<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body>
<div>
<div>
<div dir="ltr">
<div>Hi Kin,</div>
<div dir="ltr">Please send the script!!</div>
<div dir="ltr"><br>
</div>
<div dir="ltr">Best Wishes,</div>
<div dir="ltr"><br>
</div>
<div dir="ltr">Brian G0VAX (GB7VAX)</div>
</div>
</div>
<div id="ms-outlook-mobile-signature">
<div><br>
</div>
Get <a href="https://aka.ms/o0ukef">Outlook for iOS</a></div>
</div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Dxspider-support <dxspider-support-bounces@tobit.co.uk> on behalf of dxspider-support-request@tobit.co.uk <dxspider-support-request@tobit.co.uk><br>
<b>Sent:</b> Wednesday, September 14, 2022 2:15:39 PM<br>
<b>To:</b> dxspider-support@tobit.co.uk <dxspider-support@tobit.co.uk><br>
<b>Subject:</b> Dxspider-support Digest, Vol 236, Issue 10</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">Send Dxspider-support mailing list submissions to<br>
        dxspider-support@tobit.co.uk<br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
        <a href="https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support">https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support</a><br>
or, via email, send a message with subject or body 'help' to<br>
        dxspider-support-request@tobit.co.uk<br>
<br>
You can reach the person managing the list at<br>
        dxspider-support-owner@tobit.co.uk<br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of Dxspider-support digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
   1. badspotter badwords (David Spoelstra)<br>
   2. Re: badspotter badwords (Joaquin)<br>
   3. R:  badspotter badwords (iz6fxs@cisarmajella.org)<br>
   4. Re: badspotter badwords (David Spoelstra)<br>
   5. Re: badspotter badwords (Danilo Brelih)<br>
   6. Re: badspotter badwords (Joaquin)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Wed, 14 Sep 2022 08:35:40 -0400<br>
From: David Spoelstra <davids@mediamachine.com><br>
To: The DXSpider Support list <dxspider-support@tobit.co.uk><br>
Subject: [Dxspider-support] badspotter badwords<br>
Message-ID:<br>
        <CAEKn9qZ20eR-WprbromAF8T6RZU9jNjbid51Jm6tDHsMt8xcaw@mail.gmail.com><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
Seems like my cluster is being used for propaganda. I've spent the morning<br>
running "set/badspotter" and "set/badword" commands. Is there anything else<br>
I should be doing?<br>
<br>
Thanks!<br>
-David, N9KT<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="https://mailman.tobit.co.uk/pipermail/dxspider-support/attachments/20220914/075374b5/attachment-0001.htm">https://mailman.tobit.co.uk/pipermail/dxspider-support/attachments/20220914/075374b5/attachment-0001.htm</a>><br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Wed, 14 Sep 2022 14:50:20 +0200<br>
From: Joaquin <joaquin@cronux.net><br>
To: David Spoelstra via Dxspider-support<br>
        <dxspider-support@tobit.co.uk><br>
Subject: Re: [Dxspider-support] badspotter badwords<br>
Message-ID: <6c75288b-0f94-d723-bb93-49a9927fa5b4@cronux.net><br>
Content-Type: text/plain; charset=UTF-8; format=flowed<br>
<br>
Hi David,<br>
<br>
You have two more options:<br>
<br>
1. Enable for everyone:<br>
set/register<br>
set/password<br>
<br>
2. If you want I can send you a small script that will automatically <br>
block any callsign that comes from the TOR network or is using a PROXY.<br>
