- Heroes

[heroes] OBS-based spam from M$ Outhouse clients
by Felix Miata 30 Sep '20

30 Sep '20

3 just today, and today's not the first day. Is this happening to everyone? Following are the texts of today's and sending UCTs: 17:17 Miata, by Open Build Service request - 5823 (preview in PDF), i will process additional 2,572 from your payroll because of customer request (PDF copy). Call me till 3 pm please. Open Build Service outsource specialist 19:12 Felix Miata, i am a new one in Open Build Service. What time do i need to process 3,582 from your payroll (preview in PDF)? It is because of customer complaint request (preview in PDF). Call me back please till 2 pm. Open Build Service outsource specialist 20:34 Felix Miata, i will process your weekly debit by Open Build Service request and client complaint. Report is available: https://u5614280.ct.sendgrid.net/ls/click?upn=NTI461ARMg5i3ROxrXgcIvSbfV6AN… What time you will be in office today? I am driving right now to you. Open Build Service HR outsource manager Headers from the earliest of the three: >From - Thu Sep 24 14:00:41 2020 X-Account-Key: account4 X-UIDL: 11ea-fe8e-b7c01cec-a208-00212857e2ce X-Mozilla-Status: 0011 X-Mozilla-Status2: 00000000 X-Mozilla-Keys: Status: U Return-Path: <SRS0=I4/B=DB=sendgrid.net=bounces+8328369-e7c9-felix.miata=opensuse.org(a)opensuse.org> Received: from noehlo.host ([209.86.89.126]) by mdl-serene.atl.sa.earthlink.net (EarthLink SMTP Server) with SMTP id 1KlvpZ3eM3Nl34S0; Thu, 24 Sep 2020 13:52:31 -0400 (EDT) Received: from nmtai203.oxsus-vadesecure.net ([147.135.97.26]) by ibscan-independence.atl.sa.earthlink.net (EarthLink SMTP Server) with SMTP id 1KlvpY2IX3PGoUe0 for <mrmazda(a)earthlink.net>; Thu, 24 Sep 2020 13:52:30 -0400 (EDT) Received: from mx2.opensuse.org ([195.135.221.158]) by oxsus2nmtai03p.internal.vadesecure.com with ngmta id ec6c7bf0-1637c9afc70575ca; Thu, 24 Sep 2020 17:52:30 +0000 Received: from mx2.opensuse.org (localhost [127.0.0.1]) by mx2.opensuse.org (Postfix) with ESMTP id B9A29706 for <felix.miata(a)opensuse.org>; Thu, 24 Sep 2020 17:52:24 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on mx2.infra.opensuse.org X-Spam-Level: * X-Spam-Status: No, score=1.5 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,HTML_IMAGE_ONLY_32,HTML_MESSAGE,RCVD_IN_MSPIKE_H2, SENDGRID_REDIR,STATIC_XPRIO_OLE,UNPARSEABLE_RELAY,URIBL_BLOCKED autolearn=disabled version=3.4.2 X-Spam-Virus: No Received: from xtrwsqdf.outbound-mail.sendgrid.net (xtrwsqdf.outbound-mail.sendgrid.net [167.89.100.223]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mx2.opensuse.org (Postfix) with ESMTPS for <felix.miata(a)opensuse.org>; Thu, 24 Sep 2020 17:52:24 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sendgrid.net; h=from:subject:mime-version:content-type:reply-to:to; s=smtpapi; bh=xDD6/WADhAnOhQ03YGrUzxnxj0MEFdnn0F/eZFCWZA8=; b=xHB7d58oKuftvC/1veziNWFQKaLKoUkg9lsOsnIpjRxfNhtXnUbHjpaS+o+/vXldl2dn amMFlsVodkjqLymn+ua7YdaCg6F7vZi59Y5g7RQquil2NLgjxnVi3AbzOGF/OrjRt43Ui0 