- Sep 01, 2011
-
-
rswindell authored
-
rswindell authored
-
rswindell authored
Added menu item for editing modopts.ini.
-
rswindell authored
The attempt list can be view with sbbscon->'a' command or sbbsctrl->view->Login Attempt List... Delay/throttle/hacklog/and auto-filter values/thresholds are now configurable in sbbs.ini.
-
rswindell authored
-
- Aug 31, 2011
-
-
rswindell authored
js.gc_counter, js.gc_last_bytes, js.bytes, and js.max_bytes Since these properties rely on internal JS context structure offsets, they're not always compatible with replaced (upgraded or downgraded) JS library (shared object or DLL) and can cause crashes in some cases. They can be useful in some debugging cases, so I'm leaving them in the debug build, but use with caution.
-
rswindell authored
value of js.auto_terminate (e.g. the irc.js could not restore the original value, thus re-enabling auto-terminate upon exit of the IRC client).
-
rswindell authored
recent), and automatically filter IPs of obvious hackers (100 consecutive unique failed login attempts).
-
rswindell authored
-
rswindell authored
-
rswindell authored
from the same host (but not necessarily the same connection). No login retry is allowed for suspected hackers (one authentication attempt per connection). New-connections from suspected hack hosts are now delayed increasingly with the number of failed login attempts.
-
rswindell authored
from the same host (but not necessarily the same connection). No login retry is allowed for suspected hackers (one authentication attempt per connection). Other FTP hack.log entries contain a little more detail about the type of suspected hack attempt (e.g. "FTP BOUNCE").
-
- Aug 30, 2011
-
-
rswindell authored
JSexec confirm function now prompts user and return value is based on their response.
-
rswindell authored
-
rswindell authored
especially through SMTP (where these values are exposed via the Originator-info header field): SENDERUSERID, SENDERSERVER, and SERVERTIME.
-
rswindell authored
especially through SMTP (where these values are exposed via the Originator-info header field): SENDERUSERID, SENDERSERVER, and SERVERTIME.
-
- Aug 27, 2011
-
-
rswindell authored
Added the "Originator-info" header field for transmitted messages which will help track the original submission, especially when submitted via protocols other than SMTP. The RECIPIENT/To header field for SMTP-submitted msgs now contains the parsed "To:" name, if possible (instead of the address). Added security delay to failed SMTP AUTH-MD5 logins.
-
rswindell authored
telnet_gate() now enables the telnet command pass-through after negotiating necessary options. This doesn't quite fix the problem reported with telgating to nethack.alt.org, but it's a step in the right direction.
-
- Aug 26, 2011
-
-
rswindell authored
I/O" option to "Standard" for external online progarms (doors). External editor "Intercept I/O" option display "Standard" instead of "Yes".
-
- Aug 25, 2011
-
-
rswindell authored
not known.
-
rswindell authored
-
rswindell authored
-
rswindell authored
-
rswindell authored
optional rejection message file (text/badpassword.msg) - this file is where the sysop should add common/obvious passwords like "password".
-
rswindell authored
- added 5 second delay before responding to POP or SMTP client regarding invalid username or password attempt (limit number of effective brute force hack attempts per minute). - increment the user email sent statistics for authenticated SMTP msg recvs - check the configured max emails per day value (for the user's security level) and reject any messages that would exceed this value (exept for 'M'-exempt users) - this has been on the todo list for a long time.
-
rswindell authored
unlimited number of emails per day.
-
- Aug 12, 2011
-
-
sbbs authored
but run with a different version of libjs.so.
-
- Aug 11, 2011
- Aug 10, 2011
- Aug 06, 2011
-
-
rswindell authored
place (e.g. the file was probably already uploaded to disk).
-
rswindell authored
of configured upload requirements) and exceed the "max files" settings per dir. Also, directory operators now always have upload permissions.
-
rswindell authored
of configured upload requirements) and exceed the "max files" settings per dir.
-
- Jul 29, 2011
- Jul 21, 2011
-
-
rswindell authored
-
rswindell authored
Create and include in packet TOREADER.EXT if QWKEsupport is enabled (MultiMail keys of this file for QWKE support, so without, no QWKE features are enabled in MultiMail). Parse TODOOR.EXT if included in REP packets (for adding/dropping subs or setting/resetting pointers). Parse To:, From:, and Subject: QWKE kludge lines and use if/when appropriate (e.g. to defeat QWK 25-char header field limits). Create To:, From:, and Subject: QWKE kludge lines in QWK/REP packets when QWKE support is enabled and those fields exceed QWK limits (25 chars). Also, legacy SyncQNET kludge lines (@VIA, @TZ, etc.) may now exist in the top of the message body in any order. Note: current versions of MultiMail do not support "To" fields > 25 chars, even in QWKE mode (though I have a patch pending) and do not (yet) support Synchronet HEADERS.DAT file (rendering QWKE kludges unnecessary). These are major changes in the QWK/REP creation/parsing code, so testing (especially with QWKE-compliant offline readers) and bug reports are welcome!
-
rswindell authored
That is, if any of the following text.dat entries are set to a blank/emtpy string (by editing ctrl/text.dat or via run-time script modification), the question will not be asked of the user allowing greater sysop-customization of hard-coded processes (e.g. new user application): ClearUploadQueueQ ClearDownloadQueueQ HangUpAfterXferQ ChatWithGuruInsteadQ ForwardMailQ DownloadBatchQ LogOffQ DeleteErrorLogQ ClearErrCounter DeleteGuruLogQ AutoTerminalQ AnsiTerminalQ ColorTerminalQ ExAsciiTerminalQ CallingFromNorthAmericaQ ReadYourMailNowQ NScanAllGrpsQ SScanAllGrpsQ NewPasswordQ ContinueQ EnterYourPhoneNumber UserInfoCorrectQ UseExternalEditorQ DownloadAttachedFileQ AddSubToNewScanQ (new) RemoveFromNewScanQ DisplaySubjectsOnlyQ Post SearchExtendedQ ViewSysInfoFileQ ViewLogonMsgQ WithLineNumbersQ
-
rswindell authored
-