[Dxspider-support] Abusive show/heading commands
John Spigel
w1an.dxusa at gmail.com
Sun Jan 14 22:45:18 GMT 2024
The sh/h result will be user specific so you see simultaneous requests
to dxspider with each spot from each user. The clock software could
contain a sh/heading app within.
73, John W1AN
On 14-Jan-24 22:31, Keith Maton via Dxspider-support wrote:
> Answering myself.
>
> The cty file does contain prefixes and long/lat. I’ve just suggested
> to Elwood that he could do this locally within HamClock rather than
> querying the cluster.
>
> I’ll keep the list updated.
>
> 73 Keith
>
>
>
>
>> On 14 Jan 2024, at 22:25, Keith Maton via Dxspider-support
>> <dxspider-support at tobit.co.uk> wrote:
>>
>> I’m in regular conversation with the author of HamClock. He’s aware
>> of this and is very open to suggestions.
>>
>> He’s already made a number of changes over the last few versions
>> following my feedback to reduce the amount of traffic that HamClock
>> generates, a big one last year was switching from regular keep-alive
>> commands every few minutes down to just sending a ping if there’s no
>> activity for ten minutes.
>>
>> I have around twenty HamClocks connected to my node with only an FTTC
>> connection (80Mbps down, 20Mbps up) and it’s not swamping my
>> connection at all. I use HamClock myself and find it a very useful
>> tool so I personally don’t have a problem with people connecting to
>> my node using it.
>>
>> At the moment, when a HamClock is connected to a DX Spider and
>> receives a spot, it sends a show/heading command so it can plot the
>> received spot on the map. If there’s any alternative to this, I’m
>> happy to pass it on to him.
>>
>> If anyone has any suggestions as to how he can reduce this but still
>> provide the same functionality, I’m very happy to pass them on and
>> I’m sure he’ll look into it.
>>
>> But describing HamClock as sh*t software and being abusive isn’t the
>> way to go here.
>>
>> I’m wondering if he can somehow cache the cty file locally on the
>> HamClock and use that as a lookup.
>>
>> I will mention to him that this subject has been raised again.
>>
>> 73 Keith G6NHU
>>
>>
>>> On 14 Jan 2024, at 22:06, John Spigel via Dxspider-support
>>> <dxspider-support at tobit.co.uk> wrote:
>>>
>>> My debug file is chock full of sh/headings. Each results in a
>>> lengthy response that is unlikely used. An alternative should be
>>> agreed upon. Let's not condemn the author of clock. It's a very
>>> useful application and does provide spots for the users. Let's work
>>> with him to see what we can do to make it work within acceptable limits.
>>>
>>> 73, John W1AN
>>>
>>>
>>> On 14-Jan-24 19:00, Peter via Dxspider-support wrote:
>>>> Hi Steve
>>>>
>>>> Let us know how to take down this s**t piece of software.
>>>> The command sh/head is only traceable in the debug file as I know.
>>>>
>>>> @Dirk
>>>> Is there a way to create/make a log file that contains this type
>>>> of commands on a month bases? (like log/01.dat)
>>>> Then we can create a fail2ban filter for it (and other cmds).
>>>>
>>>> Peter
>>>> PC2A
>>>>
>>>> Op 14-1-2024 om 18:07 schreef John Spigel via Dxspider-support:
>>>>> Steve, I have a couple of ideas I may try to discourage the abuse.
>>>>> I'll post results if they work.
>>>>> And another solution may be to encourage the author of hamclock to
>>>>> start his own node just for hamclock. He could then add all the
>>>>> features he wants.
>>>>> 73, John W1AN
>>>>>
>>>>> On 14-Jan-24 16:53, Stephen Carroll wrote:
>>>>>> John,
>>>>>>
>>>>>> This issue was discussed about a year ago, search the listserver
>>>>>> archives. A few of us were actually in contact with the software
>>>>>> author at that time, but I don't have his email address anymore.
>>>>>> In the end, not much changed after numerous emails back and
>>>>>> forth. Again, good luck!
