Digital Man wrote to Patch <=-

Doesn't sound like it would be too hard. I sometimes accidentally try
to login to my own board as "root" though and wouldn't want to have my
own IP banned! You probably want something a little less aggressive.

I think a temporary ban would be good, if possible, so if you do happen to lock
yourself out, you just have to wait an hour or however long the ban is for, then try again. Also stops innocent people being locked out, because they just
inherited a blacklisted IP. The aim would be to stop the scripts hammering away, while not overly inconveniencing innocent users.


... A file cabinet is a place where papers get lost alphabetically. --- MultiMail/Win32 v0.49
þ Synchronet þ Freeway BBS in Bendigo, Australia.


--- InterEcho 1.20
* Origin: Poseidon SoftWorx, Southaven MS, U.S.A. (21:2/136)

Re: Re: Suggestion for SynchroNet
By: Vk3jed to Digital Man on Tue May 10 2016 12:30 pm

I think a temporary ban would be good, if possible, so if you do happen to lock yourself out, you just have to wait an hour or however long the ban is for, then try again. Also stops innocent people being locked out, because they just inherited a blacklisted IP. The aim would be to stop the scripts hammering away, while not overly inconveniencing innocent users.

There ya go!

Maybe have a way to make a temporary ban into a permanent one? So that you can
get yourself back into your system without the bots or potential hackers?


_v_
ooO(# .)Ooo
=-=Patch=-=

---------------------------------------------------------------------------
= Return To The Lair of the Wolverine = Telet:r2lotw.synchro.net =
= Discord Global BBS Community = http://discord.gg/0yCxVosom5t6QNk5 =
= COMING SOON - R2LOTW The Companion Web Site! =

---
þ Synchronet þ Return to The Lair of the Wolverine BBS | telnet:r2lotw.synchro
net | Messages,


--- InterEcho 1.20
* Origin: Poseidon SoftWorx, Southaven MS, U.S.A. (21:2/136)

Patch wrote to Vk3jed <=-

Maybe have a way to make a temporary ban into a permanent one? So that you can get yourself back into your system without the bots or
potential hackers?

A lot of bots run on hijacked machines, which are often on dynamic IPs, so permanent bans aren't helpful here either. If the machine is on the same IP and still infected, it will simply trigger a new ban.


... All wiyht. Rho sritched mg kegtops awound? --- MultiMail/Win32 v0.49
þ Synchronet þ Freeway BBS in Bendigo, Australia.


--- InterEcho 1.20
* Origin: Poseidon SoftWorx, Southaven MS, U.S.A. (21:2/136)

Re: Re: Suggestion for SynchroNet
By: Vk3jed to Patch on Tue May 10 2016 10:03 pm

A lot of bots run on hijacked machines, which are often on dynamic IPs, so permanent bans aren't helpful here either. If the machine is on the same IP and still infected, it will simply trigger a new ban.

A very good point. So how do we out-smart the hijacked machines?

Temp ban to the whole subset?

If the bot doesn't receive a reply, it should move on. How can we make the bot
believe that there's nothing for it to communicate with and move on to someone
else?


_v_
ooO(# .)Ooo
=-=Patch=-=

---------------------------------------------------------------------------
= Return To The Lair of the Wolverine = Telet:r2lotw.synchro.net =
= Discord Global BBS Community = http://discord.gg/0yCxVosom5t6QNk5 =
= COMING SOON - R2LOTW The Companion Web Site! =

---
þ Synchronet þ Return to The Lair of the Wolverine BBS | telnet:r2lotw.synchro
net | Messages,


--- InterEcho 1.20
* Origin: Poseidon SoftWorx, Southaven MS, U.S.A. (21:2/136)

Patch wrote to Vk3jed <=-

Re: Re: Suggestion for SynchroNet
By: Vk3jed to Patch on Tue May 10 2016 10:03 pm

A lot of bots run on hijacked machines, which are often on dynamic IPs, so permanent bans aren't helpful here either. If the machine is on the same IP and still infected, it will simply trigger a new ban.

A very good point. So how do we out-smart the hijacked machines?

Temp ban to the whole subset?

If the bot doesn't receive a reply, it should move on. How can we make the bot believe that there's nothing for it to communicate with and
move on to someone else?

Well, a temporary ban should be enough. If it's still banging away at you an hour later, another temporary ban will be placed on it.


... A Freudian slip - when you say one thing but mean your mother. --- MultiMail/Win32 v0.49
þ Synchronet þ Freeway BBS in Bendigo, Australia.


--- InterEcho 1.20
* Origin: Poseidon SoftWorx, Southaven MS, U.S.A. (21:2/136)

Re: Re: Suggestion for SynchroNet
By: Vk3jed to Patch on Wed May 11 2016 12:06 pm

If the bot doesn't receive a reply, it should move on. How can we make the bot believe that there's nothing for it to communicate with and move on to someone else?

Well, a temporary ban should be enough. If it's still banging away at you an hour later, another temporary ban will be placed on it.

I likes it ...

Just something that stops bots or physical people from scanning for open IP ports (ex. war dialing) to see what they can get into.


_v_
ooO(# .)Ooo
=-=Patch=-=

---------------------------------------------------------------------------
= Return To The Lair of the Wolverine = Telet:r2lotw.synchro.net =
= Discord Global BBS Community = http://discord.gg/0yCxVosom5t6QNk5 =
= COMING SOON - R2LOTW The Companion Web Site! =

---
þ Synchronet þ Return to The Lair of the Wolverine BBS | telnet:r2lotw.synchro
net | Messages,


--- InterEcho 1.20
* Origin: Poseidon SoftWorx, Southaven MS, U.S.A. (21:2/136)

Re: Re: Suggestion for SynchroNet
By: Patch to Vk3jed on Wed May 11 2016 10:31 am

Well, a temporary ban should be enough. If it's still banging away at you an hour later, another temporary ban will be placed on it.

I likes it ...

Just something that stops bots or physical people from scanning for open IP ports (ex. war dialing) to see what they can get into.

you are on the internet. nothing will stop this except NOT being on the internet. ---
þ Synchronet þ ::: BBSES.info - free BBS services :::


--- InterEcho 1.20
* Origin: Poseidon SoftWorx, Southaven MS, U.S.A. (21:2/136)

Patch wrote to Vk3jed <=-

I likes it ...

Just something that stops bots or physical people from scanning for
open IP ports (ex. war dialing) to see what they can get into.

Seems to be the best balance between stopping bots and accidentally locking out
legit IPs (including yourself!). :)


... We got a situation where someone's got a button connected to a bomb! --- MultiMail/Win32 v0.49
þ Synchronet þ Freeway BBS in Bendigo, Australia.


--- InterEcho 1.20
* Origin: Poseidon SoftWorx, Southaven MS, U.S.A. (21:2/136)