• ME/paganini.bofh.team,.POSTED.agency.bbs.nz

    From Avon Kerr@21:1/5 to Richard Kettlewell on Sun Jun 2 10:13:19 2019
    Richard Kettlewell <invalid@invalid.invalid> wrote:
    For reasons related to the Cleanfeed discussion in news.software.nntp I
    had a look in alt.test. OMG what a lot of spam. I’ve aliased out the principle sources but can anyone nearer the posting sites do anything
    about it?

    Path: [..]!news.freedyn.net!paganini.bofh.team!.POSTED!replybot_v2!not-for-mail
    Path: [..]!news.netcologne.de!news.uzoreto.com!news.bbs.nz!.POSTED.agency.bbs.nz!not-for-mail


    I suspect a bbs connected via gateway software to news.bbs.nz was either looping posts from Usenet back into Usenet via the gateway or creating
    them. I think the former. I have pulled their connection and contacted the sysop.

    If anyone else can shed light on it please let me know but I’ll keep
    digging at this end

    Thanks guys.

    --
    Agency News | news.bbs.nz

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Richard Kettlewell@21:1/5 to All on Sat Jun 1 22:55:35 2019
    For reasons related to the Cleanfeed discussion in news.software.nntp I
    had a look in alt.test. OMG what a lot of spam. I’ve aliased out the principle sources but can anyone nearer the posting sites do anything
    about it?

    Path: [..]!news.freedyn.net!paganini.bofh.team!.POSTED!replybot_v2!not-for-mail Path: [..]!news.netcologne.de!news.uzoreto.com!news.bbs.nz!.POSTED.agency.bbs.nz!not-for-mail

    --
    https://www.greenend.org.uk/rjk/

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Richard Kettlewell@21:1/5 to Avon Kerr on Sun Jun 2 15:43:12 2019
    Avon Kerr <avon@bbs.nz.invalid> writes:
    Richard Kettlewell <invalid@invalid.invalid> wrote:
    For reasons related to the Cleanfeed discussion in news.software.nntp
    I had a look in alt.test. OMG what a lot of spam. I’ve aliased out
    the principle sources but can anyone nearer the posting sites do
    anything about it?

    Path: [..]!news.freedyn.net!paganini.bofh.team!.POSTED!replybot_v2!not-for-mail
    Path:
    [..]!news.netcologne.de!news.uzoreto.com!news.bbs.nz!.POSTED.agency.bbs.nz!not-for-mail

    I suspect a bbs connected via gateway software to news.bbs.nz was either looping posts from Usenet back into Usenet via the gateway or creating
    them. I think the former. I have pulled their connection and contacted the sysop.

    Ta. I’ve removed the block for .POSTED.agency.bbs.nz.

    --
    https://www.greenend.org.uk/rjk/

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ivo Gandolfo@21:1/5 to All on Tue Jun 4 21:09:15 2019
    Il 01/06/2019 23:55, Richard Kettlewell ha scritto:
    For reasons related to the Cleanfeed discussion in news.software.nntp I
    had a look in alt.test. OMG what a lot of spam. I’ve aliased out the principle sources but can anyone nearer the posting sites do anything
    about it?

    Path: [..]!news.freedyn.net!paganini.bofh.team!.POSTED!replybot_v2!not-for-mail

    This is my replybot, this bot reply on all usenet *.test and
    *.test.moderated group to original poster via email, and on own group
    the reply the article it's been propagated.

    An example? Look here: Message-ID: <qa8nh6$esd$1@paganini.bofh.team> References: <2aofce53hpo79h2nnpckh2se5he17eo2dr@4ax.com>

    I don't found any type of spam on my log's, my cleanfeed it's working
    proprerly (I have just tested it). You can give me an example please?
    M-Id or similar, just for check.

    If you considerer this spam, continue to filter my newsserver, in other
    case just advise me if this it's a problem for you ;) My email it's
    public on my website http://bofh.team/

    Sincerely

    --
    Ivo Gandolfo
    Newsmaster

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Neodome Admin@21:1/5 to Ivo Gandolfo on Tue Jun 4 19:36:09 2019
    Ivo Gandolfo <ivo.gandolfo@alice.it> wrote:
    Il 01/06/2019 23:55, Richard Kettlewell ha scritto:
    For reasons related to the Cleanfeed discussion in news.software.nntp I
    had a look in alt.test. OMG what a lot of spam. I’ve aliased out the
    principle sources but can anyone nearer the posting sites do anything
    about it?

