• src/sbbs3/ftpsrvr.c login.cpp mailsrvr.c services.c websrvr.c

    From Rob Swindell (on Windows 11)@VERT to Git commit to main/sbbs/master on Thu Dec 14 21:30:37 2023
    https://gitlab.synchro.net/main/sbbs/-/commit/2727150c2cbc3491893ddbbe
    Modified Files:
    src/sbbs3/ftpsrvr.c login.cpp mailsrvr.c services.c websrvr.c
    Log Message:
    Log notice-level message for > 1 consecutive unique login attempts

    The log format and details might need some adjustment, but this is a start.

    Also, don't delay 3 seconds before disconnecting socket when mail server has reached maximum number of clients - we should immediately release resources (the socket) and be able to accept another connection ASAP instead.

    Deal with new CID 470557 and 470554 in mail server: resource (file*)
    leaks in error paths (corner case).

    Set minimum severity of TLS messages in web sever to INFO. Debug-level would hide some common TLS session errors.

    ---
    Synchronet Vertrauen Home of Synchronet [vert/cvs/bbs].synchro.net
  • From Rob Swindell (on Windows 11)@VERT to Git commit to main/sbbs/master on Thu Dec 14 23:21:46 2023
    https://gitlab.synchro.net/main/sbbs/-/commit/c6d112f719a9a6c04973ccd8
    Modified Files:
    src/sbbs3/ftpsrvr.c login.cpp mailsrvr.c services.c websrvr.c
    Log Message:
    Log the time-span when ip-filtering a failed-login-attempter, adding to ip.can

    ---
    Synchronet Vertrauen Home of Synchronet [vert/cvs/bbs].synchro.net
  • From Rob Swindell (on Windows 11)@VERT to Git commit to main/sbbs/master on Thu Dec 14 23:47:38 2023
    https://gitlab.synchro.net/main/sbbs/-/commit/4cb0cc2a50110fa40bf5d918
    Modified Files:
    src/sbbs3/ftpsrvr.c login.cpp mailsrvr.c services.c websrvr.c
    Log Message:
    Beautify the elapsed time (e.g. HH:MM:SS format) for consecutive failed logins

    ---
    Synchronet Vertrauen Home of Synchronet [vert/cvs/bbs].synchro.net
  • From Rob Swindell (on Windows 11)@VERT to Git commit to main/sbbs/master on Fri Dec 15 01:41:11 2023
    https://gitlab.synchro.net/main/sbbs/-/commit/25b0a9a74cc8c12b91450f79
    Modified Files:
    src/sbbs3/ftpsrvr.c login.cpp mailsrvr.c services.c websrvr.c
    Log Message:
    Commonize the login authentication failure messages and log levels

    Using "Warning" log levels more for things that the sysop might be able to do something about. If it's just an input data validation (from a random TCP/IP client), use "Notice" log level instead.

    The terminal server log output is still the odd ball.

    ---
    Synchronet Vertrauen Home of Synchronet [vert/cvs/bbs].synchro.net
  • From Rob Swindell (on Windows 11)@VERT to Git commit to main/sbbs/master on Sun Dec 17 21:13:16 2023
    https://gitlab.synchro.net/main/sbbs/-/commit/8fbfcd9c2a6d29d156e5f20d
    Modified Files:
    src/sbbs3/ftpsrvr.c login.cpp mailsrvr.c services.c websrvr.c
    Log Message:
    Update wording of log/reason for too many failed consecutive login attempts

    ---
    Synchronet Vertrauen Home of Synchronet [vert/cvs/bbs].synchro.net