Dunno... but thought I'd pass this one along, not sure how other tossers handle such things. We ended up with 8570 messages posted before it was caught and manually delinked.
It would be good if Mystic could detect the flooding of an echo by a
node and if a threshold is reached stop the messages from continuing to
be processed. Perhaps an auto delink from echo if x messages posted
within x minutes plus a netmail alert sent to node + hub admin?
How did these messages come in? Where they connecting to you every
minute to send a new message or did it come in clumps every so often? I think having a clearer picture might help me think it through a little better.
How did these messages come in? Where they connecting to you every
minute to send a new message or did it come in clumps every so often? I think having a clearer picture might help me think it through a little better.
I am open to trying to build something like this, but I am not really
sure how well it would work. If a node spams connections to you that
can be covered by the BINKP auto blocking, but I realize that doesn't really address this specific issue.
When talking about importing a packet it would be tough to determine
when its a flood if the message content is different each time. If we
put a threshold in for messages then it could backfire in situations
where people are trying to do rescans or maybe even for systems who only poll daily or whenever they feel like reading (so they tend to get mail
in larger clumps)...
I suppose in the case of a hub though, there wouldn't be many instances
of a rescan coming into the hub, so maybe the threshold could work but just be disabled by default? Or set to something really high.
The tracking would be a bit difficult or at the very least annoying to
do and it would probably slow down tossing speed a bit since it would
have to compare every single message being tossed and it would have to save this sort of data for every node between MUTIL execution.
On 08 Nov 2021 at 08:10a, g00r00 pondered and said...
How did these messages come in? Where they connecting to you every minute to send a new message or did it come in clumps every so often? think having a clearer picture might help me think it through a littl better.
Have just dug back into the HUB logs and emailed you some files. Essentially it looks like one packet being processed by MUTIL and it contained approx 5 messages for the echomail area within it. The next packet arrived and was processed around 2 mins later and so on.
Just circling back to this one, wondered if what I sent you was of any help and if you had any further thoughts on this one?
Hey there, not yet.
Its probably going to be a bit time consuming to do so I have to get
some time aside to experiment with how it might work. I've barely been touching any code lately unfortunately (just little touch ups mostly).
If I remember right, I don't think the problematic system in this case
was a Mystic system? The system that was sending all of this
regurgitated and/or stuck or looped echomail should be where the issue
is fixed, in my opinion. Especially since it seems to have only happened once, and from one specific system.
Its probably going to be a bit time consuming to do so I have to get
some time aside to experiment with how it might work. I've barely been touching any code lately unfortunately (just little touch ups mostly). Almost all of my time is spent just responding to stuff. :(
It might not be until the new year before things ease up for me. I hope
I can get more time before that to see what could be done. First goal will be to get A47 out the door before I add anything new to the tosser. For now I am trying to handle support issues/reported issues as much as
I can so I can accomplish that goal.
Sysop: | Coz |
---|---|
Location: | Anoka, MN |
Users: | 2 |
Nodes: | 4 (0 / 4) |
Uptime: | 155:01:00 |
Calls: | 166 |
Files: | 5,389 |
Messages: | 223,379 |