Re: [9fans] Request for (constructive?) comments: Plan 9 : 2020
> Chris McGee writes: > >> I am unlikely to be able to come unless it is north eastern US or Canada, >> maybe Toronto or Montreal. I know of at least one other Plan 9 tinkerer in >> the area. > > Maybe an unofficial get together around BSDCan in Montreal next spring? > The Saturday after the conference ends? I know a couple of likely > conference participants who would be interested. I don't think official get togethers exist any more :) In any case, if this thing goes well, I doubt it will be the last one to happen. A few people have wanted an excuse to visit Japan, for example.. And I'm a regular BSDCan attendee, so it's fairly likely I'd show up to a meeting there if one happened. -- 9fans: 9fans Permalink: https://9fans.topicbox.com/groups/9fans/Tec7c18239f2d234f-M7d8fc1c29444285ddd6970c9 Delivery options: https://9fans.topicbox.com/groups/9fans/subscription
Re: [9fans] Request for (constructive?) comments: Plan 9 : 2020
On Tue, Oct 29, 2019 at 3:44 PM Lyndon Nerenberg wrote: > > Lyndon Nerenberg writes: > > > Maybe an unofficial get together around BSDCan in Montreal next spring? > > Doh! BSDCan is in Ottawa, not Montreal. The suggestion still stands. > Ottawa is only about a 2 hour drive from Montreal and the train is relatively cheap. (If there's enough people in the area and an interest in an unofficial Montreal get together, I can do what I can help organize..) - Dave -- 9fans: 9fans Permalink: https://9fans.topicbox.com/groups/9fans/T2e674653159c4ce8-M732cac8c9963410a8ba4a083 Delivery options: https://9fans.topicbox.com/groups/9fans/subscription
Re: [9fans] Request for (constructive?) comments: Plan 9 : 2020
Lyndon Nerenberg writes: > Maybe an unofficial get together around BSDCan in Montreal next spring? Doh! BSDCan is in Ottawa, not Montreal. The suggestion still stands. -- 9fans: 9fans Permalink: https://9fans.topicbox.com/groups/9fans/T2e674653159c4ce8-M66c79e8a0bf65c38eea52dba Delivery options: https://9fans.topicbox.com/groups/9fans/subscription
Re: [9fans] Request for (constructive?) comments: Plan 9 : 2020
Hi all! We've gotten a few crude suggestions. While they weren't ill-intentioned, please make sure you're not saying stuff that's inappropriate at a workplace level. If you're not comfortable with that requirement, or aren't sure if you should suggest something, feel free to send me an email. Thanks! On Tue, Oct 29, 2019 at 3:02 PM Rodrigo G. López wrote: > > indeed! > > On Tue, Oct 29, 2019, 7:41 PM wrote: >> >> ; 9fs docs.google.com >> srv: timeout establishing connection to net!docs.google.com!9fs > > > 9fans / 9fans / see discussions + participants + delivery options Permalink -- Have a good day, Marshall Conover -- 9fans: 9fans Permalink: https://9fans.topicbox.com/groups/9fans/T7414e0ecd12c8643-M0d69ab2518e280404d400227 Delivery options: https://9fans.topicbox.com/groups/9fans/subscription
Re: [9fans] Request for (constructive?) comments: Plan 9 : 2020
indeed! On Tue, Oct 29, 2019, 7:41 PM wrote: > ; 9fs docs.google.com > srv: timeout establishing connection to net!docs.google.com!9fs > -- 9fans: 9fans Permalink: https://9fans.topicbox.com/groups/9fans/T7414e0ecd12c8643-Md75d94b40521d95bffe43343 Delivery options: https://9fans.topicbox.com/groups/9fans/subscription
Re: [9fans] Request for (constructive?) comments: Plan 9 : 2020
; 9fs docs.google.com srv: timeout establishing connection to net!docs.google.com!9fs -- 9fans: 9fans Permalink: https://9fans.topicbox.com/groups/9fans/T7414e0ecd12c8643-Me5e7390dda458d519a62ae21 Delivery options: https://9fans.topicbox.com/groups/9fans/subscription
Re: [9fans] Request for (constructive?) comments: Plan 9 : 2020
Chris McGee writes: > I am unlikely to be able to come unless it is north eastern US or Canada, > maybe Toronto or Montreal. I know of at least one other Plan 9 tinkerer in > the area. Maybe an unofficial get together around BSDCan in Montreal next spring? The Saturday after the conference ends? I know a couple of likely conference participants who would be interested. --lyndon -- 9fans: 9fans Permalink: https://9fans.topicbox.com/groups/9fans/T2e674653159c4ce8-M18fd808a344931cc4daa2c0e Delivery options: https://9fans.topicbox.com/groups/9fans/subscription
Re: [9fans] Request for (constructive?) comments: Plan 9 : 2020
