• CAPTCHA with Synchronet

    From Daryl Stout@VERT/TBOLT to All on Wed Feb 22 14:57:11 2023
    I had a bit of a crash last night, and unfortunately, I wasn't ableãto salvage data in the exec directory, but I did have backups of theãrest (ctrl, msgs, files, xtrn, textfiles, etc.). I was using the CAPTCHAãutility from Lord Blackfair at logon, but while I had the captcha.srcãfile, I can't remember how to integrate it into the logon sequence,ãafter the answer.msg screen and before the matrix logon module. Iãthought it was something related to editing captcha.src and putting itãinto possibly default.src, then doing baja default -- but that didn'tãwork. I also don't recall if an option should be set up in SCFG atãlogon.ããDaryl Stout, Sysop, The Thunderbolt BBS, Little Rock, Arkansasã---ã þ Synchronet þ The Thunderbolt BBS - Little Rock, Arkansasã
  • From Nightfox@VERT/DIGDIST to Daryl Stout on Thu Feb 23 09:10:46 2023
    Re: CAPTCHA with Synchronetã By: Daryl Stout to All on Wed Feb 22 2023 02:57 pmãã DS> I had a bit of a crash last night, and unfortunately, I wasn't ableã DS> to salvage data in the exec directory, but I did have backups of theã DS> rest (ctrl, msgs, files, xtrn, textfiles, etc.). I was using the CAPTCHAããWhat data are you missing in exec? Normally exec should be kept stock, as anything you've modified should go into sbbs\mods or other directories. If you have backups of your other directories, you should be able to get the latest Synchronet binaries and other things for exec and be good to go.ããNightfoxãã---ã þ Synchronet þ Digital Distortion: digitaldistortionbbs.comã
  • From MRO@VERT/BBSESINF to Nightfox on Thu Feb 23 18:58:18 2023
    Re: CAPTCHA with Synchronetã By: Nightfox to Daryl Stout on Thu Feb 23 2023 09:10 amãã > What data are you missing in exec? Normally exec should be kept stock, asã > anything you've modified should go into sbbs\mods or other directories. Ifã > you have backups of your other directories, you should be able to get theã > latest Synchronet binaries and other things for exec and be good to go.ã >ããwell the old way was putting stuff into exec instead of mods so maybe he was doing that.ã---ã þ Synchronet þ ::: BBSES.info - free BBS services :::ã
  • From Daryl Stout@VERT to Nightfox on Sun Feb 26 03:30:00 2023
    What data are you missing in exec? Normally exec should be kept stock,ã Ni> as anything you've modified should go into sbbs\mods or otherã Ni> directories. If you have backups of your other directories, you shouldã Ni> be able to get the latest Synchronet binaries and other things for execã Ni> and be good to go.ãã In short, all of it. I thought I had a backup, but the directory wasãgone. I felt that if I tried to put the old data back in on top of theãnew data that I'd corrupt things...so I zapped it. To make matters worse,ãthe 2 USB external drives "quit"...one failed completely, and the otherãone wouldn't let me restore data.ãã The other problem was when tried to run the xtrn-setup program, itãmessed up several doors. So, I had to go in, and zap the node#.cfgãfiles, and change the dropfile to DORINFO1.DEF instead of DOOR.SYS, andãset the doors to "single user only" for the doors to work.ãã I have discovered in the loss of the CAPTCHA deal that with the entryãin MODOPTS.INI, I lowered the timeout timer for "DUMB terminals" (whichãare usually with the bots), to 15 seconds for inactivity. They usuallyãreconnect after getting dumped, and it has tied up all 4 nodes at times.ãBut, if they enter "an invalid entry" (supervisor, root, sysop, admin,ãdefault, etc.), they get dropped, and a temporary ban (10 days) is putãon the IP. ãã In looking at the control panel, when I see these "temporary bans", ãI copy the IP to the ip.can file, and I do the same for the IP's thatãrepeatedly slam the port. It got so bad with the SSH and QOTD portsãthat I had to change those to non-conventional values. Obviously, onceãan IP is in ip.can, they are permanently blocked from the BBS.