3dHl7YxxN+z4POekJLZdSdh5z5yWOKQKc= Received: by filterdrecv-p3mdw1-5dd6bc5999-kftgf with SMTP id filterdrecv-p3mdw1-5dd6bc5999-kftgf-16-5F6CD4BD-32 2020-09-24 17:17:49.531176555 +0000 UTC m=+242357.016120331 Received: from rtyaw (unknown) by ismtpd0010p1iad2.sendgrid.net (SG) with ESMTP id oGS-YOYUSOGpSR3kJBeeKg for <felix.miata(a)opensuse.org>; Thu, 24 Sep 2020 17:17:49.471 +0000 (UTC) Message-ID: <15EFA6334692B0E33F3A73CCE8DB107D(a)mvrimaging.com> From: Steven Wood <lvazquez(a)mvrimaging.com> Subject: Re: debit confirmation Date: Thu, 24 Sep 2020 17:17:49 +0000 (UTC) MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_118E_01D69296.A0B6C2D0" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Windows Live Mail 15.4.3538.513 X-MimeOLE: Produced By Microsoft MimeOLE V15.4.3538.513 Reply-To: Steven Wood <lvazquez(a)mvrimaging.com> X-SG-EID: =?us-ascii?Q?SlUR3N0yrbRkPhXJAnYQqFLRb8kuDQ=2FcoLWsS9Hw8w89rY9yWwqsvO+f5aAcVi?= =?us-ascii?Q?MG8JypoyLFVJJ4wJKhap8QPgSD23DdEmtPYJt7Z?= =?us-ascii?Q?g1UDlUcszGkvd9szrVoRjrVxsTey8iEgTY0Zm+B?= =?us-ascii?Q?Q2PSPupy2I9KHkguInKWrn1I+4CQ1ZmTqcUYUVI?= =?us-ascii?Q?xr3=2FWuAFOvZ+bkElrdbTdGWhqj2vbIF5e=2FyE7DR?= =?us-ascii?Q?Tp7M5T6iXLjSwlvTCfwzRWEdK4m9xBiiKIoPc7I?= =?us-ascii?Q?LoS2Jw1FbSPyvedK=2F4ALQ=3D=3D?= To: felix.miata(a)opensuse.org X-VadeSecure-Score: 0 X-VadeSecure-Cause: gggruggvucftvghtrhhoucdtuddrgedujedrudekgdduvddtucetufdoteggodetrfdotffvucfrrh hofhhilhgvmecugfettffvjffnkffpmfdpggftfghnshhusghstghrihgsvgenuceurghilhhouhht mecufedttdenucenucfjughrpefkhffuffggtgfrigfoqfhrvfesrgdtjeepfidtjeenucfhrhhomh epufhtvghvvghnucghohhougcuoehlvhgriihquhgviiesmhhvrhhimhgrghhinhhgrdgtohhmqeen ucggtffrrghtthgvrhhnpeeludeuteejteetvdeiieehudetffdvteevtdffheeiffelhfefudelle efgeetteenucffohhmrghinhepshgvnhgughhrihgurdhnvghtnecukfhppeduleehrddufeehrddv vddurdduheekpdduieejrdekledruddttddrvddvfeenucevlhhushhtvghrufhiiigvpedtnecurf grrhgrmhepihhnvghtpeduleehrddufeehrddvvddurdduheekpdhhvghlohepmhigvddrohhpvghn shhushgvrdhorhhgpdhmrghilhhfrhhomhepufftufdtpefkgedsueepffeupehsvghnughgrhhiug drnhgvthepsghouhhntggvshdokeefvdekfeeiledqvgejtgelqdhfvghlihigrdhmihgrthgrpeho phgvnhhsuhhsvgdrohhrghesohhpvghnshhushgvrdhorhhgpdhrtghpthhtohepmhhrmhgriigurg esvggrrhhthhhlihhnkhdrnhgvthdpmhhouggvpehsmhhtphdpghgvthdqufgrfhgvfghnshhusghs tghrihgsvgdpshhpfheprfgrshhspdgukhhimheprfgrshhspdggtfgfnhhsuhgsshgtrhhisggv X-VadeSecure-Status: Legit X-VadeSecure-Verdict: clean X-VadeSecure-Malware: Clean X-VadeSecure-Originating-IP: 195.135.221.158 Received-SPF: Pass Received-DKIM: Pass X-ELNK-AV: 0 X-ELNK-Info: sbv=0; sbrc=.0; sbf=0b; sbw=000; This is a multi-part message in MIME format. ------=_NextPart_000_118E_01D69296.A0B6C2D0 -- Evolution as taught in public schools, like religion, is based on faith, not on science. Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata *** http://fm.no-ip.com/ -- To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org To contact the owner, e-mail: heroes+owner(a)opensuse.org

