Hi Jeff,
>> Is it from someone like Yandex that fills up your nodes? That started
>> happening here.. so I use this line to keep them off the bbs nodes:
>> iptables -A OUTPUT -p tcp -m string --string "block-me.com" --algo kmp -j
>> REJECT
>> That is all one line, and of course you change "block-me.com" to the name of
>> the site that is nailing your system... works well here.
> Here a domain name doesn't show up, just an IPv4 address.
What does your system show when you type 'host <ipaddress>'? For instance, over
here I see this with the host command:
~host 213.180.204.62
62.204.180.213.in-addr.arpa domain name pointer yandex.com.
> I have started to
> add the IP's to block them. I was looking for a way to limit x connection
> attempts from the same IP address within x seconds. And decided to use the
> command line:
> iptables -A INPUT -p tcp --dport 23 -i eth0 -m state --state NEW -m recent
> --update --seconds 10 --hitcount 3 -j DROP
Yes, I use that line as well. It obviously wasn't enought though yesterday. :(
I use that line above, and also this one (again, all on one line):
iptables -A OUTPUT -p tcp -m string --string "yandex.com" --algo kmp -j REJECT
Three times yesterday, one of my users tried to upload his replies and was
unable to.. As I said that's when I went digging for a way to restart bbbs.
Take care,
Janis
--- BBBS/Li6 v4.10 Toy-4
* Origin: Prism bbs (1:261/38)
|