ãã Twice, I've tried to update to 3.20, and have run into issues bothãtimes...so I'm going to stay with 3.19, unless there's a compellingãreason to upgrade to 3.20, even when the full package comes out. It'sãlike with support for Windows 10...Microsoft is stopping support forãit in October, 2025...so I'll either quit getting the Windows updatesãand leave things as they are...zap 95% of the doors (most legacy, andãwhat I had paid to register in years past), or just shut the wholeãthing down after 35 years of Sysoping. Obviously, none of those optionsãare desired. ãã Yet, Microsoft is only interested in corporate greed, and I can't ãsee discarding perfectly good working hardware and software, justãto buy new stuff to satisfy their bottom line...never mind that beingãon a fixed income, I can't afford an upgrade to "the latest and greatestãitems". ãã In short, "if it ain't broke, don't fix it"...but that's the adviceãI personally should've heeded in regards to upgrading the BBS. I stillãuse the old DOS 8.3 filename syntax, in case someone has a system thatãwon't handle the long filenames, even though that was started back withãWindows 95 many years ago.ããDarylãã... C:\BELFRY is where I keep my .BAT files. ^^^oo^^^ã=== MultiMail/Win v0.52ã--- SBBSecho 3.14-Win32ã * Origin: The Thunderbolt BBS - Little Rock, Arkansas (1:2320/33)ã þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.netã
  • From MRO@VERT/BBSESINF to Daryl Stout on Mon Feb 27 10:49:28 2023
    Re: CAPTCHA with Synchronetã By: Daryl Stout to Nightfox on Sun Feb 26 2023 03:30 amãã > Ni> What data are you missing in exec? Normally exec should be kept stock,ã > Ni> as anything you've modified should go into sbbs\mods or otherã > Ni> directories. If you have backups of your other directories, you shouldã > Ni> be able to get the latest Synchronet binaries and other things for execã > Ni> and be good to go.ã >ã > In short, all of it. I thought I had a backup, but the directory wasã > gone. I felt that if I tried to put the old data back in on top of theã > new data that I'd corrupt things...so I zapped it. To make matters worse,ã > the 2 USB external drives "quit"...one failed completely, and the otherã > one wouldn't let me restore data.ã >ã > The other problem was when tried to run the xtrn-setup program, itãããjust get a dropbox. zip your backups up and encrypt them. have backups upload to dropbox automatically. i do it for the people i host bbses for.ãit's not that hard to backupãã---ã þ Synchronet þ ::: BBSES.info - free BBS services :::ã
  • From Nightfox@VERT/DIGDIST to Daryl Stout on Mon Feb 27 10:37:28 2023
    Re: CAPTCHA with Synchronetã By: Daryl Stout to Nightfox on Sun Feb 26 2023 03:30 amãã DS> Twice, I've tried to update to 3.20, and have run into issues bothã DS> times...so I'm going to stay with 3.19, unless there's a compellingã DS> reason to upgrade to 3.20, even when the full package comes out. It'sããIMO, a good reason to upgrade is at least for the bug fixes. And it doesn't cost any money to update Synchronet, so I don't think there's any downside to upgrading. You'd also be missing out on new features if you don't upgrade, but I suppose whether or not you'll use any of those new features is what makes it a "compelling" upgrade or not.ããNightfoxãã---ã þ Synchronet þ Digital Distortion: digitaldistortionbbs.comã
  • From Gamgee@VERT/PALANT to Nightfox on Mon Feb 27 19:48:00 2023
    Nightfox wrote to Daryl Stout <=-ãã DS> Twice, I've tried to update to 3.20, and have run into issues bothã DS> times...so I'm going to stay with 3.19, unless there's a compellingã DS> reason to upgrade to 3.20, even when the full package comes out. It'sãã Ni> IMO, a good reason to upgrade is at least for the bug fixes. Andã Ni> it doesn't cost any money to update Synchronet, so I don't thinkã Ni> there's any downside to upgrading. You'd also be missing out onã Ni> new features if you don't upgrade, but I suppose whether or notã Ni> you'll use any of those new features is what makes it aã Ni> "compelling" upgrade or not.ããAll of that is true. I suppose there are cases where there's no great ãbenefit to updating, but I have a hard time seeing that logic. There ãare *LOTS* of bug fixes, and *LOTS* of new features in 3.20 vs 3.19. ãWhy someone wouldn't want those is hard to understand.ããFor Daryl - many people have upgraded without issues. I have to think ãit is some procedural error on your part. I can't remember if you've ãposted the details on what happened to your upgrade attempts, but if you ãwould give those details I'm sure we could get things resolved so you ãcan complete the upgrade.ããããã... Enter any 12-digit prime number to continue.ã--- MultiMail/Linux v0.52ã þ Synchronet þ Palantir BBS * palantirbbs.ddns.net * Pensacola, FLã