Hi All! Next, I'm thinking it's probably best to ask for location suggestions for consideration and research. I've made a google doc: https://docs.google.com/spreadsheets/d/13DHIIlFQzMsDJ2fhx18cK6AmpJlBlOICVDZMb63xz7k/edit?usp=sharing Feel free to add any locations that sound like a good idea to you. Also feel free to add your name behind a location you'd be happy to go to if someone has already suggested it. This isn't meant to be the final round of voting; once we have locations, we'll do some digging to see what's available in those areas. Once we know that, we'll probably do a more serious poll for attendees and a ranked-choice vote on location. Let me know if there are any thoughts, concerns, or questions! Thanks! Marshall On Tue, Oct 29, 2019 at 12:36 PM David Bulkow wrote: > > We're here. Just very very quiet. > > On Tue, Oct 29, 2019 at 12:24 PM Nicolas S. Montanaro wrote: >> >> If indeed it ends up being held in the US I’d love to come - have yet to >> find any 9fans here in New England. >> >> Cheers, >> - Nicolas > > 9fans / 9fans / see discussions + participants + delivery options Permalink -- Have a good day, Marshall Conover -- 9fans: 9fans Permalink: https://9fans.topicbox.com/groups/9fans/T2e674653159c4ce8-Mecb6dff61aad3d591863587f Delivery options: https://9fans.topicbox.com/groups/9fans/subscription
Re: [9fans] Request for (constructive?) comments: Plan 9 : 2020
We're here. Just very very quiet. On Tue, Oct 29, 2019 at 12:24 PM Nicolas S. Montanaro wrote: > If indeed it ends up being held in the US I’d love to come - have yet to > find any 9fans here in New England. > > Cheers, > - Nicolas -- 9fans: 9fans Permalink: https://9fans.topicbox.com/groups/9fans/T2e674653159c4ce8-Mcb9c0752401f95d6357c1fa4 Delivery options: https://9fans.topicbox.com/groups/9fans/subscription
Re: [9fans] Request for (constructive?) comments: Plan 9 : 2020
It's really great to see this kind of activity. I am unlikely to be able to come unless it is north eastern US or Canada, maybe Toronto or Montreal. I know of at least one other Plan 9 tinkerer in the area. -- 9fans: 9fans Permalink: https://9fans.topicbox.com/groups/9fans/T2e674653159c4ce8-Ma9f958c3a3f57d1a528cc3a1 Delivery options: https://9fans.topicbox.com/groups/9fans/subscription
Re: [9fans] Request for (constructive?) comments: Plan 9 : 2020
If indeed it ends up being held in the US I’d love to come - have yet to find any 9fans here in New England. Cheers, - Nicolas -- 9fans: 9fans Permalink: https://9fans.topicbox.com/groups/9fans/T2e674653159c4ce8-Me901299312e987b1fd02d5a0 Delivery options: https://9fans.topicbox.com/groups/9fans/subscription
Re: [9fans] Request for (constructive?) comments: Plan 9 : 2020
Hi All! The poll's here: https://www.surveymonkey.com/stories/SM-YX9F7TC7/ Looks like we've got roughly 20 who would certainly attend, and maybe 5-10 additional based on location and what's available. There's also a decent set of topics for discussion and events in the polling. That sounds, to me, like enough people to at least entertain the idea, and a fairly reasonable and manageable size from the perspective of planning and execution. Thanks! Marshall On Sat, Oct 26, 2019 at 4:32 PM Marshall Conover wrote: > > The survey seems more cute than useful. E.g. there's a *big* difference > > between > > "travel a couple of hours" and "anywhere.".. I wouldn't consider travel to > > the > > US... whereas I would consider travel to Europe... > > That's a good point. A ranked-choice deal based on locations would be better. > Like you said, this is best just for a first-pass headcount - and > having the countries > people are in + their answer of how far they'd like to travel should > hopefully help give > a head-start on getting the list of actual potential venues down for > later polls. I also > have no idea what I'm doing. > > > I would be willing to kick in some $$$ to help pay to have the event > > streamed. > > Streaming is a great idea! One person's suggested they'd like to have coding > going through the event as well, so that may also be a good way to keep > tele-attenders involved. > > In the mean time, thanks for all who've voted so far! I figure I'll > give it a day and then > send the results out and see what people think. > > Mars > > > On Sat, Oct 26, 2019 at 3:28 PM Lyndon Nerenberg wrote: > > > In that vein, here's a poll: https://www.surveymonkey.com/r/VJNQYGC > > > > The survey seems more cute than useful. E.g. there's a *big* > > difference between "travel a couple of hours" and "anywhere." And > > even though it's close by, I wouldn't consider travel to the US (a > > couple of hours) due to the insanity involved in getting through > > US immigration, whereas I would consider travel to Europe (~9 hours). > > Asia would be out, due to travel time and cost. > > > > But as a general gauge of initial interest it's certainly useful. > > > > Sadly, while I'd love to go, 2020 doesn't look like a year where > > I'll be doing much travelling :-( But I would be willing to kick > > in some $$$ to help pay to have the event streamed. > > > > --lyndon > > > > -- > Have a good day, > > Marshall Conover -- Have a good day, Marshall Conover -- 9fans: 9fans Permalink: https://9fans.topicbox.com/groups/9fans/T2e674653159c4ce8-M541de6dee017bc869245ae0d Delivery options: https://9fans.topicbox.com/groups/9fans/subscription
