[Dxspider-support] Node verification

[CX2SA - Jose Ma Gonzalez]

That's right.
I made a software that does an automatic WHO on my node to list all the
nodes connected to CX2SA-8
The same software then does a DNS resolution to each node's host and
compares it to the IP listed in the WHO result.
If it doesn't match, it alerts me immediately.
However, it is sometimes complicated by dynamic IPs on unstable connections.
73, Jose



-----Mensaje original-----
De: Dxspider-support [mailto:dxspider-support-bounces at tobit.co.uk] En nombre
de Mike McCarthy, W1NR via Dxspider-support
Enviado el: lunes, 10 de febrero de 2025 11:45
Para: dxspider-support at tobit.co.uk
CC: Mike McCarthy, W1NR
Asunto: Re: [Dxspider-support] Node verification

Yes, but only node connections. The latest spoofing is most likely a 
rouge node connecting to another node with some other valid callsign 
that is registered as a node connection. Then it can inject whatever it 
wants into the network. Currently, we have no checking other than 
password and IP block list for any node connections.

Nodes need DNS for users to connect.


On 2/10/2025 9:35 AM, Lists via Dxspider-support wrote:
> What you are talking about is implementing a whitelist of IPs that are
permitted to connect to a node based on A records in DNS, right?
> 
> So when the end user registers with you they give you their hostname, this
is stored locally with callsign linked to hostname.
> Then when someone connects with the callsign the hostname is looked up and
if the IP doesn't match the IP of the session don't allow access.
> 
> Did I understand correctly?
> 
> Chris - G1FEF
> 


-- 
73 de Mike, W1NR

THAT was the equation. EXISTENCE!... SURVIVAL... must cancel out... 
programming!

- Ruk -


_______________________________________________
Dxspider-support mailing list
Dxspider-support at tobit.co.uk
https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support