  • From Havok@VERT/ANARCHY to Daryl Stout on Mon Feb 27 18:46:34 2023
    Re: CAPTCHA with Synchronetã By: Daryl Stout to Nightfox on Sun Feb 26 2023 03:30 amãã DS> are usually with the bots), to 15 seconds for inactivity. They usuallyã DS> reconnect after getting dumped, and it has tied up all 4 nodes at times.ã DS> But, if they enter "an invalid entry" (supervisor, root, sysop, admin,ã DS> default, etc.), they get dropped, and a temporary ban (10 days) is putã DS> on the IP. ã ã Hello Darylãã With a Windows install of Synchronet you may want to try Peerblock smallã little foot print program that has a option to make a list bad ip's inã any and all countries. I did a search and found one place that you canã make a list from of bot type peeps and it has worked very well.ã ã The very best thing is something like what I use pfSense the uses ã geo country blocking.ã ã I bought 3 small check point firewalls off of ebay wipped the drive andã thew pfSense on one, bang done I can block any and all countries and ifã one say message net from over seas I just white lict his IP address.ã A day to a week or two you got it done pat. ãã Best part it only uses 40 watts.ã ã ã -*|04Hav|12o|04k|07*-ãã---ã þ Synchronet þ Anarchy BBS - The Villages,FLã
  • From Havok@VERT/ANARCHY to Gamgee on Tue Feb 28 16:46:45 2023
    Re: Re: CAPTCHA with Synchronetã By: Gamgee to Nightfox on Mon Feb 27 2023 07:48 pmãã Ga> *LOTS* of bug fixes, and *LOTS* of new features in 3.20 vs 3.19. ãã Fast questionãã What are the new features your talking about, I've been following theã development of 3.20 but may have missed a list of things new in it!ãã Thanks...ã ã ã -*|04Hav|12o|04k|07*-ãã---ã þ Synchronet þ Anarchy BBS - The Villages,FLã
  • From Digital Man@VERT to Havok on Tue Feb 28 14:36:43 2023
    Re: Re: CAPTCHA with Synchronetã By: Havok to Gamgee on Tue Feb 28 2023 04:46 pmãã > Re: Re: CAPTCHA with Synchronetã > By: Gamgee to Nightfox on Mon Feb 27 2023 07:48 pmã >ã > Ga> *LOTS* of bug fixes, and *LOTS* of new features in 3.20 vs 3.19.ã >ã > Fast questionã >ã > What are the new features your talking about, I've been following theã > development of 3.20 but may have missed a list of things new in it!ããThe configuration file format and userbase formats have opened up a lot of (now easier to add) new features (e.g. File library default directory configuration) or just long-overdue-improvements (e.g. longer internal codes).ããThere's no single "new feature" list for v3.20 yet, but it'll be quite long. The list of more recent changes since v3.19 has been viewed at https://git.synchro.net/gitpushlog.ssjs (append ?<number> for a longer log/history of changes).ã-- ã digital man (rob)ããRush quote #77:ãThe world is, the world is, love and life are deep, maybe as his skies are wideãNorco, CA WX: 53.2øF, 69.0% humidity, 5 mph ESE wind, 0.07 inches rain/24hrsã---ã þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.netã
  • From Gamgee@VERT/PALANT to Havok on Tue Feb 28 18:17:00 2023
    Havok wrote to Gamgee <=-ãã Ga> *LOTS* of bug fixes, and *LOTS* of new features in 3.20 vs 3.19.ãã Ha> Fast questionãã Ha> What are the new features your talking about, I've beenã Ha> following the development of 3.20 but may have missed a list ofã Ha> things new in it!ããI don't know of any actual "list" of features. If you follow the ãmessages in DoveNet Synchronet Programming and DoveNet Synchronet ãDiscussion, you'll see the commit messages that DM (or gitlab) postsãin there. There are usually several updates every single day.ããAnother way is to explore the git commit listings, one such way would be ãhere:ããhttps://gitlab.com/SynchronetBBS/sbbs/-/commits/master?ref_type=headsãããã... If it weren't for Edison we'd be using computers by candlelightã--- MultiMail/Linux v0.52ã þ Synchronet þ Palantir BBS * palantirbbs.ddns.net * Pensacola, FLã
  • From Greg Youngblood@VERT to Digital Man on Tue Feb 28 20:30:45 2023
    Re: Re: CAPTCHA with Synchronetã By: Digital Man to Havok on Tue Feb 28 2023 02:36 pmãã >> What are the new features your talking about, I've been following theã >> development of 3.20 but may have missed a list of things new in it!ã ã Sounds like a plan I look forward to reading through all the thingsã coming to light with the new release.ãã Good going...ã--- SBBSecho 3.14-Linuxã * Origin: Anarchy BBS - The Villages,FL (1:123/131)ã þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.netã
