OS2 World Community Forum

Public Discussions => General Discussion => Topic started by: Digi on February 03, 2020, 11:20:59 am

Title: Strange hobbes.nmsu.edu behavior.
Post by: Digi on February 03, 2020, 11:20:59 am
Very strange situation with hobbes.nmsu.edu. No access from Russia and Ukraine. From other countries there is access. Letters are ignored and not even accepted by the server. Does anyone have any info on this?
Title: Re: Strange hobbes.nmsu.edu behavior.
Post by: Valery Sedletski on February 03, 2020, 11:36:06 am
I'm opening Hobbes successfully in Linux (Firefox 68 and Falkon browsers), via an american VPN. If I try opening Hobbes from OS/2 in
latest Firefox 45 from my own IP address (russian Tele2 cellular provider), it opens, but I got a SSL error:

Quote
Secure Connection Failed

The document contains no data.

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.

    Please contact the website owners to inform them of this problem.

So, it opens from some places even in Russia, but SSL connection fails. Does it require a too latest SSL version?
Is anybody outside Russia and Ukraine able to open Hobbes from OS/2 browsers?
Title: Re: Strange hobbes.nmsu.edu behavior.
Post by: roberto on February 03, 2020, 11:40:26 am
From Spain, without problems.
User agent: Mozilla/5.0 (OS/2; Warp 4.5; rv:45.0) Gecko/20100101 Firefox/45.0 SeaMonkey/2.42.9esr
Saludos
Title: Re: Strange hobbes.nmsu.edu behavior.
Post by: Joseph on February 03, 2020, 12:22:33 pm
No access from Russia to hobbes.nmsu.edu.
I've try to send them a email and recieved:

<hobbesarchiver@nmsu.edu>: host mailrelay6.nmsu.edu[128.123.34.142] refused to
    talk to me: 554-mailrelay6.nmsu.edu 554 Your access to this mail system has
    been rejected due to policy.
Title: Re: Strange hobbes.nmsu.edu behavior.
Post by: ivan on February 03, 2020, 01:24:14 pm
hobbes/incoming opens here in France but there is no information as to what the file might be about so most things being uploaded at the moment are a complete mystery as to what they are. 
Title: Re: Strange hobbes.nmsu.edu behavior.
Post by: Wim Brul on February 03, 2020, 03:39:50 pm
Use HobbesIncoming (https://hobbes.nmsu.edu/download/pub/incoming/) to access all files in there.
Title: Re: Strange hobbes.nmsu.edu behavior.
Post by: Digi on February 03, 2020, 03:43:26 pm
Use HobbesIncoming (https://hobbes.nmsu.edu/download/pub/incoming/) to access all files in there.

hobbes.nmsu.edu does not work from Russia and Ukraine at all.
Title: Re: Strange hobbes.nmsu.edu behavior.
Post by: Laurence Pithie on February 03, 2020, 04:14:41 pm
Do any of the mirros work for you?
http://sunsite.icm.edu.pl/pub/hobbes/ (http://sunsite.icm.edu.pl/pub/hobbes/)
http://crydee.sai.msu.su/archive/ (http://crydee.sai.msu.su/archive/)
Title: Re: Strange hobbes.nmsu.edu behavior.
Post by: Ian Manners on February 03, 2020, 04:27:17 pm
Hi Everyone,

Curtis, the 'maintainer' of hobbes is busy with another project at present, I've thrown some ideas about how to present the text information description files, and access, to him but I can not see anything happening for a 'while' on that front.

I will let him know about the access issues though I suspect they maybe to do with IP ranges being added to the blacklist for uploading scr, php, ISO and other irrelevant files, I've had similar issues with form and DoS attacks from Russia and Ukraine but now most of my banned ranges are China, VietNam and USA so Curtis maybe amicable to relaxing access blacklists when he has time. Hobbes is on a new server, and I know that Curtis has been looking at different ways to secure the server while still giving access to those who use it.

I'll come back to this thread in a couple of weeks time and gather all the information up and let him know.

For those who would rather not go through me, the new Hobbes Archiver email address on the Hobbes server does work (hobbesarchiver at nmsu dot edu) fine for me from Western Australia, so problems could be due to blacklisting or routing issues. I say routing issues because I've been having intermittent packet problems to Europe for the past 3-4 weeks with no access to China.

