MSGID: 1:261/38.0 ee1f2d43
REPLY: 1:282/1031.0 91f45133
TZUTC: -0500
CHARSET: LATIN-1
Hi Jeff,

>> Is it from someone like Yandex that fills up your nodes?  That started
>> happening here.. so I use this line to keep them off the bbs nodes:
>> iptables -A OUTPUT -p tcp -m string --string "block-me.com" --algo kmp -j
>> REJECT
>> That is all one line, and of course you change "block-me.com" to the name of
>> the site that is nailing your system... works well here.

> Here a domain name doesn't show up, just an IPv4 address.

What does your system show when you type 'host '? For instance,
over here I see this with the host command:

~host 213.180.204.62
62.204.180.213.in-addr.arpa domain name pointer yandex.com.

> I have started to
> add the IP's to block them. I was looking for a way to limit x connection
> attempts from the same IP address within x seconds. And decided to use the
> command line:

> iptables -A INPUT -p tcp --dport 23 -i eth0 -m state --state NEW -m recent
> --update --seconds 10 --hitcount 3 -j DROP

Yes, I use that line as well.  It obviously wasn't enought though yesterday. :(

I use that line above, and also this one (again, all on one line):

iptables -A OUTPUT -p tcp -m string --string "yandex.com" --algo kmp -j REJECT

Three times yesterday, one of my users tried to upload his replies and was
unable to.. As I said that's when I went digging for a way to restart bbbs.

Take care,
Janis

--- BBBS/Li6 v4.10 Toy-4
 * Origin: Prism bbs (1:261/38)
SEEN-BY: 1/19 123 14/5 15/0 2 16/0 19/36 34/999 90/1 104/57 106/201
SEEN-BY: 116/18 120/331 123/130 131 140 128/2 153/7715 203/0 218/700
SEEN-BY: 221/0 1 6 360 222/2 226/17 229/354 426 452 1014 230/0 150
SEEN-BY: 230/152 240/1120 5832 249/206 317 250/1 261/38 100 266/512
SEEN-BY: 267/155 275/100 280/464 5003 282/1031 1056 291/1 111 292/140
SEEN-BY: 292/854 8125 317/3 320/119 219 322/0 757 335/364 340/400
SEEN-BY: 342/13 200 393/68 396/45 640/1384 712/848 801/161 189 3634/12
SEEN-BY: 5020/1042
PATH: 261/38 320/219 221/1 292/854 229/426