Subj : blocked or no more free nodes!
To : Alan Ianson
From : Janis Kracht
Date : Sat Mar 28 2020 12:52 am
Hi Alan,
>I have recently put a website online with BBBS using bbbsd with http and https
> and am getting lines in my log like..
> Got HTTP from ???.???.???.???:?????, blocked or no more free nodes! Got raw
> from ???.???.???.???:?????, blocked or no more free nodes!
Both you and Jeff see this message, I think Jeff mentioned to me he sees it
often. I don't see it that often (who knows why, not as many idiots hitting my
servers??) We both use iptables to ward off jerks, I'll show you the lines I
use for iptables at the end of this message.
>I have been running telnetd, rawd, ftpd and smtpd without issues. Once I added
> http and https to my bbbsd command line I've been seeing the above. After a
> time nothing responds anymore, not telnet, not raw and not ftp.
In the past when this did happen to bbbs over here, restarting the bbbsd daemon
helped. I generally kill the daemon and restart it about every two weeks just
out of habit. To clear the whatevers, if you know what I mean :)
> Needless to say that is just not going to work. :)
Understand. I checked my inet.log and don't see any connections from
???.???.etc.
>I'm not sure what the problem or solution might be. At the moment I have taken
> http and https off my command line to run the BBS servers but I would like to
> have the website available also.
> Anyone know why this happens or what I can do to make it work better?
The first thing I do after a reboot of the _system_ is iptables -F and iptables
-X to clean out the automatically installed iptables. Then after that I send
the following commands:
REM example: iptables -A INPUT -s IP-ADDRESS -j DROP
So I kill yandex.com and also semrush.com because they hit my system every day,
and often like this:
Then I use a different line to stop idiots from smashing my HTTPD bbbs mailer
like this (two steps)
One:
sudo iptables -I INPUT -p tcp --dport 8090 -i eth0 -m state --state NEW -m
recent --set
Two:
sudo iptables -I INPUT -p tcp --dport 8090 -i eth0 -m state --state NEW -m
recent --update --seconds 60 --hitcount 2 -j DROP
8090 is the port I have always used for BBBSD. You would change that to the
port you use for bbbsd.
