Rocksolid Light

Welcome to novaBBS

register   nodelist   faq  

Your account also provides newsreader access to all groups at news.i2pn2.org port 119 or 563 (TLS)


rocksolid / Rocksolid Network / Re: NoCeM from novabbs

SubjectAuthor
* NoCeM from novabbsRetro Guy
`* Re: NoCeM from novabbsRetro Guy
 `* Re: NoCeM from novabbsRetro Guy
  `* Re: NoCeM from novabbsanon
   `* Re: NoCeM from novabbsRetro Guy
    `- Re: NoCeM from novabbsanon

1
Subject: NoCeM from novabbs
From: Retro Guy
Newsgroups: rocksolid.shared.rocksolid
Organization: Rocksolid Light
Date: Fri, 20 Dec 2019 05:05 UTC
Path: i2pn2.org!.POSTED!not-for-mail
From: Retro ...@rslight.i2p (Retro Guy)
Newsgroups: rocksolid.shared.rocksolid
Subject: NoCeM from novabbs
Date: Fri, 20 Dec 2019 05:05:57 -0000 (UTC)
Organization: Rocksolid Light
Message-ID: <1861b4a0af88a98ff2b4d267ca61a82e$1@news.novabbs.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Fri, 20 Dec 2019 05:05:57 -0000 (UTC)
Injection-Info: i2pn2-novalink.localdomain; posting-account="retrobbs1";
logging-data="11151"; mail-complaints-to="usenet@i2pn2-novalink.localdomain"
User-Agent: Rocksolid Light (news.novabbs.com/getrslight)
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on novabbs.com
X-Rslight-Site: $2y$10$ap5q.rKySbHh0XoHZU6vPOsodWIuq9l5qlAd.EisJ1RMma7avoP56
View all headers
I believe I have NoCeM working now (I can send a cancel post that works)

This is used as a way to cancel spam across servers. Only an install set up to act on the posts will actually cancel (or allow:hide) a message.

All my servers now act on the messages I send except for i2pn.org, which passes everything through. If you wish to respond to the posts and act on them, you will need to set up NoCeM on your end:

https://www.mankier.com/8/perl-nocem#Description

The key needed to verify is here: https://news.novabbs.com/hierarchy/nocem.txt
(or rslight.i2p/hierarchy/nocem.txt)

If you are curious what I list, please reference the message-ids in the post.

Retro Guy

--
Posted on Rocksolid Light


Subject: Re: NoCeM from novabbs
From: Retro Guy
Newsgroups: rocksolid.shared.rocksolid
Organization: Rocksolid Light
Date: Fri, 20 Dec 2019 05:08 UTC
Path: i2pn2.org!.POSTED!not-for-mail
From: Retro ...@rslight.i2p (Retro Guy)
Newsgroups: rocksolid.shared.rocksolid
Subject: Re: NoCeM from novabbs
Date: Fri, 20 Dec 2019 05:08:51 -0000 (UTC)
Organization: Rocksolid Light
Message-ID: <e22a0e34f03adbdb577db9e181feb146$1@news.novabbs.com>
References: <1861b4a0af88a98ff2b4d267ca61a82e$1@news.novabbs.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Fri, 20 Dec 2019 05:08:51 -0000 (UTC)
Injection-Info: i2pn2-novalink.localdomain; posting-account="retrobbs1";
logging-data="11926"; mail-complaints-to="usenet@i2pn2-novalink.localdomain"
User-Agent: Rocksolid Light (news.novabbs.com/getrslight)
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on novabbs.com
X-Rslight-Site: $2y$10$qdFzMW78HuIlg4rrh/nfXuDMWjSaqyqfIj5DzcYfRUeE9AngzmSSe
View all headers
Retro Guy wrote:

If you are curious what I list, please reference the message-ids in the post.

It might help if I mention where I post. All NoCeM messages by me are posted to 'rocksolid.spam'

Retro Guy

--
Posted on Rocksolid Light


Subject: Re: NoCeM from novabbs
From: Retro Guy
Newsgroups: rocksolid.shared.rocksolid
Organization: Rocksolid Light
Date: Fri, 20 Dec 2019 07:49 UTC
Path: i2pn2.org!.POSTED!not-for-mail
From: Retro ...@rslight.i2p (Retro Guy)
Newsgroups: rocksolid.shared.rocksolid
Subject: Re: NoCeM from novabbs
Date: Fri, 20 Dec 2019 07:49:35 -0000 (UTC)
Organization: Rocksolid Light
Message-ID: <453ec623a7cfcc3b4bb885b2ef14b215$1@news.novabbs.com>
References: <1861b4a0af88a98ff2b4d267ca61a82e$1@news.novabbs.com> <e22a0e34f03adbdb577db9e181feb146$1@news.novabbs.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Fri, 20 Dec 2019 07:49:35 -0000 (UTC)
Injection-Info: i2pn2-novalink.localdomain; posting-account="retrobbs1";
logging-data="2575"; mail-complaints-to="usenet@i2pn2-novalink.localdomain"
User-Agent: Rocksolid Light (news.novabbs.com/getrslight)
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on novabbs.com
X-Rslight-Site: $2y$10$cTrZQSwAC81cWhmKQN3BRetmViY9iBHHrbOlZF9n6oJDUEHpJ8ilW
View all headers
I've cleaned up the format of the posts to show more info:

Sender, Date and Subject for each message listed.

