Past Incidents

On Monday 21.01.2019 we will switch on DNSSEC validation on our DNS resolvers. We do not expect any problems. However, if you need to resolve a DNSSEC signed domain, please make sure that the DNSSEC validation is fine.

We perform software updates on our mail servers. We expect a downtime of ~5 minutes.

Start maintenance window: 15/01/2019 00:00
Stop maintenance window: 15/01/2019 01:30

New features / Changes:

• [Web] Apple mobileconfig enhancements
• [ClamAV] Include signatures from Sanesecurity
• [SOGo] Fix Reminder Mails
• [Web] Various minor fixes
• [Web] Update languages (cs, en)
• [Compose] Update to Redis 5
• [Compose] New images for ClamAV, Watchdog, SOGo, Postfix and PHP-FPM
• [PHP-FPM] Update PHP and libs

Since a few weeks, we see more and more SQL injection attacks with a certain request pattern. While those requests do not led to any security problems, they are usually fired in rapid sucession, which can led to overloaded or slow systems.

Over the holidays, we developed and tested new WAF rules to block this particular requests. As we see the same pattern on many servers and do not expect any problem with those new rules after our testing, we will rollout them to all systems as of now.

Closes #494

We will update Discourse to Version 2.1.6.

Due to the built-in Docker manager, no downtime is required.