    Path: [..]!news.freedyn.net!paganini.bofh.team!.POSTED!replybot_v2!not-for-mail

    This is my replybot, this bot reply on all usenet *.test and
    *.test.moderated group to original poster via email, and on own group
    the reply the article it's been propagated.

    An example? Look here: Message-ID: <qa8nh6$esd$1@paganini.bofh.team> References: <2aofce53hpo79h2nnpckh2se5he17eo2dr@4ax.com>

    I don't found any type of spam on my log's, my cleanfeed it's working proprerly (I have just tested it). You can give me an example please?
    M-Id or similar, just for check.

    If you considerer this spam, continue to filter my newsserver, in other
    case just advise me if this it's a problem for you ;) My email it's
    public on my website http://bofh.team/

    Sincerely


    Ivo, I would suggest for your bot to skip messages that contain Control
    header. Currently it replies to cancel messages, for example:

    <qd32ig$ih7$1@paganini.bofh.team>

    You also might want to check if it replies to messages with Approved
    header, because it probably shouldn't.

    --
    Neodome

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Richard Kettlewell@21:1/5 to Neodome Admin on Tue Jun 4 21:20:16 2019
    Neodome Admin <admin@neodome.net> writes:
    Ivo Gandolfo <ivo.gandolfo@alice.it> wrote:
    Il 01/06/2019 23:55, Richard Kettlewell ha scritto:
    For reasons related to the Cleanfeed discussion in news.software.nntp I
    had a look in alt.test. OMG what a lot of spam. I’ve aliased out the
    principle sources but can anyone nearer the posting sites do anything
    about it?

    Path:
    [..]!news.freedyn.net!paganini.bofh.team!.POSTED!replybot_v2!not-for-mail >>
    This is my replybot, this bot reply on all usenet *.test and
    *.test.moderated group to original poster via email, and on own group
    the reply the article it's been propagated.

    Responding on group is a terrible idea.

    An example? Look here: Message-ID: <qa8nh6$esd$1@paganini.bofh.team>
    References: <2aofce53hpo79h2nnpckh2se5he17eo2dr@4ax.com>

    I don't found any type of spam on my log's, my cleanfeed it's working
    proprerly (I have just tested it). You can give me an example please?
    M-Id or similar, just for check.

    Message-ID: <qctjhq$9s2$1@paganini.bofh.team>
    Message-ID: <qctjdq$vd1$1@paganini.bofh.team>
    Message-ID: <qctje7$2i0$1@paganini.bofh.team>
    Message-ID: <qctjhp$9ki$1@paganini.bofh.team>
    Message-ID: <qctjil$cf3$1@paganini.bofh.team>
    Message-ID: <qctjip$cjr$1@paganini.bofh.team>
    Message-ID: <qctjil$c5j$1@paganini.bofh.team>
    Message-ID: <qctjio$cb9$1@paganini.bofh.team>
    Message-ID: <qctjip$cjm$1@paganini.bofh.team>
    Message-ID: <qctjiq$ckj$1@paganini.bofh.team>
    Message-ID: <qctjjb$enu$1@paganini.bofh.team>
    Message-ID: <qctjip$cjv$1@paganini.bofh.team>
    Message-ID: <qctjj9$eim$1@paganini.bofh.team>
    Message-ID: <qctji2$ah3$1@paganini.bofh.team>
    Message-ID: <qctjdv$rj$1@paganini.bofh.team>
    Message-ID: <qctjj9$ego$1@paganini.bofh.team>
    Message-ID: <qctjj9$egf$1@paganini.bofh.team>
    Message-ID: <qctjjf$etn$1@paganini.bofh.team>
    Message-ID: <qctjj9$eda$1@paganini.bofh.team>
    Message-ID: <qctjj7$ed1$1@paganini.bofh.team>
    Message-ID: <qctjja$eku$1@paganini.bofh.team>
    Message-ID: <qctjhr$9um$1@paganini.bofh.team>
    Message-ID: <qctjfa$646$1@paganini.bofh.team>
    Message-ID: <qctjhv$a9v$1@paganini.bofh.team>
    Message-ID: <qctjjg$f08$1@paganini.bofh.team>
    Message-ID: <qctjjh$f19$1@paganini.bofh.team>
    Message-ID: <qctji6$b6l$1@paganini.bofh.team>
    Message-ID: <qctji4$b4u$1@paganini.bofh.team>
    Message-ID: <qctji6$b6i$1@paganini.bofh.team>
    Message-ID: <qctji6$b6j$1@paganini.bofh.team>
    Message-ID: <qctji4$b4k$1@paganini.bofh.team>
    Message-ID: <qctji0$af7$1@paganini.bofh.team>
    Message-ID: <qctji0$af5$1@paganini.bofh.team>
    Message-ID: <qctji0$af9$1@paganini.bofh.team>

    If you considerer this spam, continue to filter my newsserver, in other
    case just advise me if this it's a problem for you ;) My email it's
    public on my website http://bofh.team/

    Sincerely


    Ivo, I would suggest for your bot to skip messages that contain Control header. Currently it replies to cancel messages, for example:

    <qd32ig$ih7$1@paganini.bofh.team>

    You also might want to check if it replies to messages with Approved
    header, because it probably shouldn't.