Re: [9fans] banishment of nuisance IP addresses
re: anyone can banish ano IP address You are quite right, not a problem for me, but not a general solution. Ok, chmod og-w /lib/ndb/banished first. I could then write a file server, envoked in cpurc as bootes and thus has rights to update the files in /lib/ndb/banished/*. The file server would have to ensure its /srv/xxx file is not accessable by others. This could be mounted by the network listners before they becomenone() so they retain access. They would also need to ensure they unmount the writable access to the banishment directory before starting their child process (if the incomming connection is successful). ugh. Even _if_ that would work its a real pain. oh well, nice idea, but no bananna. -Steve -- 9fans: 9fans Permalink: https://9fans.topicbox.com/groups/9fans/Te00ed62cf5d85d9e-M4d3ca138d4a82de48a303955 Delivery options: https://9fans.topicbox.com/groups/9fans/subscription
Re: [9fans] banishment of nuisance IP addresses
seems tricky with listeners that run as none, no? so your banish files would need to be world writable in this case, no? that means everyone can just lock you out of your box by writing a line there... -- cinap -- 9fans: 9fans Permalink: https://9fans.topicbox.com/groups/9fans/Te00ed62cf5d85d9e-M71fd0fcdfeb1568ca1a2d4a3 Delivery options: https://9fans.topicbox.com/groups/9fans/subscription
Re: [9fans] banishment of nuisance IP addresses
from just your description i like how you rely on the filesystem to store the state, which seems to make it trivial to split multiple tasks into multiple programs :) -- 9fans: 9fans Permalink: https://9fans.topicbox.com/groups/9fans/Tdfbfcf822b637ab5-Mff88bf8673cb424fa4bf2279 Delivery options: https://9fans.topicbox.com/groups/9fans/subscription
[9fans] banishment of nuisance IP addresses
Hi all,
I still run a plan9 server attached to the net. I have always
had attacks from bots, viruses, script kiddies etc. and decided
to do something to reduce the load on my system - some attacks can be
quite persistant.
I have taken the idea from the linux log2ban script but I implemented it
a rather differently.
I added two functions to libsec (for want of a better place), nuisance()
and banished(). the former allows you to log a failed authentication attempt,
dropped TLS connection etc. the latter tests for too many failures and drops
connections from repeat offenders.
nuisance() adds a single character (indicating the type of failure, 't' for TLS
drop,
'a' for authentication failure etc), to an append only file in /lib/ndb/banished
named with the source IP address that is connecting. if that file gets too long
the address is becomes persona non-grata.
I have a cron jonb that deletes banishment files that have not been modified
for a month
on the basis that hackers and bots get rounded up eventually.
I added these calls to dnstcp, listen, tlssrv, imap4d, httpd, smtpd, and
secstored.
This is enough to cover all the network listners I have, and it works well, but
feels
a little crude. I would be interested if anyone has a more elegant solution.
-Steve
--
9fans: 9fans
Permalink:
https://9fans.topicbox.com/groups/9fans/Tdfbfcf822b637ab5-M4e4c1663200a71a70be33a38
Delivery options: https://9fans.topicbox.com/groups/9fans/subscription
#include
#include
static char *bandir = "/lib/ndb/banished";
/* Log that this ipaddr, (or ipaddr!port) may be causing a nuisance */
int
nuisance(char *addr, char c)
{
int fd, len;
char *p, *path;
if(!addr || !*addr)
return -1;
len = strlen(addr);
if((p = strchr(addr, '!')) != nil)
len = p - addr;
path = smprint("%s/%.*s", bandir, len, addr);
if((fd = open(path, OWRITE)) == -1)
fd = create(path, OWRITE, 0666|DMAPPEND);
free(path);
if(fd == -1){
return -1;
}
write(fd, &c, 1);
close(fd);
return 0;
}
/* Has this ipaddr, (or ipaddr!port) caused too much of a nuisance */
int
banished(char *addr, int thresh)
{
Dir *d;
int n, len;
char *p, *path;
if(!addr || !*addr)
return 0;
len = strlen(addr);
if((p = strchr(addr, '!')) != nil)
len = p - addr;
path = smprint("%s/%.*s", bandir, len, addr);
d = dirstat(path);
free(path);
if(d == nil)
return 0;
n = d->length;
free(d);
if(n < thresh)
return 0;
return 1;
}