Took a bit to get the posts through the spam filter :)

Retro Guy
--
Posted on Rocksolid Light


Subject: Re: NoCeM from novabbs
From: anon
Newsgroups: rocksolid.shared.rocksolid
Organization: def5
Date: Fri, 20 Dec 2019 16:01 UTC
Path: i2pn2.org!rocksolid2!def5!POSTED.localhost!not-for-mail
From: ano...@anon.com (anon)
Newsgroups: rocksolid.shared.rocksolid
Message-ID: <d970fd4f25b85c2bbbc30168e34f0648@def4>
Subject: Re: NoCeM from novabbs
Date: Fri, 20 Dec 2019 16:01:46+0000
Organization: def5
In-Reply-To: <453ec623a7cfcc3b4bb885b2ef14b215$1@news.novabbs.com>
References: <453ec623a7cfcc3b4bb885b2ef14b215$1@news.novabbs.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
View all headers

All NoCeM messages by me are posted to 'rocksolid.spam'
I have created that group on def2. Not sure if I will install the software or not yet.

Was the ddos attack bots posting spam or what ? in that case a captcha will go a long way. just saying...

cheers

trw

Posted on def4


Subject: Re: NoCeM from novabbs
From: Retro Guy
Newsgroups: rocksolid.shared.rocksolid
Organization: Rocksolid Light
Date: Sat, 21 Dec 2019 10:05 UTC
Path: i2pn2.org!.POSTED!not-for-mail
From: Retro ...@rslight.i2p (Retro Guy)
Newsgroups: rocksolid.shared.rocksolid
Subject: Re: NoCeM from novabbs
Date: Sat, 21 Dec 2019 10:05:06 -0000 (UTC)
Organization: Rocksolid Light
Message-ID: <dba1b9029dc717e7f2b5dbec98ea8838$1@news.novabbs.com>
References: <453ec623a7cfcc3b4bb885b2ef14b215$1@news.novabbs.com> <d970fd4f25b85c2bbbc30168e34f0648@def4>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Sat, 21 Dec 2019 10:05:06 -0000 (UTC)
Injection-Info: i2pn2-novalink.localdomain; posting-account="retrobbs1";
logging-data="15891"; mail-complaints-to="usenet@i2pn2-novalink.localdomain"
User-Agent: Rocksolid Light (news.novabbs.com/getrslight)
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on novabbs.com
X-Spam-Level: *
X-Rslight-Site: $2y$10$8vG8PYNOJS6GDP6aXkujvuQunMId2ILoB9Zdfon.dyRgF0G4sMB7K
View all headers
anon wrote:


All NoCeM messages by me are posted to 'rocksolid.spam'
I have created that group on def2. Not sure if I will install the software or not yet.

It's just a way to have the posts automatically deleted without intervention. There's really not much spam that gets through, but when it does, I need to delete it on every one of my servers, which is a pain. This way, I just list it once and all the servers delete it. Also, I receive quite a bit of legal notice (Defamation) from EU law firms asking for posts to be taken down. While I'm not legally obligated to do anything as I'm not in the EU, the posts are pointless crap in mostly programming groups calling people (not posters in the groups) assassins, pedos, etc., so I take them down, and this allows me to do it easily and in bulk (there are a lot of such posts.)

Was the ddos attack bots posting spam or what ? in that case a captcha will go a long way. just saying...

The dos is hits at a very fast rate (many per second) to the same resources over and over again, and multiple pages simultaneously. It does not fit the fingerprint of a spider, but of software designed to shut down a site. This ties up the server processes and then the web server appears down (no more processes available). This has been increasing rapidly over the past few weeks to the point that I temporarily was restarting the web server in a cron job to keep it running.

Nothing to do with spam, it's just what appears to be intentional overwhelming of the server. Seems to be fine now that the connections can be dropped quickly. It's really not much different than what fail2ban would do.

Retro Guy

--
Posted on Rocksolid Light


Subject: Re: NoCeM from novabbs
From: anon
Newsgroups: rocksolid.shared.rocksolid
Organization: def5
Date: Sat, 21 Dec 2019 21:04 UTC
Path: i2pn2.org!rocksolid2!def5!POSTED.localhost!not-for-mail
From: ano...@anon.com (anon)
Newsgroups: rocksolid.shared.rocksolid
Message-ID: <65ef76131c2aadf1920d89f8c77c38ec@def4>
Subject: Re: NoCeM from novabbs
Date: Sat, 21 Dec 2019 21:04:36+0000
Organization: def5
In-Reply-To: <dba1b9029dc717e7f2b5dbec98ea8838$1@news.novabbs.com>
References: <dba1b9029dc717e7f2b5dbec98ea8838$1@news.novabbs.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
View all headers

It's just a way to have the posts automatically deleted >without intervention. There's really not much spam that gets >through, but when it does, I need to delete it on every one >of my servers, which is a pain. This way, I just list it once >and all the servers delete it.

seems like a nice solution. for me it is enough if i can follow your cancels. i have written a little script for convenient deletion.

Also, I receive quite a bit of legal notice (Defamation) from >EU law firms asking for posts to be taken down. While I'm not >legally obligated to do anything as I'm not in the EU, the >posts are pointless crap in mostly programming groups calling >people (not posters in the groups) assassins, pedos, etc.,

makes me glad i stayed out of the clearnet. i never received any requests like this, but i would probably just ignore them.


The dos is hits at a very fast rate (many per second) to the >same resources over and over again, and multiple pages >simultaneously. It does not fit the fingerprint of a spider, >but of software designed to shut down a site. This ties up >the server processes and then the web server appears down (no >more processes available). This has been increasing rapidly >over the past few weeks to the point that I temporarily was >restarting the web server in a cron job to keep it running.

so you're saying somebody is trying to shut your servers down ? strange. some pointless vandalism...

Nothing to do with spam, it's just what appears to be >intentional overwhelming of the server. Seems to be fine now >that the connections can be dropped quickly. It's really not >much different than what fail2ban would do.

good that you found a way to solve this.

cheers

trw

Posted on def4


1
rocksolid light 0.6.6
clearnet i2p tor