Andy, do you run a mail relay/smarthost for customers?
I've got nullmailer running on one of my VPS, and it looks like I
configured it with a bitfolk.com smarthost, but it doesn't dig/accept SMTP
(so I'm guessing it either used to exist and doesn't any more, or it never
existed and I just made some shit up)
Kind regards
Murray Crane
Hello,
I'm afraid there's another round of security updates needed, and so
there will be another reboot of all servers, likely in the early
hours (UK time) of 23–25 June. Customers will soon receive an
individual email confirming the hour-long maintenance window
specific to their server(s). The actual work is expected to take
10–30 minutes within that window.
As before we should be able to do a suspend/restore if you have
enabled that at: <https://panel.bitfolk.com/account/config/>
Cheers,
Andy
--
https://bitfolk.com/ -- No-nonsense VPS hosting
_______________________________________________
announce mailing list
announce(a)lists.bitfolk.com
https://lists.bitfolk.com/mailman/listinfo/announce
Hello,
Recently we had a rather unfortunate situation where a customer ran
up a very large (4 figure) unexpected overage bill.
The current systems of BitFolk behaved how they are currently meant
to, in that the customer received an email warning and then very
quickly an email notification that limits had been passed and
further data transfer would incur a charge.
In addition to the automated process, on the day where the limits
were exceeded I also opened a support ticket with the customer to
warn them that all further data transfer would incur a charge.
Sadly the customer did not read any of the emails, so the level of
use continued for the remainder of the 30 day period, then at the
end a huge bill was presented.
I am not looking to discuss the way in which the customer here was
in the wrong. The outcome is undesirable to BitFolk because it is
always going to be difficult to get an unexpected overage bill paid
when it's approximately 300 times the size of the regular monthly
charge. Any customer presented with such a bill is likely to be
extremely upset, and we don't want upset customers.
So, how can we improve the process?
The problem with the existing procedure here is that after the
notification of exceeding limits has been sent, there is no
follow-up until the end of the measuring period. In a case such as
this where usage is very high, the data transfer quota can be
exhausted quickly and then you've got several weeks where it can
continue at the same rate, building up a huge overage bill.
In my view what should have happened is that once some level of
outstanding bill was reached without any response by the customer to
say that this was expected and should continue, BitFolk should have
turned off their network to limit further expense. At least until
they respond to discuss what they want to do about it.
Assuming you agree with that, it becomes a question of what that
limit should actually be. I brought this matter up a long time ago
when it was a hypothetical situation and the majority of respondents
at the time were very against the idea of service being interrupted
without an instruction from them to do so.
For the following 10 years we've done things that way and not
interrupted anyone's service purely for transferring more data than
their plan covers, but now that the potential for running up very
large bills has been demonstrated, it is a risk to BitFolk and is
something we have to revisit. So when considering this issue, please
try to consider it not as hypothetical, but as if it were yourself
running up a bill.
Please also bear in mind that because we are talking about what
should happen in the case where there is no communication, whatever
we decide has to be the default for all customers. To deviate from
the default will require a setting being changed in the Panel or a
support ticket ahead of time.
So, at what level of overage would you consider it desirable for
BitFolk to temporarily suspend your network access rather than cost
you more money?
Should the amount actually be zero, i.e. as soon as you go over the
limit (despite warnings etc) your network is suspended until you
acknowledge that you will pay your overage bill?
It may be possible to use traffic shaping to limit the liability.
This is not really an area I want to get into because:
- It would only be one-way: data you send out. We can't necessarily
control data that is sent *to* you, especially if it is not TCP.
- By interfering with your data flow in my view it makes us *more*
liable for your behaviour. A customer could always argue that they
aren't paying their bill because we should have done a *better*
job of shaping their traffic to prevent/reduce the bill. Fully
specifying how the shaping would work might help, but people who
are facing a bill they don't want to pay can always find fault
with that, and those aren't conversations I particularly want to
deal with.
Therefore, the only form of traffic shaping that I really want to
consider is the most extreme kind: no traffic is allowed at all!
Something must be put in place to try to avoid this ever happening
again, so I would appreciate your thoughts on how it should work.
Again, rather than just saying it is the customer's fault (no one is
arguing that it is not the customer's responsibility), please try
to imagine yourself in the situation where your VPS is running up an
overage bill and you haven't seen any of the emails or seen the
Cacti graphs etc. It is a risk to BitFolk. What would you want done
about it?
Finally, I should mention that there are currently two customers who
almost every month run up overage bills that are 10 to 20 times
their monthly regular bill. They have done so for a long time; they
have already been advised to commit to more in order to reduce their
bills, but they keep paying the overage bills. So while overage is
quite rare across the customer base, for a few customers it is the
norm. Whatever is decided may involve me forcing those customers to
change the way they do things.
Cheers,
Andy
--
https://bitfolk.com/ -- No-nonsense VPS hosting
Hi,
As you may or may not be aware, it is becoming increasingly popular
for large email providers to use DMARC settings with failure
policies of "quarantine" or even "reject".
Domain-based Message Authentication, Reporting and Conformance
(DMARC) is a mechanism which builds upon SPF and DKIM to try to
ensure that emails that show a given domain name in the From:
address came from mail relays which are able to sign headers to
prove they can send such emails.
As Mailman takes your posts and modifies them (the subject line is
altered and list footers may be added) yet retains your specified
From address, this causes a DMARC failure and for receiving sites is
indistinguishable from a forged email.
There are people posting to these lists right now from domains which
have strict DMARC failure policies. As a result whenever they post
to the BitFolk lists, many recipient sites do as instructed and
reject or quarantine their email. Furthermore a rejection causes the
list software to consider the *recipient* as having bounced the
email, and if this happens several days in a row the recipient
address will be considered undeliverable and will be automatically
unsubscribed.
In short, posters whose domains have strict DMARC failure policies
can cause other subscribers to be unsubscribed from the list.
There is no good way to avoid this for typical mailing lists. I've
decided that one of the least bad ways is to enable the setting that
rewrites the sender from address (only) for domains which have
strict DMARC failure policies.
So, if you see something like:
From: Joanne Bloggs via users <users(a)lists.bitfolk.com>
instead of the more usual:
From: Joanne Bloggs <jbloggs(a)example.com>
then this is the reason why. The purpose is to have the messages
that we know will break DMARC come instead from the
lists.bitfolk.com domain.
Cheers,
Andy
--
https://bitfolk.com/ -- No-nonsense VPS hosting
_______________________________________________
announce mailing list
announce(a)lists.bitfolk.com
https://lists.bitfolk.com/mailman/listinfo/announce
Speaking as a hobby user who never gets even close to the limit I would not
want to occur substantial charges and have no problem with having my
service suspended. I would not quibble with having an extra charge of a
month or two. After all it can only be the customer's fault for not
monitoring the usage or reading emails.
Steve