The script runs the set/bad/spotter command and logs the callsign that <br>
has been blocked.<br>
It is a help, but it is not the definitive solution.<br>
<br>
Regards.<br>
<br>
Kin EA3CV<br>
<br>
El 14/09/2022 a las 14:35, David Spoelstra via Dxspider-support escribi?:<br>
> Seems like my cluster is being used for propaganda. I've spent the <br>
> morning running "set/badspotter" and "set/badword" commands. Is there <br>
> anything else I should be doing?<br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 3<br>
Date: Wed, 14 Sep 2022 14:53:06 +0200<br>
From: "iz6fxs@cisarmajella.org" <iz6fxs@cisarabruzzo.org><br>
To: "'The DXSpider Support list'" <dxspider-support@tobit.co.uk><br>
Subject: [Dxspider-support] R:  badspotter badwords<br>
Message-ID: <00b201d8c838$ef677c10$ce367430$@cisarabruzzo.org><br>
Content-Type: text/plain;       charset="utf-8"<br>
<br>
Please share the script!<br>
<br>
Thanks,<br>
Norm IZ6FXS<br>
<br>
-----Messaggio originale-----<br>
Da: Dxspider-support <dxspider-support-bounces@tobit.co.uk> Per conto di Joaquin via Dxspider-support<br>
Inviato: mercoled? 14 settembre 2022 14:50<br>
A: David Spoelstra via Dxspider-support <dxspider-support@tobit.co.uk><br>
Cc: Joaquin <joaquin@cronux.net><br>
Oggetto: Re: [Dxspider-support] badspotter badwords<br>
<br>
Hi David,<br>
<br>
You have two more options:<br>
<br>
1. Enable for everyone:<br>
set/register<br>
set/password<br>
<br>
2. If you want I can send you a small script that will automatically block any callsign that comes from the TOR network or is using a PROXY.<br>
The script runs the set/bad/spotter command and logs the callsign that has been blocked.<br>
It is a help, but it is not the definitive solution.<br>
<br>
Regards.<br>
<br>
Kin EA3CV<br>
<br>
El 14/09/2022 a las 14:35, David Spoelstra via Dxspider-support escribi?:<br>
> Seems like my cluster is being used for propaganda. I've spent the <br>
> morning running "set/badspotter" and "set/badword" commands. Is there <br>
> anything else I should be doing?<br>
<br>
_______________________________________________<br>
Dxspider-support mailing list<br>
Dxspider-support@tobit.co.uk<br>
<a href="https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support">https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support</a><br>
<br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 4<br>
Date: Wed, 14 Sep 2022 08:54:45 -0400<br>
From: David Spoelstra <davids@mediamachine.com><br>
To: The DXSpider Support list <dxspider-support@tobit.co.uk><br>
Cc: Joaquin <joaquin@cronux.net><br>
Subject: Re: [Dxspider-support] badspotter badwords<br>
Message-ID:<br>
        <CAEKn9qZ8ovw=BwuO09Y4AUsfS+6r8VPu8YCcLe17D8ADt4oPGg@mail.gmail.com><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
Joaquin-<br>
Yes, please, send me the script.<br>
-David, N9KT<br>
<br>
On Wed, Sep 14, 2022 at 8:51 AM Joaquin via Dxspider-support <<br>
dxspider-support@tobit.co.uk> wrote:<br>
<br>
> Hi David,<br>
><br>
> You have two more options:<br>
><br>
> 1. Enable for everyone:<br>
> set/register<br>
> set/password<br>
><br>
> 2. If you want I can send you a small script that will automatically<br>
> block any callsign that comes from the TOR network or is using a PROXY.<br>
> The script runs the set/bad/spotter command and logs the callsign that<br>
> has been blocked.<br>
