From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <9front-bounces@9front.inri.net>
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org
X-Spam-Level: 
X-Spam-Status: No, score=-0.8 required=5.0 tests=DKIM_INVALID,DKIM_SIGNED,
	HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI autolearn=ham
	autolearn_force=no version=3.4.4
Received: from 9front.inri.net (9front.inri.net [168.235.81.73])
	by inbox.vuxu.org (Postfix) with ESMTP id E8BB823FF6
	for <ml@inbox.vuxu.org>; Fri, 26 Jul 2024 00:13:13 +0200 (CEST)
Received: from mail.posixcafe.org ([45.76.19.58]) by 9front; Thu Jul 25 18:10:17 -0400 2024
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=posixcafe.org;
	s=20200506; t=1721945365;
	h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
	 to:to:cc:mime-version:mime-version:content-type:content-type:
	 content-transfer-encoding:content-transfer-encoding:
	 in-reply-to:in-reply-to:references:references;
	bh=mlvvPauUS2SbMHdZ9Dh1zZVAhUL97QSlMbPb7IP4q/8=;
	b=ok70OgO+RYH+hWW1Yz3qXCEYclXIacFaTRPP18XTK/DHUh6Zf3PLKtlnnYkxHQpbcm6bgs
	b96HNnjmjWJUYsV0JqNtxzyw9hWzbKZnjuucA3MOjpJpIrtos9QsPZ3Q/0VWkm4r3jvbhT
	qd7iZlu8nIF3GG5qOiFYG8UNB210Bv0=
Received: from [192.168.168.200] (<unknown> [207.45.82.38])
	by mail.posixcafe.org (OpenSMTPD) with ESMTPSA id 519c3539 (TLSv1.3:TLS_AES_256_GCM_SHA384:256:NO)
	for <9front@9front.org>;
	Thu, 25 Jul 2024 17:09:24 -0500 (CDT)
Message-ID: <b1b39b12-7ca2-4f0b-bb4c-dfe4af02403e@posixcafe.org>
Date: Thu, 25 Jul 2024 17:10:15 -0500
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
To: 9front@9front.org
References: <15F9DB0E-BED2-41FD-95F0-F04D6F2A3704@stanleylieber.com>
Content-Language: en-US
From: Jacob Moody <moody@posixcafe.org>
In-Reply-To: <15F9DB0E-BED2-41FD-95F0-F04D6F2A3704@stanleylieber.com>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
List-ID: <9front.9front.org>
List-Help: <http://lists.9front.org>
X-Glyph: ➈
X-Bullshit: agile responsive template cache session locator 
Subject: Re: [9front] WANTED: ip based filtering of incoming connections
Reply-To: 9front@9front.org
Precedence: bulk

On 7/25/24 16:56, Stanley Lieber wrote:
> ai crawlers have discovered one of my servers.
> 
> smtpd has the -k flag, which i use to manually block especially egregious spammers, but ip(3) and listen(8) seem to offer nothing generic to bar aggressive customers from entry.
> 
> am i missing something?
> 
> sl

There is a somewhat well kept secret but you can use ipmux to blackhole incoming connections:

; aux/dial 'ipmux!ifc=my.external.ip;dst=192.168.0.0&255.255.0.0|10.0.0.0&255.0.0.0' > /dev/null

There is probably room for something better but this should get the AI grifters off your case for now.


Thanks,
moody