    --
    https://www.greenend.org.uk/rjk/

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ivo Gandolfo@21:1/5 to All on Wed Jun 5 19:24:29 2019
    Il 04/06/2019 22:20, Neodome Admin <admin@neodome.net> ha scritto:
    [cut]

    Responding on group is a terrible idea.


    This point is debatable if you want, some people do not put real email
    or a reply-to header, so from my point of view it is useful.
    Furthermore, the bot only sends one response per post, so it should not generate a flood.

    [cut]
    Message-ID: <qctjhq$9s2$1@paganini.bofh.team>
    Message-ID: <qctjdq$vd1$1@paganini.bofh.team>
    [cut]


    Sorry about that, but from point of view of the bot this message's it's
    not spam. My bot use spamassassin and cleanfeed for check this, and
    passing this message to them don't generate enought score (only 0.3, min
    score for filtering it's 2.5) :/ Any idea to check them?


    Il 04/06/2019 22:20, Richard Kettlewell ha scritto:

    Ivo, I would suggest for your bot to skip messages that contain Control
    header. Currently it replies to cancel messages, for example:

    <qd32ig$ih7$1@paganini.bofh.team>

    You also might want to check if it replies to messages with Approved
    header, because it probably shouldn't.


    Uops! yeah, take that. You have found a bug. A little mistake on header
    check, a little "\" typo error. Now the bot don't reply to Control
    message's ^_^" If u find another bug's please report them to me, ty :)


    Sincerely


    --
    Ivo Gandolfo
    Newsmaster

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Elephant Man@21:1/5 to All on Thu Jun 6 16:58:19 2019
    Le 05/06/2019 à 19:24, Ivo Gandolfo a écrit :

    Sorry about that, but from point of view of the bot this message's it's
    not spam. My bot use spamassassin and cleanfeed for check this, and
    passing this message to them don't generate enought score (only 0.3, min score for filtering it's 2.5) :/ Any idea to check them?

    On fr.test, you post the same text over and over, how do you call that ?

    "This bot has been created to spite Olivier Miakinen :) Thank's for the
    idea and betatesting ^_^

    [quote] Date: Mon, 15 Oct 2018 12:53:42 +0200
    Il semblerait qu'on n'ait plus de robot « floodeur » qui réponde dans
    le groupe à chaque message de test? Si c'est vrai, voilà une excellente nouvelle. Les seuls robots vraiment utiles pour tester la propagation sont
    ceux qui répondent par courriel (si tant est qu'ils ne le font pas plus
    d'une fois par jour, pour éviter une attaque de flood justement). "

    news:4rqBhZ4GgdxGLciNxry469bFLfM
    news:KrCeOz36Tsor8NEFOH7PTGJTmLg
    news:1TZOD4UEHmjJVCcMY6e5EqeTSus
    news:HAa7Yt_BhMTqGWSIUBGDvLc1ybo
    news:bDTILRYjVhvWKBFHatEWTPJnZv4
    news:uZIEOrnpheun75QowLiG-KjM7IQ
    news:2C0yFXl0CDaxMRiBokj5uvdvxls
    news:itcpzZLOWQ9b_yzoUtUvMo1VqbE
    news:40p6FFEguRKlaw-NKOfE7X6X_00
    news:GecnW2kX7dxfRkS9aEk1Iuiqfnw
    Etc.

    This is clearly abuse, change you methods.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ivo Gandolfo@21:1/5 to All on Thu Jun 6 19:35:48 2019
    Il 06/06/2019 18:58, Elephant Man ha scritto:
    Le 05/06/2019 à 19:24, Ivo Gandolfo a écrit :
    [cut]
    This is clearly abuse, change you methods.