> It is a help, but it is not the definitive solution.<br>
><br>
> Regards.<br>
><br>
> Kin EA3CV<br>
><br>
> El 14/09/2022 a las 14:35, David Spoelstra via Dxspider-support escribi?:<br>
> > Seems like my cluster is being used for propaganda. I've spent the<br>
> > morning running "set/badspotter" and "set/badword" commands. Is there<br>
> > anything else I should be doing?<br>
><br>
> _______________________________________________<br>
> Dxspider-support mailing list<br>
> Dxspider-support@tobit.co.uk<br>
> <a href="https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support">https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support</a><br>
><br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="https://mailman.tobit.co.uk/pipermail/dxspider-support/attachments/20220914/e5bb0039/attachment-0001.htm">https://mailman.tobit.co.uk/pipermail/dxspider-support/attachments/20220914/e5bb0039/attachment-0001.htm</a>><br>
<br>
------------------------------<br>
<br>
Message: 5<br>
Date: Wed, 14 Sep 2022 14:58:38 +0200<br>
From: Danilo Brelih <danilo.brelih@siol.net><br>
To: dxspider-support@tobit.co.uk<br>
Subject: Re: [Dxspider-support] badspotter badwords<br>
Message-ID: <3a7f7020-1449-bab2-a63d-0e8071cde509@siol.net><br>
Content-Type: text/plain; charset="utf-8"; Format="flowed"<br>
<br>
Joaquin via Dxspider-support je 14.9.2022 ob 14:50?napisal:<br>
> 2. If you want I can send you a small script that will automatically block any <br>
> callsign that comes from the TOR network or is using a PROXY.<br>
> The script runs the set/bad/spotter command and logs the callsign that has <br>
> been blocked.<br>
> It is a help, but it is not the definitive solution.<br>
<br>
I'm running Kin's script successfully on Ubuntu 20.04 so far so good. Some "bad" <br>
ip's are also added to iptables firewall on my box.<br>
<br>
73<br>
Dan S50U<br>
<br>
-- <br>
Gorje, Cerkno h=604m <<a href="https://s50e.si/gorje.html">https://s50e.si/gorje.html</a>><br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="https://mailman.tobit.co.uk/pipermail/dxspider-support/attachments/20220914/a808cb61/attachment-0001.htm">https://mailman.tobit.co.uk/pipermail/dxspider-support/attachments/20220914/a808cb61/attachment-0001.htm</a>><br>
<br>
------------------------------<br>
<br>
Message: 6<br>
Date: Wed, 14 Sep 2022 15:15:31 +0200<br>
From: Joaquin <joaquin@cronux.net><br>
To: David Spoelstra <davids@mediamachine.com>, The DXSpider Support<br>
        list <dxspider-support@tobit.co.uk><br>
Subject: Re: [Dxspider-support] badspotter badwords<br>
Message-ID: <9588410a-c3b8-7124-1034-04406f468293@cronux.net><br>
Content-Type: text/plain; charset="utf-8"; Format="flowed"<br>
<br>
Hi all,<br>
<br>
For those who want to do tests, and I'm sure it can be improved a lot.<br>
<br>
* bad_spotter.pl beta testing procedure<br>
<br>
1. Download TOR and Proxies IP list, first time:<br>
<br>
curl -o /spider/local_data/tor-proxies.txt <br>
<a href="https://raw.githubusercontent.com/X4BNet/lists_torexit/main/ipv4.txt">https://raw.githubusercontent.com/X4BNet/lists_torexit/main/ipv4.txt</a><br>
curl -o /spider/local_data/proxies-exits.txt <br>
<a href="https://lists.fissionrelays.net/tor/relays-ipv4.txt">https://lists.fissionrelays.net/tor/relays-ipv4.txt</a><br>
cat /spider/local_data/proxies-exits.txt > <br>
/spider/local_data/tor-proxies.txt<br>
