From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <9front-bounces@9front.inri.net>
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org
X-Spam-Level: 
X-Spam-Status: No, score=-1.0 required=5.0 tests=HEADER_FROM_DIFFERENT_DOMAINS,
	MAILING_LIST_MULTI autolearn=ham autolearn_force=no version=3.4.4
Received: from 9front.inri.net (9front.inri.net [168.235.81.73])
	by inbox.vuxu.org (Postfix) with ESMTP id AC67324D9B
	for <ml@inbox.vuxu.org>; Fri, 26 Jul 2024 05:37:19 +0200 (CEST)
Received: from gaff.inri.net ([168.235.82.67]) by 9front; Thu Jul 25 23:36:07 -0400 2024
Message-ID: <3A70A782119990D690B32C787161C89B@gaff.inri.net>
Date: Thu, 25 Jul 2024 23:36:07 -0400
From: sl@stanleylieber.com
To: 9front@9front.org
In-Reply-To: <66c2b699-17be-40df-a18d-4612f26a2bde@posixcafe.org>
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit
List-ID: <9front.9front.org>
List-Help: <http://lists.9front.org>
X-Glyph: ➈
X-Bullshit: NoSQL WEB2.0 session session content-driven database 
Subject: Re: [9front] WANTED: ip based filtering of incoming connections
Reply-To: 9front@9front.org
Precedence: bulk

> Since it's come up at least twice on the mailing list perhaps that qualifies as frequent enough
> to put something in the FQA.

apologies for the noise, but i've just verified the following doesn't actually work:

---

#!/bin/rc
rfork e
# fn nip{ grep $1 /sys/log/www | awk -F '::' '{print $NF;}' | sort | uniq }
#
# AMAZON-SIN (bytedance)
# 47.128.0.0&255.252.0.0
#
# MSFT (openai)
# 52.230.152.0&255.255.255.0
#
# GOOGLE (semrush.com)
# 64.249.68.0&255.255.255.0
# 64.249.79.0&255.255.255.0
# 64.249.83.0&255.255.255.0
# 85.208.96.0&255.255.255.0
#
# ZEN-SG (bytedance)
# 156.59.198.0&255.255.255.0

while(){
	aux/dial 'ipmux!vers=4;src=47.128.0.0&255.252.0.0|52.230.152.0&255.255.255.0|64.249.68.0&255.255.255.0|64.249.79.0&255.255.255.0|64.249.83.0&255.255.255.0|85.208.96.0&255.255.255.0|156.59.198.0&255.255.255.0' >/dev/null
}

---

connections still succeed, pages are still served, and the requests
still show up in /sys/log/www.

what am i doing wrong?

sl