Subj : Bink Block
To   : All
From : Warpslide
Date : Fri Nov 29 2024 09:28:08

Just in case someone else may find this useful...

Scenario 1:  You belong to a network but decide to drop it.  You've sent your hub a netmail & email letting them know.  Even though two years have gone by they constantly try to poll you.

You netmail and email again & again, never receiving a response yet they still poll your system, sometimes hundreds of times a day, each time with a password error.

Scenario 2:  You no longer want one of your downlinks polling you.  You've asked them to update their config but are unresponsive.

Solution?  Block their ass(es)!

Create an IP set to store ip networks:
ipset -N block4 hash:net
ipset -N block6 hash:net family inet6

Add lines to firewall to block referenced IP sets:
iptables -A INPUT -p all -m set --match-set block4 src -j DROP
ip6tables -A INPUT -p all -m set --match-set block6 src -j DROP

Run this script each time you toss mail or at least once per day:

#!/bin/bash
BINKLOG="/path/to/binkd.log"

BLOCK=(
  "ZYZ John Doe$"
  "ZYZ Jane Doe$"
  "ZYZ j0hnd03$"
  "addr: 1:234/567@fidonet"
  "addr: 21:3/999@fsxnet"
)

for i in "${BLOCK[@]}"; do

  # Find the latest log entry matching the pattern
  getpoll=$(tac "$BINKLOG" | grep -m 1 "$i")

  if [[ -n $getpoll ]]; then
    # Extract the PID from the log entry using bash string manipulation
    pollpid="${getpoll#*[}"
    pollpid="${pollpid%%]*}"

    # Find the incoming session log entry associated with PID & extract IP address
    poll=$(grep "\[$pollpid\] incoming session with" "$BINKLOG")
    poll="${poll#*]}"
    poll="${poll#*[}"

    ip="${poll%%]*}"

    # If IP is IPv4
    if [[ "$ip" =~ ^([0-9]{1,3}\.){3}[0-9]{1,3}$ ]]; then

      # Convert to CIDR format
      cidr="${ip%.*}.0/24"

      # Check if CIDR is already in the block4 IP set
      if ! sudo ipset test block4 "$cidr" > /dev/null 2>&1; then
        # Add the CIDR to the block4 IP set and save changes
        sudo ipset add block4 "$cidr"
        sudo sh -c "ipset save > /etc/iptables/ipsets"
      fi
    # If IP is IPv6
    elif [[ "$ip" =~ ^([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}$ || "$ip" == *"::"* ]]; then

      # Convert to CIDR format
      cidr="$(echo "$ip" | cut -d: -f1-4)::/64"

      # Check if CIDR is already in the block6 IP set
      if ! sudo ipset test block6 "$cidr" > /dev/null 2>&1; then
        # Add the CIDR to the block6 IP set and save changes
        sudo ipset add block6 "$cidr"
        sudo sh -c "ipset save > /etc/iptables/ipsets"
      fi
    fi
  fi
done

You can also find a copy here:
https://nrbbs.net/binkblock.sh.txt


Jay

.... Anyone can get old.  All you have to do is live long enough

--- Mystic BBS v1.12 A49 2024/05/29 (Linux/64)
 * Origin: Northern Realms (618:400/23)

.