Well, I figured out a workaround. I put the original guest account
back on, but added a "funky" password, so folks couldn't access it.
Then, I created a NEW account with the name of GUEST USER, and BROWSE as
the password. The website works again.

Plus, I added "guest" and "anonymous" in the user.can file. That has
cut down on these malware bots, as it were. If I see someone doing a
repeated connect without a logon...or try an anonymous logon, I ban that
IP.

Daryl

===
þ OLX 1.53 þ The wheel's spinning, but the hamster's dead.
--- SBBSecho 3.06-Win32
* Origin: FIDONet: The Thunderbolt BBS - tbolt.synchro.net (1:19/33)

On 02-28-19 11:16, Daryl Stout wrote to TONY LANGDON <=-

Well, I figured out a workaround. I put the original guest account
back on, but added a "funky" password, so folks couldn't access it.
Then, I created a NEW account with the name of GUEST USER, and BROWSE
as the password. The website works again.

Plus, I added "guest" and "anonymous" in the user.can file. That has
cut down on these malware bots, as it were. If I see someone doing a repeated connect without a logon...or try an anonymous logon, I ban
that IP.

As I said, we each have to find the balance for our systems. FOr me, anonymous
FTP downloads are too important to give up. It's an easy way to distribute things like infopacks.


... Does 'virgin wool' come from sheep the shepherd hasn't caught yet?
=== MultiMail/Win v0.51
--- SBBSecho 3.03-Linux
* Origin: Freeway BBS Bendigo,Australia freeway.apana.org.au (3:633/410)

Tony,

As I said, we each have to find the balance for our systems. FOr me, anonym
FTP downloads are too important to give up. It's an easy way to distribute TL>things like infopacks.

Well, I re-enabled the deal, but so far (knock on wood), I haven't
been slammed by them on the FTP deal. But, I am getting a bunch trying
to do repeated connects without a logon...those go into the ip.can file.

Also, I figured out how to modify the CAPTCHA deal from Lord
Blackfair, and I created (with a random number program for windows), 96 separate files, with different numbers...that change every 15 minutes
around the clock. Basically, one sequence is only valid for a 15 minute
block during the day, then it doesn't come up again until 24 hours
later.

That's like the "new bathroom policy"...which dictates that "Too much
time is being spent by employees in the washroom. We will now have
bathroom breaks, according to the first letter of your last name. If you
are unable to go, you'll have to wait until your turn comes up again.
<G> -- you and I will have to wait awhile...especially me. :P

Daryl

===
þ OLX 1.53 þ LaQuinta: Spanish for "Next To Denny's".
--- SBBSecho 3.06-Win32
* Origin: FIDONet: The Thunderbolt BBS - tbolt.synchro.net (1:19/33)

On 03-01-19 15:13, Daryl Stout wrote to TONY LANGDON <=-

Well, I re-enabled the deal, but so far (knock on wood), I haven't
been slammed by them on the FTP deal. But, I am getting a bunch trying
to do repeated connects without a logon...those go into the ip.can
file.

Cool. :)

Also, I figured out how to modify the CAPTCHA deal from Lord
Blackfair, and I created (with a random number program for windows), 96 separate files, with different numbers...that change every 15 minutes around the clock. Basically, one sequence is only valid for a 15 minute block during the day, then it doesn't come up again until 24 hours
later.

Interesting.

That's like the "new bathroom policy"...which dictates that "Too much time is being spent by employees in the washroom. We will now have bathroom breaks, according to the first letter of your last name. If
you are unable to go, you'll have to wait until your turn comes up
again. <G> -- you and I will have to wait awhile...especially me. :P

Now you're taking the piss LOL


... The truth will set you free. But first it'll piss you off.
=== MultiMail/Win v0.51
--- SBBSecho 3.03-Linux
* Origin: Freeway BBS Bendigo,Australia freeway.apana.org.au (3:633/410)

Tony,

Well, I re-enabled the deal, but so far (knock on wood), I haven't been slammed by them on the FTP deal. But, I am getting a bunch trying to do repeated connects without a logon...those go into the ip.can file.

Cool. :)

And, if I see entries on the email deal from a blacklisted server, I
block that IP as well.

Plus, I place a wildcard (asterisk) in the last character of the IP.
While there might be a remote chance that it might block a legitimate
user or two, I feel there are more bots out there than legitimate users.

Also, I use the Peerblock Utility...I think I pay $10 US Funds a year
for data files updates. That blocks several countries known for bots,
and creation of worms, malware, etc.

Also, I figured out how to modify the CAPTCHA deal from Lord Blackfair, and I created (with a random number program for windows),

96

separate files, with different numbers...that change every 15 minutes around the clock. Basically, one sequence is only valid for a 15

minute

block during the day, then it doesn't come up again until 24 hours later.

Interesting.

It wasn't hard to do, but the prep work for editing the files, and
creating the batchfiles (96 in all), was tedious. But, it was the next
best thing to having 1440 (one for every minute of the day). Yet, it
ensures that the number doesn't stay the same. When I ran Virtual
Advanced (VADV32), the CAPTCHA done by Steve Winn created a random
string each time a connect occurred.