sed -i "s|$|/32|" /spider/local_data/tor-proxies.txt<br>
<br>
2. Copy the bad_spotter.pl script to: /spider/local_cmd/bad_spotter.pl<br>
3. Run chmod +x /spider/local_cmd/bad_spotter.pl<br>
4. Add in /spider/local_cmd/crontab:<br>
<br>
# Bad spotter<br>
0 0 * * *? spawn('pkill -f "/usr/bin/perl -w <br>
/spider/local_cmd/bad_spotter.pl"')<br>
1 0 * * *? spawn("/usr/bin/perl -w /spider/local_cmd/bad_spotter.pl")<br>
30 * * * * spawn('curl -o /spider/local_data/tor-proxies.txt <br>
<a href="https://raw.githubusercontent.com/X4BNet/lists_torexit/main/ipv4.txt')">https://raw.githubusercontent.com/X4BNet/lists_torexit/main/ipv4.txt')</a><br>
31 * * * * spawn('curl -o /spider/local_data/proxies-exits.txt <br>
<a href="https://lists.fissionrelays.net/tor/relays-ipv4.txt')">https://lists.fissionrelays.net/tor/relays-ipv4.txt')</a><br>
32 * * * * spawn('cat /spider/local_data/proxies-exits.txt > <br>
/spider/local_data/tor-proxies.txt')<br>
33 * * * * spawn('sed -i "s|$|/32|" /spider/local_data/tor-proxies.txt')<br>
<br>
<br>
4. Make sure the directory is created: /spider/cmd_import , if not:<br>
mkdir /spider/cmd_import<br>
<br>
5. Make log directory:<br>
mkdir /spider local_data/bad_spotter<br>
<br>
6. The first time you want to run it, from the prompt:<br>
<br>
/usr/bin/perl -w /spider/local_cmd/bad_spotter.pl &<br>
<br>
# End<br>
<br>
Example tail -f /spider local_data/bad_spotter/log.txt<br>
<br>
2022-09-12T14:01:53 [N9KT-2, RA1AL, 185.220.101.79, Politics and <br>
HAMSPIRIT no mix!]<br>
2022-09-12T14:54:41 [N9KT-2, RA3ATX, 185.129.61.129, RU will liberate <br>
the world!]<br>
2022-09-13T17:52:58 [PI4CC, PA2A, 77.171.80.188, ]<br>
<br>
Do not forget that it is a development version.<br>
<br>
73 de Kin<br>
<br>
Sysop EA3CV-2 & EA4URE-2,3,5<br>
<br>
El 14/09/2022 a las 14:54, David Spoelstra escribi?:<br>
> Joaquin-<br>
> Yes, please, send me the script.<br>
> -David, N9KT<br>
><br>
> On Wed, Sep 14, 2022 at 8:51 AM Joaquin via Dxspider-support <br>
> <dxspider-support@tobit.co.uk> wrote:<br>
><br>
>     Hi David,<br>
><br>
>     You have two more options:<br>
><br>
>     1. Enable for everyone:<br>
>     set/register<br>
>     set/password<br>
><br>
>     2. If you want I can send you a small script that will automatically<br>
>     block any callsign that comes from the TOR network or is using a<br>
>     PROXY.<br>
>     The script runs the set/bad/spotter command and logs the callsign<br>
>     that<br>
>     has been blocked.<br>
>     It is a help, but it is not the definitive solution.<br>
><br>
>     Regards.<br>
><br>
>     Kin EA3CV<br>
><br>
>     El 14/09/2022 a las 14:35, David Spoelstra via Dxspider-support<br>
>     escribi?:<br>
>     > Seems like my cluster is being used for propaganda. I've spent the<br>
>     > morning running "set/badspotter" and "set/badword" commands. Is<br>
>     there<br>
>     > anything else I should be doing?<br>
><br>
>     _______________________________________________<br>
>     Dxspider-support mailing list<br>
>     Dxspider-support@tobit.co.uk<br>
>     <a href="https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support">https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support</a><br>
><br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="https://mailman.tobit.co.uk/pipermail/dxspider-support/attachments/20220914/d13e4bad/attachment.htm">https://mailman.tobit.co.uk/pipermail/dxspider-support/attachments/20220914/d13e4bad/attachment.htm</a>><br>
