During the course of some automated security testing, where I was looking for subdomains that resulted in 404's, I came across m.mozilla.org. $ host m.mozilla.org m.mozilla.org is an alias for mana.mozilla.org. mana.mozilla.org has address 126.96.36.199 As you can see m.mozilla.org is a CNAME for mana.mozilla.org. However, if someone ever wanted to use m.mozilla.org they would get to the right server, but the VHOST will be incorrect and you'll end up a 404 error. This is not a security issue, but more of a house cleaning item. Recommendation: - If it's not needed, I would recommend we remove the DNS alias for it. - If it's needed, I'd be curious what for. Examples: https://m.mozilla.org/ http://m.mozilla.org/
We do use this like this: http://m.mozilla.org/Puppet+freshness redirects to https://mana.mozilla.org/wiki/display/NAGIOS/Puppet+freshness Nagios uses these shortened links in alerts. m.mozilla.org used to somehow provide another useful service in that pages that did not exist offered up a documentation template to encourage everyone to document their nagios checks and what to do when they alert. At the moment though this doesn't appear to be working. The MOC may be able to comment further.
:ericz - Is this just for mana or for any URL shortening? - If just mana, maybe have https://m.mozilla.org/ => https://mana.mozilla.org/ - If for any URL shortening, maybe have https://m.mozilla.org/ => some banner/documentation on what this is?
I suggest forking m. into its own service, since confluence is exiting to SaaS. It need not be hosted with Mana components. Basic Apache is fine.
It's just for mana url shortening to my knowledge and if it no longer provides the nice shortcut to a template for new documentation then I agree a redirect would suffice. The MOC is I believe the owner of that, needinfo'ing Linda.
Flags: needinfo?(eziegenhorn) → needinfo?(lypulong)
we still need it - it is used in our Nagios alerting to redirect to runbooks - can we test it some time with the redirect without the service
Any other questions Jonathan or can we close this out?
Sure, I'll close it out. Assuming that if someone wants to take some action to split the URL shortening service off into it's own service, then it will be tracked with a different bug.
Status: NEW → RESOLVED
Last Resolved: a year ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.