2 3

[heroes] oSLO conference - main activities in your team
by Axel Braun 30 Sep '20

30 Sep '20

Dear Heroes, as part of the upcoming oSLO conference, the board has submitted a session for discussion with the openSUSE community - the 'usual' board event at our conference. We plan to give an overview about what was going on the last year, and would invite you to contribute to this session as well, e.g. by giving a short talk (less than 10, better less than 7 minutes) or provide input in form of a few slides about the main activities/achievements in your team that you would like to share with the community. If desired, please inform board short-term and send material to board@ by 11 Oct. If not, please let us know as well Thank you Axel -- Dr.-Ing. Axel K. Braun M: +49.173.7003.154 T: @coogor Matrix: @docb:matrix.org PGP Fingerprint: 2E7F 3A19 A4A4 844A 3D09 7656 822D EB64 A3BA 290D Public Key available at http://www.axxite.com/axel.braun@gmx.de.asc Personal Freedom starts with free/libre Software ThinkPad X1 Extreme running openSUSE Tumbleweed 20200928 -- To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org To contact the owner, e-mail: heroes+owner(a)opensuse.org

1 0

[heroes] Re: Fosshost <> openSUSE
by ddemaio 28 Sep '20

28 Sep '20

Hi heroes, I received this email from Thomas offering services for the project as well as other projects. Here is a little more info about what Thomas has founded with fosshost.org - https://fosshost.org/about It looks pretty interesting. I thought I would connect you with him as it seems interested and is helping out other projects. Maybe bring it up in the next heroes meet as a topic of discussion. Thank you for emailing us Thomas; I appreciate it. And thank you for your wonderful project. v/r Doug On 9/27/20 5:22 PM, Admin wrote: > > Hi > > Fosshost came across your project and would like to help by offering > our hosting services. > > We can provide virtual instances, storage, mirrors, web and database > hosting. You can find out more here <https://fosshost.org/about>. > > If you use IRC (#fosshost freenode) and would like to drop by and > discuss, we'd love to hear from you! > > Kind regards, > > Thomas > Founder fosshost.org > > > -- To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org To contact the owner, e-mail: heroes+owner(a)opensuse.org

1 0

[heroes] beans.o.o was down / certificate handling fun
by Christian Boltz 26 Sep '20

26 Sep '20

Hello, [mostly FYI, with a question at the end] beans.o.o was down for a while with an interesting[tm] error: [Sat Sep 26 00:48:37.062786 2020] [ssl:emerg] [pid 30948] AH02565: Certificate and private key beans.opensuse.org:443:0 from /etc/apache2/ ssl.crt/cert.pem and /etc/apache2/ssl.key/privkey.pem do not match [Sat Sep 26 00:48:37.062809 2020] [:emerg] [pid 30948] AH00020: Configuration Failed, exiting and the result was that apache refused to start. Trying to force-renew the certificate explained the problem: # dehydrated --force --cron [...] + Done! + Creating fullchain.pem... cp: cannot stat '/etc/apache2/ssl.key/privkey.pem': Permission denied Reloading apache2 service apache2.service is not active, cannot reload. /etc/apache2/ssl.key has an acl for dehydrated, but... # getfacl ssl.key/ # file: ssl.key/ # owner: root # group: root user::rwx user:dehydrated:rwx #effective:--- <--------- :-( group::--- mask::--- other::--- default:user::rwx default:user:dehydrated:rwx default:group::--- default:mask::rwx default:other::--- The solution was easy: # chmod g+rwx ssl.key/ After that, dehydrated could write to ssl.key again, and apache happily started. However, the directory is packaged with 700 permissions [1], so the problem might come back with the next apache update. If someone has an idea for a more permanent solution (that also survives apache updates), please speak up ;-) Regards, Christian Boltz [1] # rpm -qvl apache2 |grep ssl.key drwx------ 2 root root 0 Apr 8 2011 /etc/apache2/ssl.key -- Look at Debian... its stable, works on a variety of platforms.... and development is racing along at the speed of a turtle with 3 broken legs. [Joseph M. Gaffney in opensuse] -- To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org To contact the owner, e-mail: heroes+owner(a)opensuse.org