    Uhmmm... ok.

    ivo@lapdog:~$ ssh paganini
    Connection to 2001:470:b493::1
    Using username "ivo".
    ivo@2001:470:b493::1's password:
    Linux paganini.bofh.team 3.16.0-4-amd64 #1 SMP Debian 3.16.43-2
    (2015-04-15) x86_64 GNU/Linux
    hostname : paganini.bofh.team
    eth0 IPv4 : 94.23.43.182
    eth0 IPv6 : 2001:470:b493::1

    Last login: Wed Jun 5 19:13:39 2019 from 2001:470:25:2eb::1002
    ivo@paganini:~$ sudo /etc/init.d/autoreplynntpbot stop
    [sudo] password for ivo:
    [ ok ] Stopping autoreplynntpbot (via systemctl): autoreplynntpbot.service. ivo@paganini:~$ exit
    logout
    Connection closed by remote host.
    ivo@lapdog:~$

    Done.

    --
    Ivo Gandolfo
    Newsmaster

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From =?UTF-8?Q?Julien_=c3=89LIE?=@21:1/5 to All on Thu Jun 6 20:22:53 2019
    Hi all,

    Responding on group is a terrible idea.

    This point is debatable if you want, some people do not put real email
    or a reply-to header, so from my point of view it is useful.
    Furthermore, the bot only sends one response per post, so it should not generate a flood.

    Just a suggestion: why not send only 1 message per day in the test
    newsgroup summarizing all received articles within the day?

    Maybe it would satisfy the needs of both parties :)

    --
    Julien ÉLIE

    « Qui joue des flûtes perd sa hutte ! » (Mme Agecanonix)

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ivo Gandolfo@21:1/5 to All on Thu Jun 6 20:33:28 2019
    Il 06/06/2019 20:22, Julien ÉLIE ha scritto:
    [cut]
    Maybe it would satisfy the needs of both parties :)


    See <qdbitl$knf$1@paganini.bofh.team>

    Sincerely

    --
    Ivo Gandolfo
    Newsmaster

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Elephant Man@21:1/5 to All on Thu Jun 6 19:35:06 2019
    Le 06/06/2019 à 19:35, Ivo Gandolfo a écrit :

    ivo@lapdog:~$ ssh paganini
    Connection to 2001:470:b493::1
    Using username "ivo".
    ivo@2001:470:b493::1's password:
    Linux paganini.bofh.team 3.16.0-4-amd64 #1 SMP Debian 3.16.43-2
    (2015-04-15) x86_64 GNU/Linux
    hostname : paganini.bofh.team
    eth0 IPv4 : 94.23.43.182
    eth0 IPv6 : 2001:470:b493::1

    Last login: Wed Jun 5 19:13:39 2019 from 2001:470:25:2eb::1002 ivo@paganini:~$ sudo /etc/init.d/autoreplynntpbot stop
    [sudo] password for ivo:
    [ ok ] Stopping autoreplynntpbot (via systemctl): autoreplynntpbot.service. ivo@paganini:~$ exit
    logout
    Connection closed by remote host.
    ivo@lapdog:~$

    Done.

    Thank you.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From =?UTF-8?Q?Julien_=c3=89LIE?=@21:1/5 to All on Thu Jun 6 21:44:10 2019
    Maybe it would satisfy the needs of both parties :)

    See <qdbitl$knf$1@paganini.bofh.team>

    Then let's wait for the next reboot of your news server :)

    --
    Julien ÉLIE

    « Qui joue des flûtes perd sa hutte ! » (Mme Agecanonix)

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ivo Gandolfo@21:1/5 to All on Thu Jun 6 23:18:13 2019
    Il 06/06/2019 21:44, Julien ÉLIE ha scritto:

    Then let's wait for the next reboot of your news server :)


    ivo@paganini:~$ uptime
    23:10:43 up 1514 days, 21:39, 12 users, load average: 1,99, 1,88, 1,79

    never rebooted when installed :)

    Sincerely

    --
    Ivo Gandolfo
    Newsmaster

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From yamo'@21:1/5 to All on Thu Jun 20 10:51:15 2019
    Hi,
    Ivo Gandolfo a tapoté le 06/06/2019 23:18:
    Il 06/06/2019 21:44, Julien ÉLIE ha scritto:

    Then let's wait for the next reboot of your news server :)


    ivo@paganini:~$ uptime
    23:10:43 up 1514 days, 21:39, 12 users, load average: 1,99, 1,88, 1,79

    never rebooted when installed :)

    Sincerely



    Your server may have rebooted...

    I had to stop the incoming feed!



    --
    Stéphane

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ivo Gandolfo@21:1/5 to All on Thu Jun 20 19:30:09 2019
    Il 20/06/2019 10:51, yamo' ha scritto:
    Your server may have rebooted...

    I had to stop the incoming feed!


    You got mail, check him ;)

    Sincerely

    --
    Ivo Gandolfo
    Newsmaster

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)