• Busy Nodes?

    From Jeff Smith@1:282/1031 to All on Sat Apr 13 18:18:50 2019
    Hello There,

    Lately I have been getting "400 Sorry, no more free nodes. Try again later" rather frequently from BBBS. I currently run the 22 node version of BBBS. I am thinking I am just getting spambot'ed. Although, (It may not be related) I did
    perform a recent BBBS upgrade. Short of restarting BBBS, is there a way to clear the nodes (I.E delete node busy files) without the necessity to restart BBBS?

    I am using iptables to manage inbound connections and have for some time now. The free nodes issue has just been a recent occurrence I.E., the last couple three weeks. In checking I don't see a sudden increase in IP activity.

    I have had four new BBS users create accounts in the last week. Something I am always happy to see. :-)


    Jeff

    --- BBBS/Li6 v4.10 Toy-4
    * Origin: Fidoneet: The Ouija Board - Anoka, MN -bbs.ouijabrd.net (1:282/1031)
  • From Janis Kracht@1:261/38 to Jeff Smith on Sun Apr 14 12:31:00 2019
    Hi Jeff,

    Lately I have been getting "400 Sorry, no more free nodes. Try again later"
    rather frequently from BBBS. I currently run the 22 node version of BBBS. I am >thinking I am just getting spambot'ed. Although, (It may not be related) I di
    perform a recent BBBS upgrade. Short of restarting BBBS, is there a way to clear the nodes (I.E delete node busy files) without the necessity to restart BBBS?

    Is it from someone like Yandex that fills up your nodes? That started happening here.. so I use this line to keep them off the bbs nodes:

    iptables -A OUTPUT -p tcp -m string --string "block-me.com" --algo kmp -j REJECT

    That is all one line, and of course you change "block-me.com" to the name of the site that is nailing your system... works well here. It returns "port unreachable" to the bot... You should see the site name somewhere in your main/inet.log ... that's how I found yandex.

    I am using iptables to manage inbound connections and have for some time now. The free nodes issue has just been a recent occurrence I.E., the last couple three weeks. In checking I don't see a sudden increase in IP activity.
    I have had four new BBS users create accounts in the last week. Something I am
    always happy to see. :-)

    New users is always very neat :)

    Take care,
    Janis

    --- BBBS/Li6 v4.10 Toy-4
    * Origin: Prism bbs (1:261/38)
  • From Jeff Smith@1:282/1031 to Janis Kracht on Sun Apr 28 00:32:14 2019
    Hello Janis,

    Is it from someone like Yandex that fills up your nodes? That started happening here.. so I use this line to keep them off the bbs nodes:
    iptables -A OUTPUT -p tcp -m string --string "block-me.com" --algo kmp -j REJECT
    That is all one line, and of course you change "block-me.com" to the name of the site that is nailing your system... works well here.

    Here a domain name doesn't show up, just an IPv4 address. I have started to add the IP's to block them. I was looking for a way to limit x connection attempts from the same IP address within x seconds. And decided to use the command line:

    iptables -A INPUT -p tcp --dport 23 -i eth0 -m state --state NEW -m recent --update --seconds 10 --hitcount 3 -j DROP

    Which has seemed to help as my busy nodes issue isn't as bad as it was. At least BBBS looks to be freeing up the nodes quicker.

    Jeff

    --- BBBS/Li6 v4.10 Toy-4
    * Origin: Fidoneet: The Ouija Board - Anoka, MN -bbs.ouijabrd.net (1:282/1031)
  • From Janis Kracht@1:261/38 to Jeff Smith on Sun Apr 28 12:28:58 2019
    Hi Jeff,

    Is it from someone like Yandex that fills up your nodes? That started
    happening here.. so I use this line to keep them off the bbs nodes:
    iptables -A OUTPUT -p tcp -m string --string "block-me.com" --algo kmp -j
    REJECT
    That is all one line, and of course you change "block-me.com" to the name of >> the site that is nailing your system... works well here.

    Here a domain name doesn't show up, just an IPv4 address.

    What does your system show when you type 'host <ipaddress>'? For instance, over
    here I see this with the host command:

    ~host 213.180.204.62
    62.204.180.213.in-addr.arpa domain name pointer yandex.com.

    I have started to
    add the IP's to block them. I was looking for a way to limit x connection attempts from the same IP address within x seconds. And decided to use the command line:

    iptables -A INPUT -p tcp --dport 23 -i eth0 -m state --state NEW -m recent --update --seconds 10 --hitcount 3 -j DROP

    Yes, I use that line as well. It obviously wasn't enought though yesterday. :(

    I use that line above, and also this one (again, all on one line):

    iptables -A OUTPUT -p tcp -m string --string "yandex.com" --algo kmp -j REJECT

    Three times yesterday, one of my users tried to upload his replies and was unable to.. As I said that's when I went digging for a way to restart bbbs.

    Take care,
    Janis

    --- BBBS/Li6 v4.10 Toy-4
    * Origin: Prism bbs (1:261/38)