From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org
X-Spam-Level: 
X-Spam-Status: No, score=-0.9 required=5.0 tests=DKIM_INVALID,DKIM_SIGNED,
	NICE_REPLY_A autolearn=ham autolearn_force=no version=3.4.4
Received: (qmail 730 invoked from network); 30 Jan 2023 05:30:15 -0000
Received: from 9front.inri.net (168.235.81.73)
  by inbox.vuxu.org with ESMTPUTF8; 30 Jan 2023 05:30:15 -0000
Received: from mail.posixcafe.org ([45.76.19.58]) by 9front; Mon Jan 30 00:27:44 -0500 2023
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=posixcafe.org;
	s=20200506; t=1675056724;
	h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
	 to:to:cc:mime-version:mime-version:content-type:content-type:
	 content-transfer-encoding:content-transfer-encoding:
	 in-reply-to:in-reply-to:references:references;
	bh=ocMglOac1rjDUHw2/chPLZqVp58unLN0bNWqFEbDriU=;
	b=ls1LOarh/Vaej85hMQdna1Nqm6hpRAtrkjB89nptmxW88A7GLOu15WA7lo4WW2j6P4hNIJ
	JIYFwxeJirAbNOvWgpMkyywHp6XXMaMXvkNX+F/lnJc6qmsLQ+jEcjKogmYCt1K4WfrYbe
	KrMOXHDO11xHTvPykvzDGPWhVvwmoKU=
Received: from [192.168.168.200] (161-097-205-025.v4.mynextlight.net [161.97.205.25])
	by mail.posixcafe.org (OpenSMTPD) with ESMTPSA id 0b32ddf8 (TLSv1.3:TLS_AES_256_GCM_SHA384:256:NO)
	for <9front@9front.org>;
	Sun, 29 Jan 2023 23:32:04 -0600 (CST)
Message-ID: <5cf64191-b8da-cb6f-ac24-e180c69f0190@posixcafe.org>
Date: Sun, 29 Jan 2023 22:27:28 -0700
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101
 Thunderbird/102.6.1
Content-Language: en-US
To: 9front@9front.org
References: <870753E8408F0CA0264BF2A8C015D350@thinktankworkspaces.com>
 <66272FA5-DDB8-4075-A8C1-ADC5C7BB1754@stanleylieber.com>
From: Jacob Moody <moody@mail.posixcafe.org>
In-Reply-To: <66272FA5-DDB8-4075-A8C1-ADC5C7BB1754@stanleylieber.com>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
List-ID: <9front.9front.org>
List-Help: <http://lists.9front.org>
X-Glyph: ➈
X-Bullshit: self-healing hosting 
Subject: Re: [9front] dns tools
Reply-To: 9front@9front.org
Precedence: bulk

On 1/29/23 21:59, Stanley Lieber wrote:
> On Jan 29, 2023, at 11:14 PM, william@thinktankworkspaces.com wrote:
>>
>> Do we have any firewall tools? I would like to block some connections.
>>
>> I know you can tweak routing by messing with /net/ipifc/clone
>>
>> Just wanted to know if we have any other ways to block conncetions?
>>
>>
>>
>> Quoth Stanley Lieber <sl@stanleylieber.com>:
>>> check out iwhois (documented in the tel man page).
>>>
>>> also: lookman dns.
>>>
>>> the existing tools are fairly manual and rudimentary.
>>>
>>> sl
> 
> there’s no generic firewall, but upas has some filtering options. smtpd(8) reads the file /mail/blocked for blocked addresses, and has the -k flag to block ip addresses manually. the validatesender script (called by upas) checks for a spamhaus file at /mail/lib/spamhaus. there are also ratfs(4) and scanmail(8), which provide more complex filtering mechanisms.
> 
> sl
> 
>           
> 

You can also use ipmux to sink hole connection using a filter like so:

; aux/dial 'impux!src=bad.ip | bad.ip.2' > /dev/null

You can see the full list of filter parameters in ip(3).
This only impacts incoming connections.