home bbs files messages ]

Just a sample of the Echomail archive

Cooperative anarchy at its finest, still active today. Darkrealms is the Zone 1 Hub.

   BBBS.ENGLISH      The International BBBS Support Echo      2,762 messages   

[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]

   Message 1,335 of 2,762   
   Janis Kracht to Jeff Smith   
   Telnet Login Attacks?   
   11 May 16 12:29:22   
   
   Hi Jeff,   
      
   >> Yeah, I think that this is a problem for every one of us that runs a   
   >> BBS.  It got to the poing where I have inbound telnet and binkp   
   >> connections running on only a certain group of nodes and web services   
   >> running on another group of nodes.   
      
      
   > I posted the above message shortly after I setup BBBS and noticed a rash   
   > of "root" and "sysop" login attempts. As well as DOS (Denial of Service)   
   > attempts by trying to login to all available nodes from the same IP. I   
   > quickly configured BBBS to reject logins using invvalid user info. As well   
   > as blocking DOS Ip's for a time. At one point I had some 5000 IP's that   
   > were being blocked. That type of activity has dimished considerably over   
   > the last year.   
      
      
   These are the lines I use for iptables under linux to keep the buggers away   
   from my bbbs daemons.   
      
   Note that these lines wrap on this screen but should be entered on one line.   
   You enter in two lines per port, first one (#1 below), followed by the second   
   line (#2 below) for each port.   
      
   You change the port where necessarey (i.e., 8080 for WWW if that's what you   
   use for your BBBSD web server, etc.) or to add additional port.   
      
   In the second line (#2 below) you can change the seconds to a higher or lower   
   number, and number of hits iptables counts before it drops the connection.   
      
   ====cut here====   
      
   1)sudo iptables -I INPUT -p tcp --dport 23 -i eth0 -m state --state NEW -m   
    recent --set   
      
   2)sudo iptables -I INPUT -p tcp --dport 23 -i eth0 -m state --state NEW -m   
    recent --update --seconds 60 --hitcount 4 -j DROP   
      
   Simply repeat each of the above to lines for different ports that you want   
   iptables to take care of.   
      
   Additonal Commands:   
      These two commands will flush your iptables filewall, and   
      remove all currently active rules. I've numbered them #3 and #4 for   
      clarity but you can use them at any time.  Again, enter #3 then #4.   
      
   3)sudo iptables -F   
   4)sudo iptables -X   
      
   If you reboot, you will have to set iptables lines again as in #1 and #2.   
      
   To look at what you have set currently, you can type: 5)sudo iptables -L   
      
   ====cut here====   
      
   Hope this helps anyone looking for help with marauders on BBBS :)   
      
   Take care,   
   Janis   
      
   --- BBBS/Li6 v4.10 Dada-2   
    * Origin: Prism bbs (1:261/38)   

[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]


(c) 1994,  bbs@darkrealms.ca