Subj : Automatically blocking connection attempts if they come too quickly
To   : All
From : fluid
Date : Mon Jun 03 2024 02:48 pm

I have a pretty simple system I wrote on a whim last night to try and filter out some of the bots/scripts I kept seeing attempt to login. It requires the connecting client press two keys in 15 seconds. If they do not do it, they get disconnected.

Because I wrote that system I suspect that Synchronet's built-in protection
cannot catch bad offenders, because for a lot of them there is no "login attempt" to count.

I have read through the security documentation and I do not see any type of "connection attempt" thresholds that can be configured.

If I develop a module to log connection times and IP addresses so I can see how many times an IP attempted to connect in a given amount of time (say the past hour), what would the best way to store that data be?

What data storage and retrieval capability is built into Synchronet that I can leverage from Javascript? Or, does the ability to throttle connection attempts already exist and I am just missing it? I know I saw something about being able
to write and retrieve binary data...but I can't find that for the life of me today.

---
 þ Synchronet þ crisis/line úù [ crisisbbs.net ]

.