I tried to logon to your BBS and got booted... after my first attempt...
Sup??
IB Joe
AKA Joe Schweier
SysOp of Joe's Computer & BBS
Where does it store Blocked IP addresses other than the CAN files?
* Originally in: DOVE-Net Debate
* Originally on: 06-04-17 13:41
* Originally by: IB JOE
* Originally to: Bill McGarrity
Hiya DM...
I tried to logon to your BBS and got booted... after my first attempt...
Sup??
IB Joe
AKA Joe Schweier
SysOp of Joe's Computer & BBS
This is the 2nd registered user who seems to be having issues logging into the board where it boots them if they happen to input a wrong password.
Here is my log:
+! (0003) Ib Joe FAILED Password attempt
@- 15:38 T: 18 sec
@! 15:38 Blocked IP: ???.???.???.???
I blocked the IP address here but I did check it in the IP and IP-silent.can and it's not there.
My GLOBAL settings in sbbs.ini..
TempDirectory=
HostName=
Interface=0.0.0.0
LogLevel=Debugging
BindRetryCount=2
BindRetryDelay=15
LoginAttemptDelay=5000
LoginAttemptThrottle=20
LoginAttemptHackThreshold=10
LoginAttemptFilterThreshold=10
OutgoingV4=0.0.0.0
OutgoingV6=::
LoginAttemptTempBanThreshold=20
LoginAttemptTempBanDuration=20M
Re: Re: News Alert
By: Bill McGarrity to Digital Man on Sun Jun 04 2017 18:46:00
Where does it store Blocked IP addresses other than the CAN files?
../text/ip.can
I tried to logon to your BBS and got booted... after my first attempt...
Sup??
IB Joe
AKA Joe Schweier
SysOp of Joe's Computer & BBS
This is the 2nd registered user who seems to be having issues logging into the board where it boots them if they happen to input a wrong password.
Here is my log:
+! (0003) Ib Joe FAILED Password attempt
@- 15:38 T: 18 sec
@! 15:38 Blocked IP: ???.???.???.???
I blocked the IP address here but I did check it in the IP and IP-silent.can and it's not there.
Where does it store Blocked IP addresses other than the CAN files?
../text/ip.can
Temporary bans are stored in memory (not a file), and I think that's what his user has hit.
Digital Man wrote to Bill McGarrity on 06-04-17 19:35 <=-
Read here http://wiki.synchro.net/config:sbbs.ini#global about LoginAttemptTempBanTheshhold. Yours is set to 20, so it should take 20 unique failed login attempts to trigger a temp-ban of an IP, unless
that user tried one of the names in your name.can file.
Also, you terminal server log output will have more details about the cause of the ban (not just "Blocked IP").
mark lewis wrote to Bill McGarrity on 06-05-17 00:42 <=-
On 2017 Jun 04 18:46:00, you wrote to Digital Man:
Where does it store Blocked IP addresses other than the CAN files?
in memory... there was recent but brief discussion about this... maybe
as far back as four or five months i think?
Digital Man wrote to Bill McGarrity on 06-04-17 19:35 <=-
Hiya DM...
Read here http://wiki.synchro.net/config:sbbs.ini#global about LoginAttemptTempBanTheshhold. Yours is set to 20, so it should take 20 unique failed login attempts to trigger a temp-ban of an IP, unless that user tried one of the names in your name.can file.
The user in question, IB Joe, has logged in numerous times without issue. Over the past 2 months there have been others who've said the same thing has happened, log in and use the wrong password on the first login and poof... they're history. I have set the above to 20 so I'll not have this issue. His username is not in the name.can file either.
Also, you terminal server log output will have more details about the cause of the ban (not just "Blocked IP").
Here is the log output..
6/4 03:38:25p 1488 Telnet connection accepted from: xxx.x.xxx.xx port 1411
6/4 03:38:25p 1488 Hostname: S0106bc4dfb234923.ed.xxxxxxx.net
6/4 03:38:26p Node 1 attached to local interface 192.168.1.2 port 23
6/4 03:38:26p Node 1 15:38 Sun Jun 04 2017 Node 1
6/4 03:38:26p Node 1 Telnet S0106bc4dfb234923.ed.xxxxx.net [xxx.x.x.xx]
6/4 03:38:43p Node 1 (0003) Ib Joe FAILED Password attempt
6/4 03:38:43p Node 1 !Failed login with blocked user name: Ib Joe
I checked the name.can and 'IB Joe' isn't in there. There is an entry for the letter 'i' so is that causing an issue being his login name begins with the letter I?
I checked the name.can and 'IB Joe' isn't in there. There is an entry for the letter 'i' so is that causing an issue being his login name begins with the letter I?
Not unless the entry is actually "i~", as that would block all login
names that begin with the letter 'I'.
Something in your name.can is matching the string "Ib Joe", so
perhaps just posting the contents of your name.can will help us to identify the problem.
Re: News Alert
By: Digital Man to Bill McGarrity on Tue Jun 06 2017 12:23:38
Hiya DM...