As pointed out by Wim, you can access the directory directly via https://hobbes.nmsu.edu/download/pub/incoming/
or FTP via ftp://hobbes.nmsu.edu/pub/incoming/  using anonymous, and your email address (fake or real) as the password.
Title: Re: Strange hobbes.nmsu.edu behavior.
Post by: Dave Yeo on February 03, 2020, 05:08:58 pm
hobbes/incoming opens here in France but there is no information as to what the file might be about so most things being uploaded at the moment are a complete mystery as to what they are.

The txt files show up at ftp://hobbes.nmsu.edu/pub/incoming/ (http://ftp://hobbes.nmsu.edu/pub/incoming/), should be a workaround for the SSL errors too.
Title: Re: Strange hobbes.nmsu.edu behavior.
Post by: Valery Sedletski on February 03, 2020, 07:31:34 pm
ftp access fails too: "Network access denied (65)". So, they seem to ban us by IP, neither http, or ftp or
mail works.

PS: Mirrors of course are very outdated. E.g., ftp://crydee.sai.msu.su was last mirrored in 2017.

Accessing ftp root from a VPN with nftp or Netdrive gives an empty directory listing. Can anybody tell Hobbes admins
that discrimination by territorial attribute is not good. Nobody yet bans USA from russian ftp's, like ftp.osfree.org or
ftp.os2.snc.ru,  if we'll begin, would it be good? This will make an additional  fragmentation of community, which is
already very small. Everybody tells about mythical "russian hackers", but I doubt that russian OS/2 users are those,
and even that those mythical hackers are interested in visiting Hobbes. So, ordinary OS/2 users will suffer, as always.
Title: Re: Strange hobbes.nmsu.edu behavior.
Post by: _Hermit_ on February 03, 2020, 07:39:29 pm
I confirm that access is closed from the Russian address. We have to select a proxy server.

 ftp://hobbes.nmsu.edu/pub/incoming/
The connection was reset

Mozilla/5.0 (OS/2; Warp 4.5; rv:45.0) Gecko/20100101 Firefox/45.0
Title: Re: Strange hobbes.nmsu.edu behavior.
Post by: Dave Yeo on February 03, 2020, 09:46:25 pm
What about other parts of NMSU https://nmsu.edu/ (https://nmsu.edu/)?
Title: Re: Strange hobbes.nmsu.edu behavior.
Post by: Eugene Gorbunoff on February 03, 2020, 10:21:29 pm
testing from Russia:

* hobbes.nmsu.edu  -  Doesn't work during the last few months.
   host hobbes.nmsu.edu
   hobbes.nmsu.edu =   128.123.88.139


* https://nmsu.edu/ - works fine


Title: Re: Strange hobbes.nmsu.edu behavior.
Post by: Mathias on February 04, 2020, 08:08:53 am
Like Ian said... most likely geo block on the specific hobbes external IP.

An admin must really be sick of attacks until he's blocking a whole range or even country ranges. Unfortunately this could potentially mean legit connections also cannot pass through anymore.
But as for protecting the service, this is, as a temporary measure, a valid tool to keep the services up for all of us.
Imagine hobbes being unaccessible for everybody without the geo block would be bad...
And even worse, if it becomes too expensive to protect and maintain hobbes.....
So.. as a quick fix, they propably banned whole ranges to quickly get rid of the attackers.

For the hobbes admins, I'd recommend using adaptive firewall config tools like [  Fail 2 Ban (http://www.fail2ban.org/wiki/index.php/Main_Page) ].
With this they can unblock all the ranges again, and instead configure a set of rules to *automatically*...
- block each individual IP that does forbidden things at every third or second attempt
- unblock them again after n hours

Using such an auto config tool, the firewall maintains itself and only the bad guys need to stay outside. : )

Title: Re: Strange hobbes.nmsu.edu behavior.
Post by: Ian Manners on February 04, 2020, 06:31:03 pm
Hi Valery,

Nothing personal against any country in particular but some countries do have a habit of allowing people access to whole 255.255.255.0 ranges or bigger and being very slow to act when those ranges are abused :(  as to hackers, Russian or otherwise is irrelevant (real hackers would be using bounce services from Romania, VietNam or other country's anyway - just saying), its the bored kiddie scripter's that do more damage to services like Hobbes especially as it has free access to upload files. ISP's have driven down the price of access that they themselves often are no longer interested in abuse reports unless it affects them, which is why so many people block entire ranges, even the entire ranges of one ISP (OVH France was a regular early 2010's).

