Text 650, 75 rader
Skriven 2004-10-08 13:37:13 av Björn Felten (2:203/2)
    Kommentar till text 643 av SHANNON TALLEY (1:275/311)
Ärende: Posting from the Public News Server
===========================================
 ST> Your News Server does a "reverse IP lookup"

   Yes, of course. Otherwise it will not be able to put the proper information
in the log file.

 ST> (I have that turned off for
 ST> mine).  My firewall interrupts that as an attack, and immediately blocks
 ST> your IP.

   Ahh, that makes perfect sense. Thanks for solving this mystery, Shannon.

 ST> I was able to post, because your server doesn't do a reverse IP lookup on
a
 ST> post

   No. You were able to post because I had set up this echo that way. This is
now changed, so now you can try as much you want to post in any echo you want,
and you will not succeed.

 ST> (which is wrong, it should

   No need, since logging of your IP and verifying your address (as per above)
is already done and AUTHINFO-exchange has already made sure you are allowed to
post by that time.

 ST> Make sense?

   Number one does indeed, number two does not.

 ST> intended... However, I was able to look at an edition of Fidonews, copy
the
 ST> URL to my run command, pop in a message and exit without difficulty.  What
 ST> makes you think your software could stop that?

   Because it is designed to do just that. As I said, feel welcome to try it
again. And this goes for anyone interested. After all, if a stray message in
this echo, is the prize to pay for finding any safety holes in the JamNNTPd
program, it's well worth it. I dare you: try it again! :)


 ST> The bug in MY news server that allowed that poster to send spam to all the
 ST> Fidonet echoes was pretty simple.  There was "no limit" to the number of
 ST> newsgroups one could cross-post to.

  There is in JamNNTPd:

<snipp>
Posted messages are only accepted if hey are in the format text/plain (i. e.
HTML and multipart messages will be rejected). Crossposted messages will be
rejected. Messages longer than 20 000 bytes will also be rejected.
</snipp>

 ST> Since the bug fix, I have that setup for "1".

   I know you probably do not want to change an existing setup, but I honestly
think you should take a look at JamNNTPd. I'm sure you will love what you find,
just as much as I did. I was always very sceptical to all those different
"gateway" programs, but this one made me change my mind completely. You can
download it from a link in the 'join' link listed below, if you don't want to
go 'net hunting.

 ST> Additionally, I put the NNTP server on port "120" instead of 119.

   Incoming port is standard 119 here. Outgoing (internal) port that JamNNTPd
is operating on is set with a parameter when you start it, and must of course
correspond to the firewall setting. I will not tell you, or anyone else, what
number I'm using this week. :)


-- 
 FidoNet in your news reader:    news://felten.dyndns.org
 For full access, register at:   http://felten.dyndns.org/join.html

---
 * Origin: news://felten.dyndns.org (2:203/2)