1. Forum
  2. FidoNet
  3. SYNC SYSOPS

  • blocking IP addresses

    From Shadow Man@1:103/705 to all on Tue Oct 13 12:57:41 2026
    What is the best way to block either a ip or ip range from my system (telnet specifically). I have altered the ip.can file with the ip, and it seems I'm being continuously hit over and over on Port 23.

    Thanks!

    ---
    ï¿­ Synchronet ï¿­ The Rainbow's End - therainbowsendgs.ddns.net
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Nightfox@1:103/705 to Shadow Man on Tue Oct 13 17:36:14 2026
    Re: blocking IP addresses
    By: Shadow Man to all on Tue Oct 13 2026 12:57 pm

    What is the best way to block either a ip or ip range from my system (telnet specifically). I have altered the ip.can file with the ip, and it seems I'm being continuously hit over and over on Port 23.

    Adding to ip.can is the correct way, as far as I know. But even if you add an IP address there, you'll likely still get attacked from other IP addresses. It supports wildcards though, so you could add something like 180.* (I believe) to block a whole range.

    Also, perhaps some of the server settings such as MaxConConnFilterThreshold & others could help you:

    https://wiki.synchro.net/config:sbbs.ini#maxconconnfilterthreshold

    Nightfox

    ---
    þ Synchronet þ Digital Distortion: digitaldistortionbbs.com
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Digital Man@1:103/705 to Shadow Man on Tue Oct 13 18:13:46 2026
    Re: blocking IP addresses
    By: Shadow Man to all on Tue Oct 13 2026 12:57 pm

    What is the best way to block either a ip or ip range from my system (telnet specifically). I have altered the ip.can file with the ip, and it seems I'm being continuously hit over and over on Port 23.

    If you added an IP address to your text/ip.can file, it should be immediately disconnected by all Synchronet servers/services upon connection:
    https://wiki.synchro.net/howto:block-hackers
    --
    digital man (rob)

    Steven Wright quote #26:
    A conclusion is the place where you got tired of thinking.
    Norco, CA WX: 70.0øF, 31.0% humidity, 4 mph NW wind, 0.00 inches rain/24hrs
    --- SBBSecho 3.38-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From poindexter FORTRAN@1:103/705 to Shadow Man on Wed Oct 14 07:39:03 2026
    Shadow Man wrote to all <=-

    What is the best way to block either a ip or ip range from my system (telnet specifically). I have altered the ip.can file with the ip, and
    it seems I'm being continuously hit over and over on Port 23.

    Are you actually getting hit, or are you getting notifications that the
    attempt is blocked? There's a way to block attempts without logging.

    look at ip-silent.can.



    ... Start where you are. Use what you have. Do what you can.
    --- MultiMail/Win v0.52
    þ Synchronet þ .: realitycheckbbs.org :: scientia potentia est :.
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From nelgin@1:103/705 to Shadow Man on Wed Oct 14 11:54:47 2026
    Re: blocking IP addresses
    By: Shadow Man to all on Tue Oct 13 2026 12:57:41

    What is the best way to block either a ip or ip range from my system (telnet specifically). I have altered the ip.can file with the ip, and it seems I'm being continuously hit over and over on Port 23.

    iptables

    ---
    þ Synchronet þ End Of The Line BBS - endofthelinebbs.com
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Accession@1:103/705 to Shadow Man on Wed Oct 14 17:43:40 2026
    Hey Shadow!

    On Tue, Oct 13 2026 12:57:40 -0500, you wrote:

    What is the best way to block either a ip or ip range from my system (telnet specifically). I have altered the ip.can file with the ip, and it seems I'm being continuously hit over and over on Port 23.

    You can start adding them to ip-silent.can instead. Then, while they'll still try and fail, at least you won't see that they're continuously hitting you over and over (it's not logged). ;)

    Regards,
    Accession

    ... I don't suffer from insanity; I enjoy every minute of it.
    --- AmberEdit/linux 0.9.2
    # Origin: thePharcyde_ telnet://bbs.pharcyde.org (Wisconsin) (723:1/1)
    ï¿­ Synchronet ï¿­ _thePharcyde telnet://bbs.pharcyde.org (Wisconsin)
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Charles Claypoole@1:103/705 to poindexter FORTRAN on Wed Oct 14 20:18:07 2026
    there was a ip that kept connecting to my port 23, then disconnecting, and rinse in repeat for hours. it eventually stopped but I tried the ip.can and the ip.silent entry.

    ---
    ï¿­ Synchronet ï¿­ The Rainbow's End - therainbowsendgs.ddns.net
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)