Now, while entering an incorrect string keeps them from getting to the
logon prompt, it doesn't disconnect them...but, from what I've seen, the
bots disconnect on their own...as if there's a time limit to get a
connection, and enter the system, as it were.

Now you're taking the piss LOL

One local ham radio operator, who's also in the Air Force, is not only
a weather geek, but he KNOWS the meteorological details, and probably
can make forecasts. He's one of the best Net Controls for Arkansas Skywarn...and is a great guy to be around.

Shane, WX0X (we call him "the weather ox" <G>), was Net Control that
night the nearly EF-5 tornado slammed into the communities of Mayflower
and Vilonia, Arkansas, back in late April, 2014 (the storm damage
survey estimated winds of 190 mph...the EF-5 threshold is 200 mph). The National Weather Service in Little Rock had a TORNADO EMERGENCY declared
for the areas (not just a Tornado Warning)...and he said "I don't want
my spotters near this one...it's a bad one). Plus, like so many other
tornadoes in Arkansas, it was after dark.

But, since we're talking p!$$ <G>, one night at his home, he was doing
a club traffic net...having the mic in one hand, and holding his infant
son (I think he's almost 10 now) in the other. Well, his son didn't like
the idea that "Daddy wasn't giving him full attention", and so, he
proceeded to urinate all down Daddy's left arm!! He had to call his wife
and parents (who were there visiting) for some help. :P

He quipped "It's better to be pissed off than pissed on, and I'll bet
no other net control station has had that happen to them!!". <G>

Sadly, I heard from the grapevine that his wife divorced him awhile back...and "he got the raw end of the deal". :(

... The truth will set you free. But first it'll piss you off.

Sounds like my anger management class...it's pissing me off. Can you
say "D@MN !+"?? <G>

Daryl

===
þ OLX 1.53 þ May all your children be born naked.
--- SBBSecho 3.06-Win32
* Origin: FIDONet: The Thunderbolt BBS - tbolt.synchro.net (1:19/33)

On 03-02-19 11:06, Daryl Stout wrote to TONY LANGDON <=-

And, if I see entries on the email deal from a blacklisted server, I block that IP as well.

Hmm, what do you mean there?

Plus, I place a wildcard (asterisk) in the last character of the IP. While there might be a remote chance that it might block a legitimate
user or two, I feel there are more bots out there than legitimate
users.

Yeah, getting into problematic territory there. Occasionally that may be valid
(e.g. a poorly administered network that's directly connected, but more often the IPs belong to unrelated users of an ISP.

Also, I use the Peerblock Utility...I think I pay $10 US Funds a year for data files updates. That blocks several countries known for bots,
and creation of worms, malware, etc.

Yeah I'm in 2 minds about country blocks - on one hand, there are countries known to cause issues, OTOH, there's a chance there may be legit users. But using geolocation data at least minimises the risk of blocking legitimate users
from other countries. IP allocations on this side of the world are all over the place, so a geolocation block is the safest way to block a specific
ountry.

One local ham radio operator, who's also in the Air Force, is not
only a weather geek, but he KNOWS the meteorological details, and
probably can make forecasts. He's one of the best Net Controls for Arkansas Skywarn...and is a great guy to be around.

Old story now, you used it last year. ;)



... But if I kill him, it would start a war.
=== MultiMail/Win v0.51
--- SBBSecho 3.03-Linux
* Origin: Freeway BBS Bendigo,Australia freeway.apana.org.au (3:633/410)

On 03-02-19 11:06, Daryl Stout wrote to TONY LANGDON <=-

And, if I see entries on the email deal from a blacklisted server, I block that IP as well.

Hmm, what do you mean there?

I have several blacklisted server databases...such as:

1) bl.csma.biz
2) bl.spamcop.net
3) blackholes.mail-abuse.org
4) spam.dnsbl.sorbs.net
5) list.dsbl.org
6) psbl.surriel.com
7) relays.ordb.org
8) sbl.spamhaus.org
9) sbl-xbl.spamhaus.org
10) spamcop.net
11) zen.spamhous.org

Several of those were when I ran the FireTrust email deal along with MailWasher Pro for Windows. It really cut down on the spam. I also use
Spam Assassin over here.

Yeah, getting into problematic territory there. Occasionally that may be va
(e.g. a poorly administered network that's directly connected, but more ofte
the IPs belong to unrelated users of an ISP.

Well, I've seen several try from one address...I block it, then I get
hit again...the only change is the last digit on the IP.

Yeah I'm in 2 minds about country blocks - on one hand, there are countries TL>known to cause issues, OTOH, there's a chance there may be legit users. But
using geolocation data at least minimises the risk of blocking legitimate us
from other countries. IP allocations on this side of the world are all over
the place, so a geolocation block is the safest way to block a specific TL>ountry.

I'd rather be safe than sorry.

Old story now, you used it last year. ;)

My memory is awful...that's what 2 lightning strikes and a concussion
over the years will do to you.

