>>> Any tips or suggestions as to a way to limit/avoids telnet login
>>> attacks on BBBS?

>>> Lately I have been getting numerious telnet login attempts by
>>> IP's that reversely resolve to Asian countries. The same IP will
>>> try to login to all available nodes. No actual login is
>>> attempted. Each open node will sit open at the login name
>>> prompt.I have been adding up to 5 IP's at a time to the INET.BBB
>>> file. Which then blocks those IP's. But there are plenty of other
>>> IP's. :-)

>> Yeah, I think that this is a problem for every one of us that runs a
>> BBS.  It got to the poing where I have inbound telnet and binkp
>> connections running on only a certain group of nodes and web services
>> running on another group of nodes.


> I posted the above message shortly after I setup BBBS and noticed a rash
> of "root" and "sysop" login attempts. As well as DOS (Denial of Service)
> attempts by trying to login to all available nodes from the same IP. I
> quickly configured BBBS to reject logins using invvalid user info. As well
> as blocking DOS Ip's for a time. At one point I had some 5000 IP's that
> were being blocked. That type of activity has dimished considerably over
> the last year.


I took care of the problem with iptables.  It's late now, I'll post what I did
tomorrow.  It's easy, you'll see, and it works really well because you specify
the ports you want to 'protect'.

Take care,
Janis

--- BBBS/Li6 v4.10 Dada-2