2 1

[heroes] Alignment regarding mailing lists and DKIM
by Michalis Kamprianis 24 Sep '20

24 Sep '20

Hello In SUSE we are reviewing DMARC reports which indicate a significant number of DKIM-signature failures related to mails sent via opensuse.org servers. What is the best option to work together to find out what is the problem? We need to fix this urgently. Thank you -- *Michalis Kamprianis* IT Security Manager SUSE LINUX, s. r. o. Corso II Křižíkova 148/34 18600 Praha 8 Tel: +420 702 133 218

1 0

[heroes] download.opensuse.org unreachable?
by Michael Ströder 15 Sep '20

15 Sep '20

HI! https://download.opensuse.org/ seems to be unreachable. Ciao, Michael. -- To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org To contact the owner, e-mail: heroes+owner(a)opensuse.org

2 2

[heroes] whitelisting for mlmmj
by Per Jessen 04 Sep '20

04 Sep '20

FYI, I have whitelisted the following addresses: listname+subscribe(a)o.o listname+unsubscribe(a)o.o listname+help(a)o.o listname+owner(a)o.o In the default config, spamassassin will score mails with no subject and no content fairly high, just enough to reject as spam. For subscribes etc, people usually don't bother with subject and content. I have seen a couple of people complain that they were unable to subscribe, for instance. These whitelistings will hopefully deal with that. -- Per Jessen, Zürich (17.6°C) Member, openSUSE Heroes -- To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org To contact the owner, e-mail: heroes+owner(a)opensuse.org

1 0

[heroes] Reminder: Heroes meeting on Tuesday
by Christian Boltz 30 Aug '20

30 Aug '20

Hello, the next heroes meeting will be on Tuesday (2020-09-01) at 18:00 UTC / 20:00 CEST in #opensuse-admin. See https://progress.opensuse.org/issues/69589 for the planned topics, and feel free to add your own topics. Regards, Christian Boltz -- If something is red you should always worry. That's way it is red. [Thorsten Kukuk] -- To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org To contact the owner, e-mail: heroes+owner(a)opensuse.org

1 0

[heroes] Mail server migration August 10
by Per Jessen 10 Aug '20

10 Aug '20

Dear all, next Monday August 10, we plan to migrate email services for "opensuse.org" away from the current SUSE mailservers (mx[12].suse.de] and on to our two new mail servers "mx1.opensuse.org" and "mx2.opensuse.org", which I finished setting up beginning of July. Primary services affected are: - mailing lists - member aliases forwarding Apart from a minimal interruption at the time of switch-over, neither service should really see much effect of the migration, but you never know. The new setup includes spam- and virus filtering, selective greylisting, inbound and outbound TLS support, and an SRS daemon. If you have any questions or concerns, feel free to write to me or to the Heroes list. -- Per Jessen, Zürich (16.9°C) Member, openSUSE Heroes -- To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org To contact the owner, e-mail: heroes+owner(a)opensuse.org

1 2

[heroes] Migrating mailing lists
by Stasiek Michalski 05 Aug '20

05 Aug '20

Hi, We are currently planning out the migration from mlmmj to mailman 3. We have been discussing moving lists over from opensuse-$list(a)opensuse.org to $list(a)lists.opensuse.org (and potentially allowing subprojects to use their own domains), for both collision and aesthetic reasons. We would like to hear your input. Thanks in advance, LCP [Stasiek] https://lcp.world -- To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org To contact the owner, e-mail: heroes+owner(a)opensuse.org

8 10