[Dxspider-support] Dxspider-support Digest, Vol 236, Issue 10
Brian Bowers
g0vax67 at gmail.com
Wed Sep 14 14:33:49 BST 2022
Hi Kin,
Please send the script!!
Best Wishes,
Brian G0VAX (GB7VAX)
Get Outlook for iOS<https://aka.ms/o0ukef>
________________________________
From: Dxspider-support <dxspider-support-bounces at tobit.co.uk> on behalf of dxspider-support-request at tobit.co.uk <dxspider-support-request at tobit.co.uk>
Sent: Wednesday, September 14, 2022 2:15:39 PM
To: dxspider-support at tobit.co.uk <dxspider-support at tobit.co.uk>
Subject: Dxspider-support Digest, Vol 236, Issue 10
Send Dxspider-support mailing list submissions to
dxspider-support at tobit.co.uk
To subscribe or unsubscribe via the World Wide Web, visit
https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support
or, via email, send a message with subject or body 'help' to
dxspider-support-request at tobit.co.uk
You can reach the person managing the list at
dxspider-support-owner at tobit.co.uk
When replying, please edit your Subject line so it is more specific
than "Re: Contents of Dxspider-support digest..."
Today's Topics:
1. badspotter badwords (David Spoelstra)
2. Re: badspotter badwords (Joaquin)
3. R: badspotter badwords (iz6fxs at cisarmajella.org)
4. Re: badspotter badwords (David Spoelstra)
5. Re: badspotter badwords (Danilo Brelih)
6. Re: badspotter badwords (Joaquin)
----------------------------------------------------------------------
Message: 1
Date: Wed, 14 Sep 2022 08:35:40 -0400
From: David Spoelstra <davids at mediamachine.com>
To: The DXSpider Support list <dxspider-support at tobit.co.uk>
Subject: [Dxspider-support] badspotter badwords
Message-ID:
<CAEKn9qZ20eR-WprbromAF8T6RZU9jNjbid51Jm6tDHsMt8xcaw at mail.gmail.com>
Content-Type: text/plain; charset="utf-8"
Seems like my cluster is being used for propaganda. I've spent the morning
running "set/badspotter" and "set/badword" commands. Is there anything else
I should be doing?
Thanks!
-David, N9KT
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mailman.tobit.co.uk/pipermail/dxspider-support/attachments/20220914/075374b5/attachment-0001.htm>
------------------------------
Message: 2
Date: Wed, 14 Sep 2022 14:50:20 +0200
From: Joaquin <joaquin at cronux.net>
To: David Spoelstra via Dxspider-support
<dxspider-support at tobit.co.uk>
Subject: Re: [Dxspider-support] badspotter badwords
Message-ID: <6c75288b-0f94-d723-bb93-49a9927fa5b4 at cronux.net>
Content-Type: text/plain; charset=UTF-8; format=flowed
Hi David,
You have two more options:
1. Enable for everyone:
set/register
set/password
2. If you want I can send you a small script that will automatically
block any callsign that comes from the TOR network or is using a PROXY.
The script runs the set/bad/spotter command and logs the callsign that
has been blocked.
It is a help, but it is not the definitive solution.
Regards.
Kin EA3CV
El 14/09/2022 a las 14:35, David Spoelstra via Dxspider-support escribi?:
> Seems like my cluster is being used for propaganda. I've spent the
> morning running "set/badspotter" and "set/badword" commands. Is there
> anything else I should be doing?
------------------------------
Message: 3
Date: Wed, 14 Sep 2022 14:53:06 +0200
From: "iz6fxs at cisarmajella.org" <iz6fxs at cisarabruzzo.org>
To: "'The DXSpider Support list'" <dxspider-support at tobit.co.uk>
Subject: [Dxspider-support] R: badspotter badwords
Message-ID: <00b201d8c838$ef677c10$ce367430$@cisarabruzzo.org>
Content-Type: text/plain; charset="utf-8"
Please share the script!
Thanks,
Norm IZ6FXS
-----Messaggio originale-----
Da: Dxspider-support <dxspider-support-bounces at tobit.co.uk> Per conto di Joaquin via Dxspider-support
Inviato: mercoled? 14 settembre 2022 14:50
A: David Spoelstra via Dxspider-support <dxspider-support at tobit.co.uk>
Cc: Joaquin <joaquin at cronux.net>
Oggetto: Re: [Dxspider-support] badspotter badwords
Hi David,
You have two more options:
1. Enable for everyone:
set/register
set/password
2. If you want I can send you a small script that will automatically block any callsign that comes from the TOR network or is using a PROXY.
The script runs the set/bad/spotter command and logs the callsign that has been blocked.
It is a help, but it is not the definitive solution.
Regards.
Kin EA3CV
El 14/09/2022 a las 14:35, David Spoelstra via Dxspider-support escribi?:
> Seems like my cluster is being used for propaganda. I've spent the
> morning running "set/badspotter" and "set/badword" commands. Is there
> anything else I should be doing?