Policing the upload directory at Hobbes takes time and is dependent on volunteers as there is only one person at nmsu.edu that looks after it, and it is but one of many things on his plate.

I've blacklisted ranges of IP's in Eastern bloc countries in the past but I have also blacklisted ranges from USA, France, Canada, China, Malaysia,  Italy, Germany, Seychelles etc. ISP's with new staff are often either far to 'innocent', or the ISP's are happy to take the money while they can get away with it. USA is the largest representive country in my email RBL's at present as they "do not take heed of spam reports unless they are from customers" Amazon are the worse with moving reporting goalposts, followed by sendgrid.net with allowing spammers easy access and claiming that I need to complain to MY upstream ISP, not to them. Both of those companies use ranges scattered all over the place, and are happy to move customers around. Even Microsoft and Google are now only concerned about abuse if it affects their customers, unless it is something large scale that might attract media attention.

It is the resources needed to police services and maintain adherence to a countries laws that so many different 'free' services have given up as it gives no return on effort. I do not want to see Hobbes go in the same direction.

I will see if it is easy to get an IP banned list from hobbes and what we can do to address any access problems to do with those banned IP's. Not promising anything as I'm not Hobbes but if I offer to do the work for them it maybe more likely to happen. I can see what IP address that you and others are posting from so that gives me something to use in checking if I can get access to the list.

The Hobbes server is a different machine to nmsu.edu.
Title: Re: Strange hobbes.nmsu.edu behavior.
Post by: Martin Iturbide on February 06, 2020, 01:04:43 pm
Hi Ian

I don't know if you have a direct contact with the hobbes archiver, but I'm experiencing an issues that affects me a little bit on posting the news on OS2World.

1) I usually link hobbes files not directly, but with the search URL. Why? because when I post the news the files are on the incoming directory and later moved to a different location. I prefer to put a link to the search so the link don't get outdated with time.
Now I have the problem that the files inside the hobbes incoming directory does not get indexed for the search as it used to work on the past. The search is no longer working for files on the incoming directory.

2) The search link URL has changed from the old hobbes to the new one.
It used to be something like:
- "https://hobbes.nmsu.edu/h-search.php?key=<NameOfTheFile>"
now it is:
- "https://hobbes.nmsu.edu/?&search=<NameOfTheFile>"
I think the new one is better (shorter) but it automatically broke the links of the older news on OS2World.com.
It is not a big deal since I can adopt the new URL without problems (and I prefer the new one), but maybe some "forwarder" can be set for links that goes the old search way.

Regards

Title: Re: Strange hobbes.nmsu.edu behavior.
Post by: Ian Manners on February 06, 2020, 03:27:35 pm
Hi Martin,

Will add it to my list :)
It should be possible to alias h-search.php so both URL's will work, I actually thought that Curtis had already done that but it must have been for only incoming.
Title: Re: Strange hobbes.nmsu.edu behavior.
Post by: Tom on February 06, 2020, 06:28:30 pm
Some differences I notice when searching for dfsee.
Background information: in /pub/incoming is dfsee166.zip (not yet processed), and in
/pub/os2/util/disk is dfsee165.zip (already processed).

https://hobbes.nmsu.edu/?search=dfsee

gives 3 search results in /pub (!): dfsee165.zip , dfsee165.txt and hdd_vhd.zip (the last one contains the string "dfsee" in the description field, and is in /pub/os2/util/file).
Note that dfsee166.zip (which is in /pub/incoming) is not returned as a search result.

https://hobbes.nmsu.edu/?dir=/pub/incoming&search=dfsee

gives zero search results in /pub/incoming , although that is the current location of dfsee166.zip

Conclusion: /pub/incoming seems to be excluded from the search , even when /pub/incoming is passed as the searchpath.
Title: Re: Strange hobbes.nmsu.edu behavior.
Post by: Ian Manners on February 07, 2020, 06:38:40 am
Hi Tom,

Quote
Conclusion: /pub/incoming seems to be excluded from the search , even when /pub/incoming is passed as the searchpath.