  • From Greg Youngblood@VERT to Gamgee on Tue Feb 28 20:32:25 2023
    Re: Re: CAPTCHA with Synchronetã By: Gamgee to Havok on Tue Feb 28 2023 06:17 pmãã Ga> https://gitlab.com/SynchronetBBS/sbbs/-/commits/master?ref_type=headsãã On my way there now thanks for the feed back, I look forward to reading!ã--- SBBSecho 3.14-Linuxã * Origin: Anarchy BBS - The Villages,FL (1:123/131)ã þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.netã
  • From Daryl Stout@VERT to Nightfox on Tue Feb 28 00:37:00 2023
    IMO, a good reason to upgrade is at least for the bug fixes. And itã Ni> doesn't cost any money to update Synchronet, so I don't think there'sã Ni> any downside to upgrading. You'd also be missing out on new featuresã Ni> if you don't upgrade, but I suppose whether or not you'll use any ofã Ni> those new features is what makes it a "compelling" upgrade or not.ãã I'm going to wait until the new version is released...let everyone elseãwork out the bugs. Back when I was running GT Power for dial-up, I wasãone of the beta testers for the last version released by original authorãPaul Meiners.ãã I did find the original version of the CAPTCHA utility that was doneãby Lord Blackfair, which had just one set of 6 numbers, along with theãbatchfile that I had previously created (I thought all those files wereãlong gone as well).ãã Bascially, after decompiling it, I made 144 copies of the file, and ãedited in a different number. Then, I named them different batchfiles, ãin 5 minute increments, from HOUR0000.BAT to HOUR2355.BAT, around theãclock. Then, I used the Windows 10 Task Scheduler to set up the batchfiles ãto run at the appointed times. It copies a new ACEMTRX.BIN file (with the ãCAPTCHA code) into the \exec directory every 5 minutes. So, while it doesãnot change with each connect, at least it changes every 5 minutes. And,ãbesides, the bots are unlikely to see the CAPTCHA anyway.ãã I also lowered the variable for the inactivity timeout from 30 secondsãto 10 seconds. Before I found the original CAPTCHA deal (as noted above),ãthe bots were slamming the telnet port, tying up all 4 of them. With theã"invalid user names" (root, admin, supervisor, sysop, default, etc.), theãconnects with these are dropped, and in many cases, a temporary ban isãput on them. I then add that IP to the ip.can file.ããDarylãã... I found a piano stool -- I thought they were potty trained!!ã=== MultiMail/Win v0.52ã--- SBBSecho 3.14-Win32ã * Origin: The Thunderbolt BBS - Little Rock, Arkansas (1:2320/33)ã þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.netã
  • From Daryl Stout@VERT to Havok on Tue Feb 28 00:50:00 2023
    With a Windows install of Synchronet you may want to try Peerblock smallã Ha> little foot print program that has a option to make a list bad ip's inã Ha> any and all countries. I did a search and found one place that you canã Ha> make a list from of bot type peeps and it has worked very well.ãã I already have PeerBlock set up and running. However, for some of the hamãradio traffic nets that I do, I had to disable it, as I couldn't connect toãcertain "reflectors" with the D-Star mode.ãã At least for the nets that I run, I can leave Peerblock enabled. The fee ãto renew the data files each year is only around $10...you can't get a good ãmeal for that anymore!!ãã As I was telling Nightfox, I found the ORIGINAL CAPTCHA utility that wasãdone by Lord Blackfair. It first only had one set number with it (he later ãreleased another version, which generates a different number with each newãconnect)...but I was able decompile it with the UNBAJA utility (if I recallãcorrectly).ãã Then what I did (this was before he released the version that generates aãdifferent number with each connect), was to make 144 copies of the file. ãNext, I used a Random Number program for Windows to generate such...and I ãedited that into the file, which basically was a combination of ACEMTRX.SRCãand the different CAPTCHA.SRC files...the latter which were renamed to ãHOUR####.SRC, where #### was a 24 hour time digit from 0000 (12:00am) to ã2355 (11:55pm), in 5 minute intervals around the clock. Then, I compiled ãeach of these with the Baja module.