_______________________________________________
Dxspider-support mailing list
Dxspider-support at tobit.co.uk
https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support
------------------------------
Message: 4
Date: Wed, 14 Sep 2022 08:54:45 -0400
From: David Spoelstra <davids at mediamachine.com>
To: The DXSpider Support list <dxspider-support at tobit.co.uk>
Cc: Joaquin <joaquin at cronux.net>
Subject: Re: [Dxspider-support] badspotter badwords
Message-ID:
<CAEKn9qZ8ovw=BwuO09Y4AUsfS+6r8VPu8YCcLe17D8ADt4oPGg at mail.gmail.com>
Content-Type: text/plain; charset="utf-8"
Joaquin-
Yes, please, send me the script.
-David, N9KT
On Wed, Sep 14, 2022 at 8:51 AM Joaquin via Dxspider-support <
dxspider-support at tobit.co.uk> wrote:
> Hi David,
>
> You have two more options:
>
> 1. Enable for everyone:
> set/register
> set/password
>
> 2. If you want I can send you a small script that will automatically
> block any callsign that comes from the TOR network or is using a PROXY.
> The script runs the set/bad/spotter command and logs the callsign that
> has been blocked.
> It is a help, but it is not the definitive solution.
>
> Regards.
>
> Kin EA3CV
>
> El 14/09/2022 a las 14:35, David Spoelstra via Dxspider-support escribi?:
> > Seems like my cluster is being used for propaganda. I've spent the
> > morning running "set/badspotter" and "set/badword" commands. Is there
> > anything else I should be doing?
>
> _______________________________________________
> Dxspider-support mailing list
> Dxspider-support at tobit.co.uk
> https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mailman.tobit.co.uk/pipermail/dxspider-support/attachments/20220914/e5bb0039/attachment-0001.htm>
------------------------------
Message: 5
Date: Wed, 14 Sep 2022 14:58:38 +0200
From: Danilo Brelih <danilo.brelih at siol.net>
To: dxspider-support at tobit.co.uk
Subject: Re: [Dxspider-support] badspotter badwords
Message-ID: <3a7f7020-1449-bab2-a63d-0e8071cde509 at siol.net>
Content-Type: text/plain; charset="utf-8"; Format="flowed"
Joaquin via Dxspider-support je 14.9.2022 ob 14:50?napisal:
> 2. If you want I can send you a small script that will automatically block any
> callsign that comes from the TOR network or is using a PROXY.
> The script runs the set/bad/spotter command and logs the callsign that has
> been blocked.
> It is a help, but it is not the definitive solution.
I'm running Kin's script successfully on Ubuntu 20.04 so far so good. Some "bad"
ip's are also added to iptables firewall on my box.
73
Dan S50U
--
Gorje, Cerkno h=604m <https://s50e.si/gorje.html>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mailman.tobit.co.uk/pipermail/dxspider-support/attachments/20220914/a808cb61/attachment-0001.htm>
------------------------------
Message: 6
Date: Wed, 14 Sep 2022 15:15:31 +0200
From: Joaquin <joaquin at cronux.net>
To: David Spoelstra <davids at mediamachine.com>, The DXSpider Support
list <dxspider-support at tobit.co.uk>
Subject: Re: [Dxspider-support] badspotter badwords
Message-ID: <9588410a-c3b8-7124-1034-04406f468293 at cronux.net>
Content-Type: text/plain; charset="utf-8"; Format="flowed"
Hi all,
For those who want to do tests, and I'm sure it can be improved a lot.
* bad_spotter.pl beta testing procedure
1. Download TOR and Proxies IP list, first time:
curl -o /spider/local_data/tor-proxies.txt
https://raw.githubusercontent.com/X4BNet/lists_torexit/main/ipv4.txt
curl -o /spider/local_data/proxies-exits.txt
https://lists.fissionrelays.net/tor/relays-ipv4.txt
cat /spider/local_data/proxies-exits.txt >
/spider/local_data/tor-proxies.txt
sed -i "s|$|/32|" /spider/local_data/tor-proxies.txt
2. Copy the bad_spotter.pl script to: /spider/local_cmd/bad_spotter.pl
3. Run chmod +x /spider/local_cmd/bad_spotter.pl
4. Add in /spider/local_cmd/crontab:
# Bad spotter
0 0 * * *? spawn('pkill -f "/usr/bin/perl -w
/spider/local_cmd/bad_spotter.pl"')
1 0 * * *? spawn("/usr/bin/perl -w /spider/local_cmd/bad_spotter.pl")
30 * * * * spawn('curl -o /spider/local_data/tor-proxies.txt
https://raw.githubusercontent.com/X4BNet/lists_torexit/main/ipv4.txt')
31 * * * * spawn('curl -o /spider/local_data/proxies-exits.txt
https://lists.fissionrelays.net/tor/relays-ipv4.txt')
32 * * * * spawn('cat /spider/local_data/proxies-exits.txt >
/spider/local_data/tor-proxies.txt')
33 * * * * spawn('sed -i "s|$|/32|" /spider/local_data/tor-proxies.txt')
4. Make sure the directory is created: /spider/cmd_import , if not:
mkdir /spider/cmd_import
5. Make log directory:
mkdir /spider local_data/bad_spotter
6. The first time you want to run it, from the prompt:
/usr/bin/perl -w /spider/local_cmd/bad_spotter.pl &
# End
Example tail -f /spider local_data/bad_spotter/log.txt
2022-09-12T14:01:53 [N9KT-2, RA1AL, 185.220.101.79, Politics and
HAMSPIRIT no mix!]
