8 Feb 15:33
decommissioning parisc-linux.org
dann frazier <dannf <at> dannf.org>
2012-02-08 14:33:47 GMT
2012-02-08 14:33:47 GMT
As Paul noted[1], parisc-linux.org was running a vulnerable
apache which got the attention of HP's security audit team. I've been
doing most of the maintenance of the OS on this machine for a while,
but that has just meant apt-get upgrading when cron-apt told me to for
a few years. Turns out apache-ssl was obsolete (an etch version!), so
no amount of upgrading was going to fix that.
At this point I've removed apache-ssl. I tried installing apache2 to
see if any web pages would magically work - it didn't, so right now
the website is 404 farm :( I didn't spend much time trying to handle
that since.....
parisc-linux.org is running the last stable release of Debian that
supported hppa ('lenny'), and its life is now expired. As such, I
think we really need to migrate the site to another maintained
distribution and/or architecture. I'm willing to help migrate services
for the next month or so - let's just say 2012.03.14 for a good round
(heh) date - after which I plan to halt this system and let HP know
the hardware can be put to other uses. From what I can tell, we
originally installed this system almost exactly 9 years ago - ah,
rememember its predecessor dsl2? Good times. Anyway -
*************************************************************************
*** If you need any data off this machine, now's the time to grab it! ***
*************************************************************************
If you'd like to take over longterm hosting the website/domain, please
get in touch with taggart or I. If you'd like to continue using the
machine and/or HP's network to do the hosting, I can probably find a
contact for you there - though I wouldn't bet on it.
(Continue reading)
Besides the firewall / access control, I think the only important
thing to take care of is MX configuration (ISTR buildds need a working
MX to function) so that the machine doesn't become an open-relay that
would put ESIEE's subnet onto the DNSBLs...
> I wasn't asking you to support the general system updates or buildd
> maintenance.
Roger that.
Cheers,
T-Bone
Cheers,
Carlos.
--
To unsubscribe from this list: send the line "unsubscribe linux-parisc" in
the body of a message to majordomo <at> vger.kernel.org
More majordomo info at
RSS Feed