>>>>>>
>>>>>> 73, Steve - AA4U
>>>>>>
>>>>>>
>>>>>> Samsung Galaxy S22+ on Verizon 5G Network
>>>>>>
>>>>>> On Sun, Jan 14, 2024, 10:29 AM John Spigel via Dxspider-support
>>>>>> <dxspider-support at tobit.co.uk> wrote:
>>>>>>
>>>>>> Steve, It depends on what data hamclock is seeking. Why all
>>>>>> the show/heading requests by every hamclock user every
>>>>>> second? It makes little sense. Does someone know the
>>>>>> originator of hamclock who may be able to offer a solution?
>>>>>> For dxspider could there be an automatic rejection of some or
>>>>>> all commands by those hiding behind set/nohere? Before I
>>>>>> start the pain of rejecting multiple ips, I'll wait patiently
>>>>>> to see if another solution is offered. .
>>>>>>
>>>>>> 73, John W1AN
>>>>>>
>>>>>> On 14-Jan-24 16:10, Stephen Carroll wrote:
>>>>>>> There's no getting around the fact that Hamclock is a
>>>>>>> bandwidth/resource hog! The software makes rigorous data
>>>>>>> queries in order to populate the map, etc. Without the
>>>>>>> queries there would be no data!
>>>>>>>
>>>>>>> I have banned users from utilizing this software on my node.
>>>>>>> They are free to go elsewhere, but my 100mb internet
>>>>>>> connection gets bogged down (especially during contests). In
>>>>>>> the beginning I had 10 hamclock users, before I realized
>>>>>>> what was going on. I've configured my router to reject their
>>>>>>> IP addresses, this prevents them from even reaching the
>>>>>>> DXSpider computer.
>>>>>>>
>>>>>>> Perhaps some high bandwidth nodes can handle this constant
>>>>>>> barrage of data requests, but mine can't. Good luck!
>>>>>>>
>>>>>>> 73, Steve - AA4U
>>>>>>>
>>>>>>> Samsung Galaxy S22+ on Verizon 5G Network
>>>>>>>
>>>>>>> On Sun, Jan 14, 2024, 9:53 AM John Spigel via
>>>>>>> Dxspider-support <dxspider-support at tobit.co.uk> wrote:
>>>>>>>
>>>>>>> The number of abusive show/heading commands has exploded
>>>>>>> in the last few
>>>>>>> months, stealing much bandwidth especially on contest
>>>>>>> weekends. The
>>>>>>> software causing is probably known to many on this list.
>>>>>>> The users are
>>>>>>> setting themselves as not/here (call). Can someone offer
>>>>>>> a solution
>>>>>>> other than banning the abusers? The software could
>>>>>>> probably use a change
>>>>>>> as it seems the purpose is akin to a ping to see if the
>>>>>>> node is still
>>>>>>> active. Maybe an alternative could be offered. I think
>>>>>>> this was
>>>>>>> mentioned in the past. Consider not allowing sh/headings
>>>>>>> for those who
>>>>>>> have set as not/here? Or ?
>>>>>>>
>>>>>>> 73, John W1AN
>>>>>>>
>>>>>>> dxc.dxusa.net <http://dxc.dxusa.net/> 7373
>>>>>>>
>>>>>>> _______________________________________________
>>>>>>> Dxspider-support mailing list
>>>>>>> Dxspider-support at tobit.co.uk
>>>>>>> https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support
>>>>>>>
>>>>>>
>>>>>> _______________________________________________
>>>>>> Dxspider-support mailing list
>>>>>> Dxspider-support at tobit.co.uk
>>>>>> https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support
>>>>>>
>>>>>
>>>>>
>>>>> _______________________________________________
>>>>> Dxspider-support mailing list
>>>>> Dxspider-support at tobit.co.uk
>>>>> https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support
>>>>
>>>>
>>>> _______________________________________________
>>>> Dxspider-support mailing list
>>>> Dxspider-support at tobit.co.uk
>>>> https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support
>>>
>>> _______________________________________________
>>> Dxspider-support mailing list
>>> Dxspider-support at tobit.co.uk
>>> https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support
>>
>> _______________________________________________
>> Dxspider-support mailing list
>> Dxspider-support at tobit.co.uk
>> https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support
>
>
> _______________________________________________
> Dxspider-support mailing list
> Dxspider-support at tobit.co.uk
> https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mailman.tobit.co.uk/pipermail/dxspider-support/attachments/20240114/4e6413bd/attachment-0001.htm>
More information about the Dxspider-support
mailing list