Subj : Re: SSH...
To : Bucko
From : Charles Blackburn
Date : Sun Oct 09 2022 08:28 am
Re: Re: SSH...
By: Bucko to Charles Blackburn on Sat Oct 08 2022 15:21:40
Bu> On 08 Oct 2022, Charles Blackburn said the following...
CB>> to be honest, i block everything on mine by default and let only US,UK,CA,DE and a couple of others in.
CB>> in fact just had a series of emails with the guy that sorts out the IPV6 list cus he's in the netherlands and couldn't
CB>> connect LMAO... I wonder why (outside of the fact that the delegation changed after the stupid hurricane).
CB>> he said "little strict for fido"... i'm like yup it is, but it's also
CB>> the pains of having an open 23 port lol
CB>> that said. I cut down my bot rate by about 99 percent... I still get them through occasionally but not 15 a second
CB>> like it got to at one point.
Bu> You know the more you talk, the more I am starting to agree with you.. For the few calls I get from overseas, it might be
Bu> worth the cutting off of everyone except for a few. I understand VPN's are still an issue but hey a few here and there are
that's the funy thing, you don't need to block a ton of places. that's all i drop specifically. i would just try starting with
the "usual suspects" then add to that if you need to. you would be surprised how much crap comes out of just this lot.
$IPT -A INPUT -m geoip -p tcp --dport 23 --src-cc RU,CN,IN,KR,KP,TW,BO,JP,BR,IT,PK,LV,TR -j DROP
Bu> ok. Plus it will help my CNet Amiga board because TelnetD which emulates a modem, can get overrun by bots and just ignore
Bu> all other incoming until it is rebooted.. Gonna start playing around with all this info.. :) Appreciate it...
yea that was pretty much the issue i had.. of course, i just increased the number of nodes and they just followed. I could use fail2ban, but that's always been a pain in the arse for me to setup. this way, if anything gets through I just manually go in and add an iptables line for that subnet.
Bu> ... What does it mean to pre-board? Do you get on before you get on?
would that be like precome? where you get off before you actually get off ? LOL
regards
Charles Blackburn
===
Charles Blackburn
The F.B.O BBS 21:1/221 618:250/36
bbs.thefbo.us IPV4/V6
DOVE-Net FSX-Net MicroNET USENET
... To a friends' house, the road is never long.
--- SBBSecho 3.15-Linux
* Origin: The FBO BBS - bbs.thefbo.us (21:1/221)