That is correct, with people occasionally uploading php, scr, jpg, iso and other non hobbes related files (sometimes copyright protected programs), incoming is on purpose excluded from hobbes internal and external search results. Incoming content is deemed to be of a transient nature.

The majority of people automatically check the incoming directory for the latest files already so it would have been viewed as very minor not to have the contents indexed in the search database.

My websites /incoming and /new directories are also excluded from search indexing but that is because the directories are automatically cleared at the end of every month so the content is transient and should not be included in search engine index's.
Title: Re: Strange hobbes.nmsu.edu behavior.
Post by: Martin Iturbide on February 11, 2020, 10:44:31 pm
Hi

I also got the feeling that search inside "Long Description" are also not working (the "Long Description is not getting indexed).

For example I try to search for "aic7870.add" and get no results, while this "Long description (https://hobbes.nmsu.edu/?detail=%2Fpub%2Fos2%2Fsystem%2Fdrivers%2Fscsi%2FAdaptec_AIC-7870_1-0.zip)" has it.

Regards
Title: Re: Strange hobbes.nmsu.edu behavior.
Post by: Pete on February 12, 2020, 02:28:22 am
Hi Martin

Try without the ".zip" ie just "aic7870"

I seem to recall that hobbes search does not want the ".ext " bit of a filename - works for me.


Regards

Pete
Title: Re: Strange hobbes.nmsu.edu behavior.
Post by: Sergey Posokhov on February 12, 2020, 10:07:45 pm
I can see what IP address that you and others are posting from so that gives me something to use in checking if I can get access to the list.

Exporting IP address lists from forums like OS/2 world and OS2.org seems to be a good idea.

These who active in the forums could receive full access to Hobbes...
Title: Re: Strange hobbes.nmsu.edu behavior.
Post by: Martin Iturbide on February 13, 2020, 01:08:27 pm
Try without the ".zip" ie just "aic7870"

I seem to recall that hobbes search does not want the ".ext " bit of a filename - works for me.

Hi Pete. I think that without the ".zip" finds the file because it is on the name of it, not in the "longer description". the idea will be that hobbes can also search inside the "long descriptions" so people can find things easily. On the files I uploaded/reorganized, I also tried to include the file name of the driver (like aic7870.add) on the long description to help people that are looking for that specific file.

Regards
Title: Re: Strange hobbes.nmsu.edu behavior.
Post by: ivan on February 13, 2020, 09:39:54 pm
Hi Martin,

Just an observation but is it wise to post drivers for equipment that is no longer manufactured and, I suspect, no longer working?
Title: Re: Strange hobbes.nmsu.edu behavior.
Post by: Neil Waldhauer on February 14, 2020, 05:26:44 am
At Warpstock 2019, we gave away 8 well preserved IBM PS/2 Computers. All were running. Hobbyists restoring old computer want OS/2. There are people who stockpile old hardware.

And then there are commercial operations who I cannot name still using PS/2 computers.

Keeping the legacy support files is Hobbes mission, or at least one of their missions
Title: Re: Strange hobbes.nmsu.edu behavior.
Post by: ivan on February 14, 2020, 01:05:56 pm
I was thinking of such things as CD drives that are no longer made and when their drive belts break and stop working because there are no replacement parts.

I am all for trying to restore antique systems but as an engineer I find it sad when some things are no longer repairable and must be scrapped.  Maybe there needs to be an historical section on hobbes for the software for such items.
Title: Re: Strange hobbes.nmsu.edu behavior.
Post by: Martin Iturbide on February 14, 2020, 02:03:55 pm
Just an observation but is it wise to post drivers for equipment that is no longer manufactured and, I suspect, no longer working?

Hi Ivan.

I already talk about it on "Martin: please do not upload outdated drivers to Hobbes (https://www.os2world.com/forum/index.php/topic,2280.msg24217.html#msg24217)" (very direct subject).

Regards
Title: Re: Strange hobbes.nmsu.edu behavior.
Post by: ivan on February 14, 2020, 03:28:24 pm
Hi Martin,

What do you think about my idea of an historical section on hobbes as the repository for such items?  That way it would make the older items easier to find.