2022-09-12T14:54:41 [N9KT-2, RA3ATX, 185.129.61.129, RU will liberate
the world!]
2022-09-13T17:52:58 [PI4CC, PA2A, 77.171.80.188, ]
Do not forget that it is a development version.
73 de Kin
Sysop EA3CV-2 & EA4URE-2,3,5
El 14/09/2022 a las 14:54, David Spoelstra escribi?:
> Joaquin-
> Yes, please, send me the script.
> -David, N9KT
>
> On Wed, Sep 14, 2022 at 8:51 AM Joaquin via Dxspider-support
> <dxspider-support at tobit.co.uk> wrote:
>
> Hi David,
>
> You have two more options:
>
> 1. Enable for everyone:
> set/register
> set/password
>
> 2. If you want I can send you a small script that will automatically
> block any callsign that comes from the TOR network or is using a
> PROXY.
> The script runs the set/bad/spotter command and logs the callsign
> that
> has been blocked.
> It is a help, but it is not the definitive solution.
>
> Regards.
>
> Kin EA3CV
>
> El 14/09/2022 a las 14:35, David Spoelstra via Dxspider-support
> escribi?:
> > Seems like my cluster is being used for propaganda. I've spent the
> > morning running "set/badspotter" and "set/badword" commands. Is
> there
> > anything else I should be doing?
>
> _______________________________________________
> Dxspider-support mailing list
> Dxspider-support at tobit.co.uk
> https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mailman.tobit.co.uk/pipermail/dxspider-support/attachments/20220914/d13e4bad/attachment.htm>
-------------- next part --------------
#!/usr/bin/perl
#
# Automatic callsign blocking that uses TOR or PROXIES to send spots
#
# Created by EA3CV
#
# 20220914 v0.3
#
use strict;
use warnings;
use 5.10.1;
use NetAddr::IP;
use Time::Piece;
$ENV{TZ} = "UTC";
#my $server = $ARGV[0];
my $time = Time::Piece->new;
my $d = $time->yday();
$d = sprintf("%03d", $d) + 1;
my $y = $time->year("");
my $log = "/spider/local_data/spots/$y/$d.dat";
open my $data, "-|", "/usr/bin/tail", "-n1", "-f", $log or die "could not start tail on $log: $!";
my $line;
my @rray;
my @conn;
my $tor = "/spider/local_data/tor-proxies.txt";
my $log_bad = "/spider/local_data/bad_spotter/log.txt";
#my $log_noIP = "/spider/local_data/no_IP/log.txt";
while($line = <$data>){
chomp($line);
my @line = split(/\^/, $line, -1);
# Obtener [node, spotter, IP source, comment]
my $spotter = $line[4];
my $node = $line[7];
my $comm = $line[3];
if (scalar(@line) == 15) {
my $ipAddr = $line[14];
# Find IP tor-proxies.txt
open TOR, $tor or die "No existe ".$tor;
my @netAddr = <TOR>;
my $i = 0;
my $x = 0;
while ($x < 1 && $i < scalar(@netAddr)) {
my $network = NetAddr::IP->new($netAddr[$i]);
my $ip = NetAddr::IP->new($ipAddr);
if ($ip->within($network)) {
# Send set/badspotter to DXSpider
open (FH, '>', "/spider/cmd_import/EA3CV");
my $msg = "set/badspotter $spotter";
say FH $msg;
close (FH);
# # Send set/baddx to DXSpider
# open (FH, '>', "/spider/cmd_import/EA3CV");
# $msg = "set/baddx $spotter";
# say FH $msg;
# close (FH);
# Log bad_spotter
my $times = gmtime();
my $ts = Time::Piece->strptime($times, '%a %b %d %H:%M:%S %Y')->datetime("");
open (LOGBAD, '>>', "/spider/local_data/bad_spotter/log.txt");
my $out = "$ts [$node, $spotter, $ipAddr, $comm]";
say LOGBAD $out;
close (LOGBAD);
$x = 1;
}
$i++;
}
close TOR;
} else {
# # Log no_ip
# open (LOGNOIP, '>>', "/spider/local_data/no_IP/log.txt");
# my $out = "[$node, $spotter]";
# say LOGNOIP $out;
# close (LOGNOIP);
}
}
close $data;
------------------------------
Subject: Digest Footer
_______________________________________________
Dxspider-support mailing list
Dxspider-support at tobit.co.uk
https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support
------------------------------
End of Dxspider-support Digest, Vol 236, Issue 10
*************************************************
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mailman.tobit.co.uk/pipermail/dxspider-support/attachments/20220914/fc5c650e/attachment-0001.htm>
More information about the Dxspider-support
mailing list