Re: Changes due to Denial of Service Attacks

On 05/09/12 03:05, Kevin Smith wrote:

On Tue, Sep 4, 2012 at 12:43 AM, Rob Newton <[email protected]> wrote:

Since the recent denial of service attacks, I understand that some measures
were taken on the server side to prevent the attacks. In particular, this
notice:

Below is the debug log. Can anyone see what the problem might be? Would it
be that Pidgin doesn't handle DNS SRV records correctly?

It's not that Pidgin doesn't support SRV (I believe it does) but that
either it's configured not to use it, or the DNS servers it's using
are broken.

(09:33:21) proxy: Attempting connection to 208.68.163.220
(09:33:21) proxy: Connecting to jabber.org:5222 with no proxy

This is, as you surmised, not trying SRV.

So either somewhere in the account config in Pidgin you'll find that
you've got it set with a manual connect host of jabber.org, port 5222,
or running

dig -t srv _xmpp-client._tcp.jabber.org

won't give you the three results it should.

Yes, I had it misconfigured. Now I do have it trying SRV:

(10:31:45) dnssrv: querying SRV record
for jabber.org: _xmpp-client._tcp.jabber.org

(10:31:55) dnssrv: res_query
returned an error

# dig -t srv _xmpp-client._tcp.jabber.org

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.2.rc1.fc16
<<>> -t srv _xmpp-client._tcp.jabber.org

;; global options: +cmd

;; connection timed out; no servers could be reached

Your dig command suggests a fundamental problem. Could it be that
my home router/modem is blocking something? Or my ISP? Certainly
I'm not having any other DNS problems.

_______________________________________________
This is JUser -- a mailing list for end users
of Jabber/XMPP clients.

To unsubscribe, send email to
[email protected]
or go to the following web
page, scroll all the way down,
and type in your email address:

http://mail.jabber.org/mailman/listinfo/juser
_______________________________________________