3 with real
> tradspool (i.e no chnaged overview file naming scheeme)), but in the
> past inn did the name/ip resolution _only_ at startup (it's not a bug,
> it's a feature); so yes - you likely have to inform your peers about the
> ip-change so they can restart thier instances.

hostnames can be spoofed, its why we use I.P.'s yes they too can be
spoofed, but it's a hell of a lot harder than hostname spoofing :)

to OP,
Although we do not peer with each other, I'm sure most like us, prefer
being pre warned of an impending IP change, and I don't mean the day
before either, this way we can add your new I.P, so when you change, its
transparently seemless, you then notify us when its complete and we
remove your old one. (we also will start to question it if it happens
often, it will make us think you're on DHCP or single session radius
assignment and therefor should be running a chaching server not a full
feed one)

Lastly, asking for peers to change your IP in the middle of Christmas
holidays, whether you celebrate Christmas or not - your peers may, is
never a smart thing, since private peers may likely be away with family,
and commercial peers, having skeleton staff who likely don't have access,
or can only reboot the server.

Then you might get lucky with those like me away on holidays who because
the weather outside is so shit at present and is forcast to be shit
tomorrow as well and who might be bored enough to check email and usenet,
and still partially sober enough to give a damn and make the change, but
ordinarily, you'll be plumb out of luck.

Re: DNS TTL on INN

<umjdkg$lqp$1$arnold@news.chmurka.net>

  copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=2773&group=news.software.nntp#2773

  copy link   Newsgroups: news.software.nntp
Path: i2pn2.org!i2pn.org!news.chmurka.net!.POSTED.s.v.chmurka.net!not-for-mail
From: gof-cut-this-news@cut-this-chmurka.net.invalid (Adam W.)
Newsgroups: news.software.nntp
Subject: Re: DNS TTL on INN
Date: Thu, 28 Dec 2023 09:03:12 -0000 (UTC)
Organization: news.chmurka.net
Message-ID: <umjdkg$lqp$1$arnold@news.chmurka.net>
References: <umfv9g$3lop3$1@dont-email.me>
NNTP-Posting-Host: s.v.chmurka.net
Injection-Date: Thu, 28 Dec 2023 09:03:12 -0000 (UTC)
Injection-Info: news.chmurka.net; posting-account="arnold"; posting-host="s.v.chmurka.net:172.24.44.20";
logging-data="22361"; mail-complaints-to="abuse-news.(at).chmurka.net"
User-Agent: tin/2.6.1-20211226 ("Convalmore") (Linux/6.1.21-v7+ (armv7l))
Cancel-Lock: sha1:jc0hZVz50SQPKBcMUdfKL5pWL+M=
sha1:/mrjYX+adh7J2bDcm8wIaxA3V88= sha256:f+OrpLeUBBafHjz1LbG5n8BUrOttE9Nv8rmoT5kyFzM=
sha1:n6EGUsfMF6J2yqe9vrNIw9TPEI4= sha256:P4H+dMf88C4sIR1k5rbETPdvhMHaHwl9rzT3et5LGko=
 by: Adam W. - Thu, 28 Dec 2023 09:03 UTC

Elia <me@elia.li> wrote:

> I have recently changed the IP address of my news server, also updated
> the DNS entry. Issue is, the sites I peer with seem to update the IP
> address associated to the hostname, meaning that my server cannot
> recieve feeds from them, nor are they pulling feeds from mine.

I remember when I did it. I moved the server to another machine, so
obviously the IP has changed. I made a transition period, where I added
iptables rules to the old server to direct traffic over VPN to the new
server (each peer had its own private IP assigned in this VPN, and it was
used as a source IP).

Outgoing traffic was handled similarly -- routed through the old server.

Then I notified peers about the IP change and waited patiently. Once they
confirmed the change and I confirmed that they connect to the proper IP, I
redirected outgoing traffic, so it originated from the proper IP, and
removed the incoming traffic rule.

The same was true for readers. During the transition period they were able
to connect to and use both IPs.

It was a little pain to set up, but made the transition smooth and there
was almost no disruption (minus the time needed to shut down the server,
copy everything, and restart it at the new location).

But... there's one server that's almost abandoned, that made the
transition automatically. I don't know if it reloads incoming.conf daily,
or what, but the IP has changed, and the server switched to the new one
(probably overnight) and I'm almost sure there was no admin intervention.

Re: DNS TTL on INN

<umkgjn$folq$1@dont-email.me>

  copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=2776&group=news.software.nntp#2776

  copy link   Newsgroups: news.software.nntp
Path: i2pn2.org!rocksolid2!news.neodome.net!news.mixmin.net!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: me@elia.li (Elia)
Newsgroups: news.software.nntp
Subject: Re: DNS TTL on INN
Date: Thu, 28 Dec 2023 20:00:07 +0100
Organization: A noiseless patient Spider
Lines: 27
Message-ID: <umkgjn$folq$1@dont-email.me>
References: <umfv9g$3lop3$1@dont-email.me>
<wwvy1dgkscs.fsf@LkoBDZeT.terraraq.uk>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Thu, 28 Dec 2023 19:00:07 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="a482ea6f5f2faf7b7557c85b19ebaaf5";
logging-data="516794"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX19aM8/3y6jhUqnCCJj+Smd+"
User-Agent: Mozilla Thunderbird
Cancel-Lock: sha1:qZLIaGKML63L0rvRm1r6FTnRimk=
Content-Language: en-US
In-Reply-To: <wwvy1dgkscs.fsf@LkoBDZeT.terraraq.uk>
 by: Elia - Thu, 28 Dec 2023 19:00 UTC

On 27/12/2023 08:38, Richard Kettlewell wrote:
> Elia <me@elia.li> writes:
>> I have recently changed the IP address of my news server, also updated
>> the DNS entry. Issue is, the sites I peer with seem to update the IP
>> address associated to the hostname, meaning that my server cannot
>> recieve feeds from them, nor are they pulling feeds from mine.
>>
>> Does anyone have experience with that issue? Don't want to wait a few
>> days just to find out they have to restart INN or something in that
>> way.
>
> Depends on the server, but with INN, the peer must use ctlinnd to reload
> incoming.conf. Many servers do this automatically once a day. Because of
> this it’s worth a note to peers when you renumber (and also worth
> keeping renumbering very rare!)
>
> In my logs, there’s an outage for your server overnight between
> approximately 2330 and 0302 UTC (when my daily reload happens), after
> which connectivity returns to normal.
>
Yup, that seems to be when i changed IP's. Just waited a day and now
everything is in order again.

Funny thing is, in the middle of the night I changed the IP's back
again, and seemingly exactly when my peers reloaded. So I had the wrong
IP twice. Learned my lesson now, gonna notify before i (hopefully not in
the near future) need to change ip's.

1
server_pubkey.txt

rocksolid light 0.9.8
clearnet tor