[Dxspider-support] You are killing all Webclusters!

[Tony K1AX]

I’ve since learned more about the situation and realized that my earlier experience wasn’t representative. It looks like concerns about $DXProt::sendverify = 2 affecting web clusters are indeed valid. I apologize for any confusion my previous email may have caused.

73,
Tony

________________________________
From: Dxspider-support <dxspider-support-bounces at tobit.co.uk> on behalf of IZ2LSC via Dxspider-support <dxspider-support at tobit.co.uk>
Sent: Friday, March 7, 2025 3:34 PM
To: The DXSpider Support list <dxspider-support at tobit.co.uk>
Cc: IZ2LSC <iz2lsc.andrea at gmail.com>
Subject: Re: [Dxspider-support] You are killing all Webclusters!

I see a lot of naivety in your messages. Or maybe you don't understand the true nature of the problem. The various checks of the authenticity of the spots (i.e whitelist), cannot be based on the information contained in it (for example the source node, ip address, and so on), because all this information can be forged at will by the attacker.

We have to go to the source of the issue.

73s

Andrea

-->


On Fri, Mar 7, 2025 at 5:33 PM Tony K1AX via Dxspider-support <dxspider-support at tobit.co.uk<mailto:dxspider-support at tobit.co.uk>> wrote:
Hi Tobias,

Thank you for sharing your perspective. I understand the concerns of some web cluster operators regarding the impact of $DXProt::sendverify = 2, though my experience has been quite different.

I recently launched my own web cluster, DX Data (https://dxdata.io), and while I recognize the challenges you’ve outlined, not all web clusters appear to be affected in the same way. My web cluster continues to function as expected, and spots from my users are still being picked up by DXSpider, CC Cluster, and most web clusters, including yours. I’d be happy to compare notes at some point to better understand why some web clusters are experiencing issues while others, like mine, remain unaffected.


73,
Tony K1AX


________________________________
From: Dxspider-support <dxspider-support-bounces at tobit.co.uk<mailto:dxspider-support-bounces at tobit.co.uk>> on behalf of Tobias Wellnitz via Dxspider-support <dxspider-support at tobit.co.uk<mailto:dxspider-support at tobit.co.uk>>
Sent: Thursday, March 6, 2025 7:21 PM
To: The DXSpider Support list <dxspider-support at tobit.co.uk<mailto:dxspider-support at tobit.co.uk>>
Cc: Tobias Wellnitz <tobias.wellnitz at gmail.com<mailto:tobias.wellnitz at gmail.com>>
Subject: [Dxspider-support] You are killing all Webclusters!

Hi all,

my apologies for the slightly provocative email subject, but in the name of all Web Cluster operators I would like to express our strong concerns and disagreement about the recently rolled out "source" verification of DX Spots! This setting does more harm than good. Literally all spots submitted through web clusters are been dropped since the roleout of $DXProt::sendverify = 2.
Why? Because web clusters manage their users and their accounts in the web stack and not in dxspider.

Just to give you an idea about the magnitude: Only my web cluster (dxheat.com<http://dxheat.com>) has >30.000 registered users and has at any time 800 - 1500 connected users. I know that Dxfun and Dxwatch are serving even larger user bases!

Look at Andrea's table of dropped spots within a day:

+-------+----------+
| SPOTS | NODE     |
+-------+----------+
|   502 | EA4RCH-5 |
|   411 | VE7CC-1  |
|   273 | DH1TW-2  |
|   208 | AE5E     |
|   138 | PY1NB-4  |
|   104 | EA6VQ-2  |
|   103 | DO5SSB-2 |
[...]

Here is the mapping:

EA4RCH-5 -> dxfun.com<http://dxfun.com>
DH1TW-2 -> dxheat.com<http://dxheat.com>
PY1NB-4 -> dxwatch.com<http://dxwatch.com>
EA6VQ-2 -> dxmaps.com<http://dxmaps.com>
DO5SSB-2 -> qrzcq.com/dxtron<http://qrzcq.com/dxtron>

As you can imagine, we have put a lot of effort into building and operating these web clusters. The total number of affected users, which participate in the dx cluster network through our web services is larger than the overall users connected via telnet!

We therefore kindly ask you to reconsider and undo the recent changes!

Let jointly keep on discussing other possibilities on how to further harden together our DX Cluster network!

Thanks & 73,
Tobias, DH1TW
_______________________________________________
Dxspider-support mailing list
Dxspider-support at tobit.co.uk<mailto:Dxspider-support at tobit.co.uk>
https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mailman.tobit.co.uk/pipermail/dxspider-support/attachments/20250307/25b6febc/attachment-0001.htm>