Daryl

===
þ OLX 1.53 þ Lead me not into temptation -- I'll find my own way.
--- SBBSecho 3.06-Win32
* Origin: FIDONet: The Thunderbolt BBS - tbolt.synchro.net (1:19/33)

Tony,

Yep that's not going to help, and it doesn't help that I have recognition th
is off the scale - one of my (many!) freaky quirks. :)

Like going <SLAP!> to twits like me, then sprinting away. <G>

Also, I'm no longer doing weather on ANY of my ham radio nets (what
few I have left). I'm not adding any new nets, weather or
otherwise...and if anything, am decreasing the number of nets that I'm
involved with. I also will be changing my callsign in about 3 weeks. I
won't post it until it is official, but I still have a lot of changes to
make. I never thought I'd change this one, but circumstances dictate
that I must.

Daryl

===
þ OLX 1.53 þ Truer words were never spoken; except in a courtroom.
--- SBBSecho 3.06-Win32
* Origin: FIDONet: The Thunderbolt BBS - tbolt.synchro.net (1:19/33)

On 03-05-19 13:43, Daryl Stout wrote to TONY LANGDON <=-

Tony,

Yep that's not going to help, and it doesn't help that I have recognition

h

is off the scale - one of my (many!) freaky quirks. :)

Like going <SLAP!> to twits like me, then sprinting away. <G>

Yeah, coz I can. :P

Also, I'm no longer doing weather on ANY of my ham radio nets (what
few I have left). I'm not adding any new nets, weather or
otherwise...and if anything, am decreasing the number of nets that I'm involved with. I also will be changing my callsign in about 3 weeks. I won't post it until it is official, but I still have a lot of changes
to make. I never thought I'd change this one, but circumstances dictate that I must.

Wow, there's some huge changes! :) I haven't checked into the WX net for a while, mainly with life getting in the way, but I may get the odd Sunday morning when I'm not training. The fire training has moved to Monday evenings,
but that's simply opened the door for a track session instead, so there will be
some form of Sunday training most weeks. :) I've also got the last few meets for the season to finish off. :)


... Chain Tagline Stolen 4 Times (add one when you steal it)
=== MultiMail/Win v0.51
--- SBBSecho 3.03-Linux
* Origin: Freeway BBS Bendigo,Australia freeway.apana.org.au (3:633/410)

Tony,

is off the scale - one of my (many!) freaky quirks. :)

Like going <SLAP!> to twits like me, then sprinting away. <G>

Yeah, coz I can. :P

You need to demonstrate that...you're getting rusty. <g,d,r>

Wow, there's some huge changes! :) I haven't checked into the WX net for a TL>while, mainly with life getting in the way, but I may get the odd Sunday TL>morning when I'm not training. The fire training has moved to Monday evenin
but that's simply opened the door for a track session instead, so there will
some form of Sunday training most weeks. :) I've also got the last few meet
for the season to finish off. :)

I was BURNED OUT on doing weather...it got to me a drudgery of work,
and I got tired of trying to convince folks that I am NOT a
meteorologist, but an Amateur Weather Enthusiast. However, I do know
enough to be dangerous...and I *DID* stay at a Holiday Inn Express last
night!! (hi hi). Never mind the suffix of the current callsign (DER)
made me look like a doofus (and some people say I am...but what they
think of me is none of my business).

Besides, in the U.S. and its territories, folks can go to weather.gov,
and enter their zip code, then click GO -- to get a 7 day point
forecast for their area from the National Weather Service...along with
links to any current watches, warnings, or advisories, in effect.

But, I figured I had better make changes, before I got to total
burnout, and quit the hobby forever.

... Chain Tagline Stolen 4 Times (add one when you steal it)

How about this one??

Daryl, WX1DER (at least until March 26).
===
þ OLX 1.53 þ Chain Lightning: For when you can't stop with one bolt.
--- SBBSecho 3.06-Win32
* Origin: FIDONet: The Thunderbolt BBS - tbolt.synchro.net (1:19/33)

On 03-06-19 13:41, Daryl Stout wrote to TONY LANGDON <=-

Tony,

is off the scale - one of my (many!) freaky quirks. :)

Like going <SLAP!> to twits like me, then sprinting away. <G>

Yeah, coz I can. :P

You need to demonstrate that...you're getting rusty. <g,d,r>

Plenty of results on mastersrankings.com as proof. :P

I was BURNED OUT on doing weather...it got to me a drudgery of work,
and I got tired of trying to convince folks that I am NOT a
meteorologist, but an Amateur Weather Enthusiast. However, I do know enough to be dangerous...and I *DID* stay at a Holiday Inn Express last night!! (hi hi). Never mind the suffix of the current callsign (DER)
made me look like a doofus (and some people say I am...but what they
think of me is none of my business).

That's a good reason to quit and move on. Sounds like time for a change. :)

But, I figured I had better make changes, before I got to total
burnout, and quit the hobby forever.

Good move. Look after yourself and enjoy life. :)

===
þ OLX 1.53 þ Chain Lightning: For when you can't stop with one bolt.

Shocking! :P


... [COUPON] Good for one FREE Tagline! [COUPON]
=== MultiMail/Win v0.51
--- SBBSecho 3.03-Linux
* Origin: Freeway BBS Bendigo,Australia freeway.apana.org.au (3:633/410)