-------------- next part --------------<br>
#!/usr/bin/perl<br>
<br>
#<br>
# Automatic callsign blocking that uses TOR or PROXIES to send spots<br>
#<br>
# Created by EA3CV<br>
#<br>
# 20220914 v0.3<br>
#<br>
<br>
use strict;<br>
use warnings;<br>
use 5.10.1;<br>
use NetAddr::IP;<br>
use Time::Piece;<br>
<br>
$ENV{TZ} = "UTC";<br>
<br>
#my $server = $ARGV[0];<br>
<br>
my $time = Time::Piece->new;<br>
my $d = $time->yday();<br>
$d = sprintf("%03d", $d) + 1;<br>
my $y = $time->year("");<br>
<br>
my $log = "/spider/local_data/spots/$y/$d.dat";<br>
<br>
open my $data, "-|", "/usr/bin/tail", "-n1", "-f", $log or die "could not start tail on $log: $!";<br>
<br>
my $line;<br>
my @rray;<br>
my @conn;<br>
<br>
my $tor = "/spider/local_data/tor-proxies.txt";<br>
my $log_bad = "/spider/local_data/bad_spotter/log.txt";<br>
#my $log_noIP = "/spider/local_data/no_IP/log.txt";<br>
<br>
while($line = <$data>){<br>
   chomp($line);<br>
   my @line = split(/\^/, $line, -1);<br>
<br>
   # Obtener [node, spotter, IP source, comment]<br>
   my $spotter = $line[4];<br>
   my $node = $line[7];<br>
   my $comm = $line[3];<br>
   if (scalar(@line) == 15) {<br>
      my $ipAddr = $line[14];<br>
<br>
      # Find IP tor-proxies.txt<br>
      open TOR, $tor or die "No existe ".$tor;<br>
      my @netAddr = <TOR>;<br>
      my $i = 0;<br>
      my $x = 0;<br>
<br>
      while ($x < 1 && $i < scalar(@netAddr)) {<br>
         my $network  = NetAddr::IP->new($netAddr[$i]);<br>
         my $ip = NetAddr::IP->new($ipAddr);<br>
<br>
         if ($ip->within($network)) {<br>
            # Send set/badspotter to DXSpider<br>
            open (FH, '>', "/spider/cmd_import/EA3CV");<br>
            my $msg = "set/badspotter $spotter";<br>
            say FH $msg;<br>
            close (FH);<br>
<br>
#            # Send set/baddx to DXSpider<br>
#            open (FH, '>', "/spider/cmd_import/EA3CV");<br>
#            $msg = "set/baddx $spotter";<br>
#            say FH $msg;<br>
#            close (FH);<br>
<br>
            # Log bad_spotter<br>
            my $times = gmtime();<br>
            my $ts = Time::Piece->strptime($times, '%a %b %d %H:%M:%S %Y')->datetime("");<br>
<br>
            open (LOGBAD, '>>', "/spider/local_data/bad_spotter/log.txt");<br>
            my $out = "$ts [$node, $spotter, $ipAddr, $comm]";<br>
            say LOGBAD $out;<br>
            close (LOGBAD);<br>
<br>
            $x = 1;<br>
         }<br>
         $i++;<br>
      }<br>
      close TOR;<br>
<br>
   } else {<br>
#       # Log no_ip<br>
#       open (LOGNOIP, '>>', "/spider/local_data/no_IP/log.txt");<br>
#       my $out = "[$node, $spotter]";<br>
#       say LOGNOIP $out;<br>
#       close (LOGNOIP);<br>
   }<br>
<br>
}<br>
close $data;<br>
<br>
------------------------------<br>
<br>
Subject: Digest Footer<br>
<br>
_______________________________________________<br>
Dxspider-support mailing list<br>
Dxspider-support@tobit.co.uk<br>
<a href="https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support">https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support</a><br>
<br>
<br>
------------------------------<br>
<br>
End of Dxspider-support Digest, Vol 236, Issue 10<br>
*************************************************<br>
</div>
</span></font></div>
</body>
</html>