ãã Next, I created 144 simple batchfiles, with the same name as the HOUR####ãfiles noted earlier. All that did would copy the HOUR####.BIN file to theãACEMTRX.BIN file within the \exec directory. And to finish it off, I usedãthe Task Scheduler under Windows 10 to set up the times to run the neededãbatchfiles.ãã Admittedly, it was tedious to do it this way...but at least I have a ãCAPTCHA deal at logon, after the ANSWER.MSG screen, and before ACEMTRXãkicks in. The bots aren't likely to see the numeric string, anyway...andãI also lowered the "inactivity timeout" for "dumb terminals" from 30 toã10 seconds. Before then, the bots were slamming the ports, and tying upãall the nodes.ããDarylãã... I don't drink and drive, but I swig at stoplights.ã=== MultiMail/Win v0.52ã--- SBBSecho 3.14-Win32ã * Origin: The Thunderbolt BBS - Little Rock, Arkansas (1:2320/33)ã þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.netã
  • From Tracker1@VERT/TRN to Daryl Stout on Wed Mar 1 06:35:03 2023
    Re: CAPTCHA with Synchronetã By: Daryl Stout to All on Wed Feb 22 2023 14:57:11ãã DS> I had a bit of a crash last night, and unfortunately, I wasn't ableã DS> to salvage data in the exec directory, but I did have backups of theã DS> rest (ctrl, msgs, files, xtrn, textfiles, etc.).ããI find it kind of a best practice, to copy the original from sbbs/exec/ to sbbs/mods/ and edit my customized version in mods, never touching sbbs/exec/ Also reducing the risk of destroying a customization, and leaving the original(s) for reference.ãã DS> I was using the CAPTCHA utility from Lord Blackfair at logon, but ã RS> while I had the captcha.src file...ããNot familiar with that one... do you have a download location for the original file/zip/package?ã ã ã-- ãMichael J. Ryan ã+o roughneckbbs.com ãtracker1@roughneckbbs.comãã---ã þ Synchronet þ Roughneck BBS - roughneckbbs.comã
  • From MRO@VERT/BBSESINF to Daryl Stout on Wed Mar 1 03:35:09 2023
    Re: CAPTCHA with Synchronetã By: Daryl Stout to Havok on Tue Feb 28 2023 12:50 amãã > Ha> With a Windows install of Synchronet you may want to try Peerblockã > Ha> smallã > Ha> little foot print program that has a option to make a list bad ip's inã > Ha> any and all countries. I did a search and found one place that you canã > Ha> make a list from of bot type peeps and it has worked very well.ã >ã > I already have PeerBlock set up and running. However, for some of the hamã > radio traffic nets that I do, I had to disable it, as I couldn't connect toã > certain "reflectors" with the D-Star mode.ã >ã > At least for the nets that I run, I can leave Peerblock enabled. The feeã > to renew the data files each year is only around $10...you can't get a goodã > meal for that anymore!!ã >ããi didn't even know they did that.ãi just use a custom blocklist.ã---ã þ Synchronet þ ::: BBSES.info - free BBS services :::ã
  • From Greg Youngblood@VERT to Daryl Stout on Wed Mar 1 04:52:49 2023
    Re: CAPTCHA with Synchronetã By: Daryl Stout to Havok on Tue Feb 28 2023 12:50 amãã DS> I already have PeerBlock set up and running. However, for some of the hamã DS> radio traffic nets that I do, I had to disable it, as I couldn't connectã DS> to certain "reflectors" with the D-Star mode.ãã The nice think about peerblock is you can make a ban list of country IP'sã and make a white list of a country ip that you want to pass through.ã I always like it when I was running VA on xp or Windows 7.ã--- SBBSecho 3.14-Linuxã * Origin: Anarchy BBS - The Villages,FL (1:123/131)ã þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.netã
  • From Havok@VERT/ANARCHY to Daryl Stout on Thu Mar 2 15:14:51 2023
    Re: CAPTCHA with Synchronetã By: Daryl Stout to Havok on Tue Feb 28 2023 12:50 amãã DS> As I was telling Nightfox, I found the ORIGINAL CAPTCHA utility that wasã DS> done by Lord Blackfair. It first only had one set number with it (he later ã DS> released another version, which generates a different number with each newã DS> connect)...but I was able decompile it with the UNBAJA utility (if I recallã DS> correctly).ãã Wow sounds like a lot of work, why I like pfSense after about the 3 thirdã probe it blocks the IP.ãã But it does sound kewl...ã ã ã -*|04Hav|12o|04k|07*-ãã---ã þ Synchronet þ Anarchy BBS - The Villages,FLã