On 08 Nov 2021 at 08:10a, g00r00 pondered and said...
How did these messages come in? Where they connecting to you every
minute to send a new message or did it come in clumps every so often? I think having a clearer picture might help me think it through a little better.
Have just dug back into the HUB logs and emailed you some files. Essentially it looks like one packet being processed by MUTIL and it contained approx 5 messages for the echomail area within it. The next packet arrived and was processed around 2 mins later and so on.
I am open to trying to build something like this, but I am not really
sure how well it would work. If a node spams connections to you that
Thanks for looking / considering it. If it proves overly problematic and does not lead to something you want to add I'm understanding of that too.
can be covered by the BINKP auto blocking, but I realize that doesn't really address this specific issue.
No, in this case it's the tossing frequency rather than the mailer frequency.
When talking about importing a packet it would be tough to determine
when its a flood if the message content is different each time. If we
put a threshold in for messages then it could backfire in situations
where people are trying to do rescans or maybe even for systems who only poll daily or whenever they feel like reading (so they tend to get mail
in larger clumps)...
Agreed, as in the examples above, it's nodes wanting to toss a large amount of packets and messages within a short space of time, such as a rescan etc.
I suppose in the case of a hub though, there wouldn't be many instances
of a rescan coming into the hub, so maybe the threshold could work but just be disabled by default? Or set to something really high.
Yes I agree. From the HUB POV it's about the node sending something in such that the quantity of messages posted over a defined short period of time is leading to issues for others connected to the HUB and it's echos.
The tracking would be a bit difficult or at the very least annoying to
do and it would probably slow down tossing speed a bit since it would
have to compare every single message being tossed and it would have to save this sort of data for every node between MUTIL execution.
Instead of inspecting message content could a frequency counter be implemented such that if x messages from a node were being tossed over x period then an issue could be flagged and an action(s) taken?
As I sit and ponder this it's really about the number of incoming messages to be tossed to a given echo or echos from a node over a short time period.
If you did end up adding something I'm not sure if such a HUB setting should be set at a high level to apply to all nodes and/or if it could/should be set at a echomail area level? Gotta ponder that.
--- Mystic BBS v1.12 A47 2021/11/06 (Linux/64)
* Origin: Agency BBS | Dunedin, New Zealand | agency.bbs.nz (3:770/100)