[nos-bbs] jnos blacklist feature (was Re: Jnos memory, leak with forwarding)
Charles J. Hargrove
n2nov at n2nov.net
Thu Oct 19 19:14:14 EDT 2017
What I use in my autoexec.nos is below. I open up all ports for
anything coming in from another 44/8 address, my home cablemodem
address, my cellphone telnet connection, the IP address of the
server that JNOS is running on and only certain non-standard port
numbers for users from everywhere else.
tcp watch 300
#tcp access deny all
tcp access permit 6x.x.x.x all <--- home cablemodem IP number
tcp access permit 17x.x.x.x all <--- server JNOS is on IP range
tcp access permit 44/8 all <--- AMPRnet IP range
tcp access permit 17x.x/16 all <--- cellphone telnet IP range
tcp access permit 17x.x/16 all <--- cellphone telnet IP range
tcp access permit 2x.x/16 all <--- cellphone telnet IP range
tcp access permit all 8000 <--- www port number on my JNOS
tcp access permit all 3600 <--- converse port number on my JNOS
tcp access permit all 2300 <--- telnet port number on my JNOS
tcp access permit all 1100 <--- pop3 port number on my JNOS
tcp access permit all 25 <--- smtp port number on my JNOS
tcp access deny 209.17.115.119 all <--- known IP address of a hacker
mbox blacklist 900
at 05 "MBOX KICK+"
pause 10
at 20 "tcp clean+"
pause 10
at 40 "wp update now+"
pause 10
at 45 "netrom save+"
--
Charles J. Hargrove - N2NOV
NYC-ARECS/RACES Citywide Radio Officer/Skywarn Coord.
NYC-ARECS/RACES Nets 449.025/123.0 PL
ARnewsline Broadcast Mon. @ 8:00PM
NYC-ARECS Weekly Net Mon. @ 8:30PM
http://www.nyc-arecs.org
NY-NBEMS Net Saturdays @ 10AM & USeast-NBEMS Net Wednesdays @ 7PM
on 7.036 Mhz USB (alt 3.536)/1500 hz waterfall spot; MFSK-16 or 32
"Information is the oxygen of the modern age. It seeps through the walls
topped
by barbed wire, it wafts across the electrified borders." - Ronald Reagan
"The more corrupt the state, the more it legislates." - Tacitus
"Molann an obair an fear" - Irish Saying
(The work praises the man.)
"No matter how big and powerful government gets, and the many services it
provides, it can never take the place of volunteers." - Ronald Reagan
More information about the nos-bbs
mailing list