On 09/07/17, quickshot said the following...
I have started handling this outside of mystic. This may not work for windows, but should be doable on linux, and possibly pi. I have started blocking countrys using iptables, and xtables geoip
Yes, I did that for Russia & China, but have found it's the fighting that
makes them try harder and put more machines on your site. Right now I'm back
to the level of attack I had in June of 2016 with no iptables loaded. What I did was:
cd /mystic
sudo ipset -N china hash:net
wget -P .
http://www.ipdeny.com/ipblocks/data/countries/cn.zone
for i in $(cat cn.zone ); do ipset -A china $i; done #takes a while
sudo iptables -A INPUT -p tcp -m set --match-set china src -j DROP
# then I did the same for Russia
sudo ipset -N russia hash:net
wget -P .
http://www.ipdeny.com/ipblocks/data/countries/ru.zone
for i in $(cat ru.zone ); do ipset -A russia $i; done
sudo iptables -A INPUT -p tcp -m set --match-set russia src -j DROP
#sudo iptables -L #only for feedback to you
That will block China & Russia till you reboot. You can do a save, but that locks the lists you used in, they change regularly. When under attack I do
the above if I'm using mis2 which has no such blocking. With mis you don't
need that just edit badcountry.txt to block what you want.
--- Mystic BBS v1.12 A35 (Linux/64)
* Origin: Mystic AlphaTest bcw142.zapto.org:2323 (21:1/145.2)