I checked the name.can and 'IB Joe' isn't in there. There is an entry for the letter 'i' so is that causing an issue being his login name begins with the letter I?
Not unless the entry is actually "i~", as that would block all login names that begin with the letter 'I'.
Nope, not there...
Something in your name.can is matching the string "Ib Joe", so
perhaps just posting the contents of your name.can will help us to identify the problem.
Here ya go...
; Enter disallowed user names (aliases) in this file
; Wildcard characters (*, ~, ^) are allowed
; Rejection message file: text/badname.msg
new
Enable
!!huawei
Digital Man wrote to Bill McGarrity on 06-06-17 21:46 <=-
Re: News Alert
By: Bill McGarrity to Digital Man on Tue Jun 06 2017 03:44 pm
Something in your name.can is matching the string "Ib Joe", so
perhaps just posting the contents of your name.can will help us to identify the problem.
Here ya go...
; Enter disallowed user names (aliases) in this file
; Wildcard characters (*, ~, ^) are allowed
; Rejection message file: text/badname.msg
new
Enable
!!huawei
^ There's your problem.
A '!' as the first char on the line negates the matching logic. So your name.can says that any name is *not* "!hauwei" is trash.
You could do huawei~ instead. Then any name containing "huawei" will be considered trash/bad.
BBS aliases already have to begin with an alphabetic character, so any alias starting with a symbol or number would not be allowed (e.g. when creating a new user account).
name.can edited and board tested... just like the doctor ordered..
Here ya go...
Daryl Stout wrote to BILL MCGARRITY <=-
Yet, I don't know where to start looking for a router that has "more ports". I do need one port for a ham radio VoIP application (Echolink), and a port for my Acronis LAN backup utility.
2) The router I have, a LinkSys WRT54G, has only 10 "port slots" available, for things like telnet, http, web, smtp, pop3, etc. Yet, Synchronet has a lot more "port options".
I originally was going to enable SSH, on port 2222 (instead of 22),
but decided not to...for 2 reasons:
1) I was getting bombarded with requests, tying up the nodes.
2) The router I have, a LinkSys WRT54G, has only 10 "port slots"
available, for things like telnet, http, web, smtp, pop3, etc. Yet, Synchronet has a lot more "port options".
Yet, I don't know where to start looking for a router that has "more ports". I do need one port for a ham radio VoIP application (Echolink),
and a port for my Acronis LAN backup utility.
Yet, I don't know where to start looking for a router that has "more ports". I do need one port for a ham radio VoIP application (Echolink), and a port for my Acronis LAN backup utility.
Flash the Linksys with DD-WRT or OpenWRT? :)
if its true that this routers nat only supports 10 slots, it appears it has t K>DMZ function which will point any incoming traffic (I believe) that is'nt K>recongnized to whatever machine you set it to point to. set your NAT K>(forwading) up for your slots 80, 23, 21, etc. (anything that your router mig K>use as configuration ports) and then set your DMZ to the BBS machine IP. then K>setup one hell of a firewall. I might be wrong on this, but it is the way I K>understand it, my router states that DMZ will forward any machine that ask fo K>a port not specified in the nat or otherwize to that machine setup as the DMZ
Netgear Nighthawk 6 is a great router that has what you want/need
thats what I have and I love it.
After all, ham radio operators are some of the most CHEAPSKATE....er, correction...FRUGAL...individuals you'll ever meet. (hi hi).
Unfortunately, I'm not electronically or programming inclined. I can
write a batchfile for the BBS...but, my programming ENDS at setting the clock on the microwave oven. If I forget how to do that, I'm going to starve to death. :P
Daryl Stout wrote to VK3JED <=-
Flash the Linksys with DD-WRT or OpenWRT? :)
I'm going to plead ignorance. I'm going to have to get assistance on this, as I have no clue what to do. I know this brand and model of
router is used for High Speed Multi-Mesh (HSMM) communications in ham radio, but I really don't want to buy a new router.
Daryl Stout wrote to KK4QBN <=-
What VK3JED (Tony) noted seems a lot simpler...but even there, I have little experience working with routers, other than the basic setup.
Daryl Stout wrote to BILL MCGARRITY <=-
Yet, I don't know where to start looking for a router that has "more ports". I do need one port for a ham radio VoIP application (Echolink), and a port for my Acronis LAN backup utility.
Flash the Linksys with DD-WRT or OpenWRT? :)
... Stick: A boomerang that doesn't work.
Stargazer wrote to Vk3jed <=-.
If he's running a WRT54g, he really needs to flash it with DD-WRT.
Works great on that router
Flash the Linksys with DD-WRT or OpenWRT? :)
If he's running a WRT54g, he really needs to flash it with DD-WRT. Works grea S>on that router
| Sysop: | Winzlo |
|---|---|
| Location: | Minnesota, USA |
| Users: | 11 |
| Nodes: | 16 (0 / 16) |
| Uptime: | 495950:18:50 |
| Calls: | 82 |
| Files: | 1,070 |
| Messages: | 287,259 |