1. Forum
  2. FidoNet
  3. SYNCHRONET

  • CAPTCHA mod or something like that

    From MRO@1:103/705 to Digital Man on Sat Jan 15 21:00:14 2022
    Re: CAPTCHA mod or something like that
    By: Digital Man to MRO on Sat Jan 15 2022 05:23 pm


    Setting MaxConcurrentConnections = 1 or 2 works pretty well too.

    synchronet absolutely does not work well against attackers.
    if there's attackers hitting the bbs, it slows it down for users that are actually using the system.

    i dont want 1 or 2 nodes tied up all night.
    that's why i block and they go in the firewall.

    *I* wouldn't want to block an IP address from future connections just because the user was having issues with their terminal and couldn't send the right response to a challenge.

    i give them a couple of tries. who has problems with their terminals?

    ---
    þ Synchronet þ ::: BBSES.info - free BBS services :::
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Digital Man@1:103/705 to acn on Mon Jan 17 12:35:16 2022
    Re: CAPTCHA mod or something like that
    By: acn to Digital Man on Mon Jan 17 2022 02:41 pm

    Hi DM,

    Waiting for someone to hit ESC in your login module would be just a couple lines of JS code. Something like:

    print("Press ESC to login...");
    while(bbs.online && console.getkey(K_NOECHO) != KEY_ESC);

    (K_NOECHO is defined in sbbsdefs.js and KEY_ESC is defined in key_defs.js)

    I've tried adding these lines to the top of login.js (copied to mods/), just before "bbs.logout()".

    But this is displayed *after* answer.msg/banner1.msg...

    Would it have any side-effects if I remove answer.msg/banner1.msg and let them get displayed at the beginning of login.js after the "Press ESC to login" message?

    Another way to do that would be to add at the top of your banner*.msg file: @exec:yourmod@ (EXEC in uppercase)

    then create exec/yourmod.js with those lines you want to execute before the body of the banner (and answer.* file) is displayed.
    --
    digital man (rob)

    Breaking Bad quote #13:
    I got twenty bucks that says he's a beaner. - Hank
    Norco, CA WX: 58.9øF, 78.0% humidity, 2 mph WNW wind, 0.00 inches rain/24hrs --- SBBSecho 3.14-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Tracker1@1:103/705 to Digital Man on Fri Jan 21 16:32:38 2022
    On 1/15/22 18:23, Digital Man wrote:

    Setting MaxConcurrentConnections = 1 or 2 works pretty well too.

    Oh yeah... you may want to bump the default to 3 or 4 on your FTP config.

    I was trying to download the bbsfiles.com archive from your server, and
    even when I dropped my max connections to 1 at a time, there were still
    issues when doing PASV downloads against a queue of files to download.

    I'm guessing that the transfer showed as done on FileZilla, then
    attempted to start a new connection/transfer etc before your system
    marked the old connection as done.

    Wasn't too bad, just requeue a few times on the failures.
    --
    Michael J. Ryan - tracker1@roughneckbbs.com
    ---
    ï¿­ Synchronet ï¿­ Roughneck BBS - roughneckbbs.com
    --- SBBSecho 3.14-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Tracker1@1:103/705 to MRO on Fri Jan 21 16:34:48 2022
    On 1/15/22 20:00, MRO wrote:
    *I* wouldn't want to block an IP address from future connections just
    because the user was having issues with their terminal and couldn't send the >> right response to a challenge.

    i give them a couple of tries. who has problems with their terminals?

    People developing or testing a new terminal application for one.
    --
    Michael J. Ryan - tracker1@roughneckbbs.com
    ---
    ï¿­ Synchronet ï¿­ Roughneck BBS - roughneckbbs.com
    --- SBBSecho 3.14-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From MRO@1:103/705 to Tracker1 on Sat Jan 22 02:28:26 2022
    Re: Re: CAPTCHA mod or something like that
    By: Tracker1 to Digital Man on Fri Jan 21 2022 04:32 pm

    On 1/15/22 18:23, Digital Man wrote:

    Setting MaxConcurrentConnections = 1 or 2 works pretty well too.

    Oh yeah... you may want to bump the default to 3 or 4 on your FTP config.

    I was trying to download the bbsfiles.com archive from your server, and
    even when I dropped my max connections to 1 at a time, there were still issues when doing PASV downloads against a queue of files to download.


    i put up another link to it.

    arent you the guy i got the files from?
    ---
    þ Synchronet þ ::: BBSES.info - free BBS services :::
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From MRO@1:103/705 to Tracker1 on Sat Jan 22 02:28:54 2022
    Re: Re: CAPTCHA mod or something like that
    By: Tracker1 to MRO on Fri Jan 21 2022 04:34 pm

    *I* wouldn't want to block an IP address from future connections just
    because the user was having issues with their terminal and couldn't send the >> right response to a challenge.

    i give them a couple of tries. who has problems with their terminals?

    People developing or testing a new terminal application for one.

    FUCK THOSE GUYS.
    and tell them to stay off my bbses.
    ---
    þ Synchronet þ ::: BBSES.info - free BBS services :::
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Nightfox@1:103/705 to Tracker1 on Thu Jan 27 18:15:16 2022
    Re: Re: CAPTCHA mod or something like that
    By: Tracker1 to Gamgee on Thu Jan 27 2022 02:56 pm

    People developing or testing a new terminal application for one.

    How many people do you suppose are doing that?

    Well, I've been using the new MS terminal for a while now (in Windows), and Tabby on Mac and Linux. I also use the VS Code terminal a lot.

    Are you saying you're running telnet from the Microsoft Windows Terminal app to connect to BBSes?

    Nightfox

    ---
    þ Synchronet þ Digital Distortion: digitaldistortionbbs.com
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Tracker1@1:103/705 to Gamgee on Thu Jan 27 14:56:34 2022
    On 1/22/22 13:07, Gamgee wrote:
    People developing or testing a new terminal application for one.

    How many people do you suppose are doing that?

    Let's say just in North America. One, or two?

    Well, I've been using the new MS terminal for a while now (in Windows),
    and Tabby on Mac and Linux. I also use the VS Code terminal a lot.

    I've also worked on using the xterm.js library directly.

    And that doesn't even scratch the number of terminal emulators/apps
    built in the past 2-3 years alone.

    That said, haven't had too many issues with various telnet/rlogin/ssh connections, but sometimes I do see odd behavior in more than a handful
    of scenarios.
    --
    Michael J. Ryan - tracker1@roughneckbbs.com
    ---
    ï¿­ Synchronet ï¿­ Roughneck BBS - roughneckbbs.com
    --- SBBSecho 3.14-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Tracker1@1:103/705 to Nightfox on Fri Mar 25 09:55:32 2022
    On 1/27/22 19:15, Nightfox wrote:
    People developing or testing a new terminal application for one.

    How many people do you suppose are doing that?

    Well, I've been using the new MS terminal for a while now (in
    Windows), and Tabby on Mac and Linux. I also use the VS Code
    terminal a lot.

    Are you saying you're running telnet from the Microsoft Windows
    Terminal app to connect to BBSes?

    Yes. Both via windows (cmd/powershell) and via WSL/Ubuntu
    --
    Michael J. Ryan - tracker1@roughneckbbs.com
    ---
    ï¿­ Synchronet ï¿­ Roughneck BBS - roughneckbbs.com
    --- SBBSecho 3.15-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)