funsec mailing list archives

Re: Oops: Charter Empties 14,000 E-Mail Accounts


From: "Dude VanWinkle" <dudevanwinkle () gmail com>
Date: Fri, 25 Jan 2008 09:19:49 -0500

On Jan 24, 2008 11:01 PM,  <Valdis.Kletnieks () vt edu> wrote:
On Thu, 24 Jan 2008 22:09:15 EST, der Mouse said:

Yeesh, that's *such* glaring incompetence.  Uh, guys, ever hear of
*backups*?!

Yeah.  And you know what?  Sometimes, the backups only run daily, so
if you have a major whoops and lose the terabyte of mail spool, any mail that
arrived since 3:07AM last night has effectively evaporated.

That's overlooking the fact that even if you *have* a backup, restoring it
may be interesting - consider if you have an *active* mailstore, and backups
as of 5 minutes before you lost it.  Now you get in a new terabyte of disk,
and you're left with a quandary - you can stay down for 2-3 days while you
restore that terabyte and then open up port 25 to the outside world and hope
that you don't get torpedoed by the incoming flood.  Or you can start accepting
mail, and restore that backup to *some other* terabyte of disk you just pulled
out of an orifice - and then figure out how to insert the restored mail
into the mailboxes (hint - the following *does not* work without additional
locking:


Try imapsync http://freshmeat.net/projects/imapsync/ for those kind of
redirected restores

Or just use Zimbra, you can restore and migrate mail with local
authentication while your users are tied into kerberos. Its got some
bugs but 5.0.1 is actually pretty cool.

-JP
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: