Just a quick question. I'm having a lot of trouble with the SMTP service being hammered to the point that I can't receive legitimate email. I'm looking to block the crap, so I can receive actual email again. Has anyone got fail2ban working with Synchronet? That's my normal goto, because it uses iptables to block unwanted traffic. Or can anyone recommend a method that doesn't unduly load sbbs? It seems SMTP is the most affected service these days, I'm not having too many issues with telnet/SSH )not enough to make it hard to log in).

I'll also have to read up on the inbuilt tools.


... Borrow money from pessimists. They don't expect it back.
=== MultiMail/Win v0.51
--- SBBSecho 3.10-Linux
* Origin: Freeway BBS Bendigo,Australia freeway.apana.org.au (3:633/410)
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

Re: Blocking SMTP access
By: Tony Langdon to All on Mon Jun 29 2020 07:27 pm

Just a quick question. I'm having a lot of trouble with the SMTP service be hammered to the point that I can't receive legitimate email. I'm looking to block the crap, so I can receive actual email again. Has anyone got fail2ba working with Synchronet? That's my normal goto, because it uses iptables to block unwanted traffic. Or can anyone recommend a method that doesn't undul load sbbs? It seems SMTP is the most affected service these days, I'm not having too many issues with telnet/SSH )not enough to make it hard to log in

I'll also have to read up on the inbuilt tools.

you can block by country. it's rough. i'm getting hit very hard and i block by hand. it's my windows bbs so i use a script to put them in windows firewall and into peerblock.
---
þ Synchronet þ ::: BBSES.info - free BBS services :::

On 06-29-20 23:27, MRO wrote to Tony Langdon <=-

you can block by country. it's rough. i'm getting hit very hard and i block by hand. it's my windows bbs so i use a script to put them in windows firewall and into peerblock.

It might come to that. Won't take much to put country data into iptables.


... Experience is knowing a lot of things you shouldn't do again.
=== MultiMail/Win v0.51
--- SBBSecho 3.10-Linux
* Origin: Freeway BBS Bendigo,Australia freeway.apana.org.au (3:633/410)
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

Tony,

Just a quick question. I'm having a lot of trouble with the SMTP
service being hammered to the point that I can't receive legitimate
email. I'm looking to block the crap, so I can receive actual email again. Has anyone got fail2ban working with Synchronet? That's my
normal goto, because it uses iptables to block unwanted traffic. Or
can anyone recommend a method that doesn't unduly load sbbs? It seems SMTP is the most affected service these days, I'm not having too many issues with telnet/SSH )not enough to make it hard to log in).

I changed the SMTP port to a different value, and use TLS with it.

Daryl

... When told to delete cookies, I ate another OREO.
--- MultiMail/Win v0.52
þ Synchronet þ The Thunderbolt BBS - tbolt.synchro.net

On 06-30-20 14:47, Daryl Stout wrote to Tony Langdon <=-

I changed the SMTP port to a different value, and use TLS with it.

Changing the port is a non option, I don't want to go jumping through hoops to receive email via some relay.


... When Eve arrived, this was no longer a man's world.
=== MultiMail/Win v0.51
--- SBBSecho 3.10-Linux
* Origin: Freeway BBS Bendigo,Australia freeway.apana.org.au (3:633/410)
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

El 29/6/20 a las 06:27, Tony Langdon escribi¢:

Just a quick question. I'm having a lot of trouble with the SMTP service being
hammered to the point that I can't receive legitimate email. I'm looking to block the crap, so I can receive actual email again. Has anyone got fail2ban working with Synchronet? That's my normal goto, because it uses iptables to block unwanted traffic. Or can anyone recommend a method that doesn't unduly load sbbs? It seems SMTP is the most affected service these days, I'm not having too many issues with telnet/SSH )not enough to make it hard to log in).

I have working fail2ban with sbbs and share my confg files at my ftp
server for you:

ftp://bbs.docksud.com.ar/

you must send the sbbs output log to file via rsyslog.conf (ex: /var/log/sbbs.log):

local3.* -/var/log/sbbs.log

and the verify you sbbs.ini the unix section:

[UNIX]
LogFacility=3


Saludos!

---
þ Synchronet þ Dock Sud BBS TLD 24 HS - bbs.docksud.com.ar

El 1/7/20 a las 07:55, Tony Langdon escribi¢:

On 06-30-20 14:47, Daryl Stout wrote to Tony Langdon <=-

I changed the SMTP port to a different value, and use TLS with it.

Changing the port is a non option, I don't want to go jumping through hoops to
receive email via some relay.

good fail2ban rules will help you

---
þ Synchronet þ Dock Sud BBS TLD 24 HS - bbs.docksud.com.ar

Tony,

I changed the SMTP port to a different value, and use TLS with it.

Changing the port is a non option, I don't want to go jumping through hoops to receive email via some relay.

When I originally set up D-Rats, and had email with it, I enabled TLS
with port 587 on SMTP instead of 25. The same is true with Synchronet.
But, I also have Peerblock in place to block "known countries" with
numerous "hackings", etc.

Daryl

... Email returned to sender...insufficient voltage.
--- MultiMail/Win v0.52
þ Synchronet þ The Thunderbolt BBS - tbolt.synchro.net

On 07-01-20 19:10, Ragnarok wrote to Tony Langdon <=-

I have working fail2ban with sbbs and share my confg files at my ftp server for you:

ftp://bbs.docksud.com.ar/

Thanks, I'll check it out.


... A BAND AID?!?! I'm a doctor not a... Oh yeah...
=== MultiMail/Win v0.51
--- SBBSecho 3.10-Linux
* Origin: Freeway BBS Bendigo,Australia freeway.apana.org.au (3:633/410)
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

On 07-01-20 19:11, Ragnarok wrote to Tony Langdon <=-

good fail2ban rules will help you

That's what I figured. :)


... FOR SYSOP USE ONLY - Do not write below this line.
=== MultiMail/Win v0.51
--- SBBSecho 3.10-Linux
* Origin: Freeway BBS Bendigo,Australia freeway.apana.org.au (3:633/410)
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

On 07-01-20 18:51, Daryl Stout wrote to Tony Langdon <=-

When I originally set up D-Rats, and had email with it, I enabled TLS with port 587 on SMTP instead of 25. The same is true with Synchronet. But, I also have Peerblock in place to block "known countries" with numerous "hackings", etc.

But was that for receiving DMTP mail from other systems, or for sending email from toyr PC to the world? Port 587 (AKA Subm ission port) is normally used for accepting mail from users.


... A student who changes the course of history is probably taking an exam.
=== MultiMail/Win v0.51
--- SBBSecho 3.10-Linux
* Origin: Freeway BBS Bendigo,Australia freeway.apana.org.au (3:633/410)
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

On 6/30/2020 12:47 PM, Daryl Stout wrote:

I changed the SMTP port to a different value, and use TLS with it.

If you have SMTP on a non-standard port, you will not be able to receive
mail, unless you have the explicit TLS port open, and the sending server
tries it.

Best to just limit sending to authenticated users only, or put other
access restrictions to remove the ability.

--
Michael J. Ryan
tracker1 +o Roughneck BBS

---
þ Synchronet þ Roughneck BBS - coming back 2/2/20