Hi Ed, On Wednesday, November 27, 2002, 11:46 AM, you put forth, in part, about "[OT] Guestbook spamming":
E> It's not just guestbooks. My wwwboards have recently been spammed from E> multiple sources. I'm being forced to look into authentication E> mechanism to prevents these a'holes. Why the heck can't they just E> leave us alone? My spam hasn't been casino-related yet, but I suppose E> it's coming :-(. wwwboard was also written by Matt Wright. This really ticks me off.. it never ends. E> I haven't seen the guestbook application, but if it's automated tools E> that are going after it, then a simple extra page requesting E> confirmation might do the job to deter them. That's just a hack of E> course... I might have a solution. JD Bernstein's programs, specifically tcpserver. I use qmail and djbdns, which work under the tcpsever, but you can set tcpserver to run by itself without associated programs. Tcpserver listens for connections from tcpclient, which is also part of ucspi-tcp. Then it runs programs as defined by command-line variables, or by rulesets stored in the cdb, constant database. This is created with the tcprules program, instead of using xinetd. You can bind this to any port, unlike xinetd. So, just set up a cdb (machine code database), for IP addresses for known spammer IP blocks. I have a 1.3mb cdb that I use for port 25, RBLSMTPD, in addition to realtime RBLs. Denies spammers at the port. Works great. Key is, it must be used for TCP, not UDP. So, I think it will work well on port 80 for spammers. What I am saying is you can fine tune any of your TCP connections for any incoming traffic for any service. Your tcpserver db could have something like i.e. 211.150.6-24:deny. Once you have your IP addresses entered in a file, just do a make cdb and that's it. More info here on the tcpserver and its capabilities: http://networking.earthweb.com/netos/article/0,,12083_1547241,00.html -- Best regards, Gary Make it idiot-proof and someone will make a better idiot. -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe https://listman.redhat.com/mailman/listinfo/redhat-list
