home bbs files messages ]

Just a sample of the Echomail archive

<< oldest | < older | list | newer > | newest >> ]

 Message 15793 
 Christian Sacks to Scott Street 
 Re: Linux, MIS, and Automatic IP Blockin 
 02 Jul 24 16:59:18 
 
TID: Mystic BBS 1.12 A49
MSGID: 2:250/5 71729cb9
REPLY: 1:266/625 78a8d8fb
TZUTC: 0100
On 01 Jul 2024, Scott Street said the following...
 
 SS> So the basic flow of this process.
 SS> 1) MIS decides to block a given IP because it violates the connection
 SS> attempt rules set in the individual server configuration table.
 SS> 2) MIS executes the "IP Blocked" event, which adds the IP to the list
 SS> 3) Every 5 mins, the cron job runs and adds all the queued IPs to the
 SS> iptables input filter, and after the new list of IPs have been added,
 SS> makes them persistent across restarts with netfilter-persistent.
 SS> 
 SS> You can track the activity of this process using your system log -
 SS> journalctl for me, I'm on Debian 12 (bookworm). 
 SS> 
 SS> I hope you find this useful,  especially those of you running some
 SS> flavor of Linux.  Also: some filename and directories have been changed
 SS> from my actual to simplify this message.

I think on the whole this is a nice approach, however what happens when Mystic
accidentally blacklists your own IP, or it'self? Then you have iptables
blocking you out and you won't be able to get back in =)

Can you modify that to only block on the ports you have for telnet/ssh to the
BBS (assuming SSH to the bbs is different to SSH to the cli).

... Redundant book title: DOS For Dummies

--- Mystic BBS v1.12 A49 2023/04/30 (Linux/64)
 * Origin: thE qUAntUm wOrmhOlE, rAmsgAtE, uK. bbs.erb.pw (2:250/5)
SEEN-BY: 1/120 10/0 1 18/0 25/0 21 50/109 90/1 102/401 103/1 705 105/81
SEEN-BY: 106/201 116/116 123/0 25 180 200 525 755 1185 3001 124/5016
SEEN-BY: 128/260 129/305 135/115 153/757 7715 154/10 214/22 218/0
SEEN-BY: 218/1 215 601 700 720 810 840 850 860 870 880 930 940 220/6
SEEN-BY: 221/1 6 222/2 226/30 227/114 229/110 111 112 113 206 275
SEEN-BY: 229/300 307 317 400 426 428 470 550 664 700 240/1120 250/0
SEEN-BY: 250/1 2 3 4 5 6 7 8 11 13 14 15 263/0 5 266/512 275/1000
SEEN-BY: 280/464 282/1038 291/111 292/854 301/1 113 708 320/219 322/757
SEEN-BY: 335/364 341/66 342/200 396/45 460/58 467/4 888 633/280 712/848
SEEN-BY: 712/1321 3634/0 12 27 56 57 58 119 5000/111 5001/100 5005/49
SEEN-BY: 5020/715 830 1042 4441 5030/49 5053/51 5054/8 5061/133 5075/35
SEEN-BY: 5075/128 5083/1 444
PATH: 250/5 1 3634/12 5020/1042 301/1 218/700 229/426


<< oldest | < older | list | newer > | newest >> ]

(c) 1994,  bbs@darkrealms.ca