I've made a change in nntpserv.c:
Unless I am missing something, there have been a couple of patches to jamnntpd/smapinntpd announced in this echo conference but none of them have
landed on GitHub.
Where do you guys commit your changes?
Maybe https://github.com/ftnapps/jamnntpd - ame committed 8 years ago Maybe https://github.com/ftnapps/smapinntpd/ - ame committed 11 years ago
Hello All,
I've made a change in nntpserv.c:
WRAP_LENGTH = 79
To test, I've read a bunch of messages in both slrn and Thunderbird, and posted a couple times with both, also (though I don't think posting would have much to do with this setting). Things seem better than they were before. Feel free to give it a try if you're seeing some wierd wrapping issues. :)
NB> Hello All,
NB> I've made a change in nntpserv.c:
NB> WRAP_LENGTH = 79
NB> To test, I've read a bunch of messages in both slrn and Thunderbird, and
NB> posted a couple times with both, also (though I don't think posting would
NB> have much to do with this setting). Things seem better than they were
NB> before. Feel free to give it a try if you're seeing some wierd wrapping
NB> issues. :)
Nevermind this. Back to WRAP_LENGTH = 72 when it started making lines I quoted too long.
Unless I am missing something, there have been a couple of patches to jamnntpd/smapinntpd announced in this echo conference but none of them have landed on GitHub.
Where do you guys commit your changes?
Maybe https://github.com/ftnapps/jamnntpd - ame committed 8 years ago Maybe https://github.com/ftnapps/smapinntpd/ - ame committed 11 years ago
Hello, Nicholas!
Wednesday February 28 2024 19:54, from Nicholas Boel -> All:
Unless I am missing something, there have been a couple of patches to jamnntpd/smapinntpd announced in this echo conference but none of them have landed on GitHub.
Where do you guys commit your changes?
Maybe https://github.com/ftnapps/jamnntpd - ame committed 8 years ago Maybe https://github.com/ftnapps/smapinntpd/ - ame committed 11 years ago
I have forked them both, and they are currently matching each other with patches and features. Please check the CHANGELOG to see what's been done:
https://github.com/axxisd/jamnntpd
https://github.com/axxisd/smapinntpd
https://github.com/axxisd/jamnntpd
https://github.com/axxisd/smapinntpd
Unless I am missing something, there have been a couple of
patches to jamnntpd/smapinntpd announced in this echo conference
but none of them have landed on GitHub.
Where do you guys commit your changes?
Maybe https://github.com/ftnapps/jamnntpd - ame committed 8 years
ago Maybe https://github.com/ftnapps/smapinntpd/ - ame committed
11 years ago
Thanks for getting the ball rolling. You made me get off my ass and
figure out github. I had only known 'clone' and 'pull' until recently.
I have forked them both, and they are currently matching each other
with patches and features. Please check the CHANGELOG to see what's
been done:
https://github.com/axxisd/jamnntpd
https://github.com/axxisd/smapinntpd
This is awesome, thank you! :)
Would it be possible to include:
fidoconfig2jamnntpd.pl
checkgroups.pl
echomailjam2hpt.pl
In these repositories as well?
Thanks for getting the ball rolling. You made me get off my ass
figure out github. I had only known 'clone' and 'pull' until
recently.
It is never late to learn new things, especially if you are coming
from CVS or SVN or whatever world. Cause the whole world is now on
git as an industry standard.
I have forked them both, and they are currently matching each
with patches and features. Please check the CHANGELOG to see
what's been done:
https://github.com/axxisd/jamnntpd
https://github.com/axxisd/smapinntpd
Ah, it is not about repo anymore, it is more about a commitment to be
a maintainer for both projects. :-)
Though, it would be more fun if you can merge them in a way that
there is a #ifdef use SMAPI or jamlib, cause the rest should be
exactly the same. As a sanity check, if you process NNTP requests differently, then you are basically failed. This is the same code
which had forked worked at some point and later continued in a
separate directions.
Would it be possible to include:
fidoconfig2jamnntpd.pl
checkgroups.pl
echomailjam2hpt.pl
In these repositories as well?
My bad. jamnntpd was the last one I was working on, and I added them there. I realized I hadn't added them to smapinntpd yet. Should be
there now. :)
Changing the line to ::ffff:127.0.0.1 didn't seem to help, changing it to *127.0.0.1 seemed to do the trick.
Yup, I see it there now, thanks so much.
Also, in my smapinntpd.allow I had just one uncommented line:
127.0.0.1
When I upgraded to this version I was getting "Access Denied" messages, assuming due to the IPv6 support.
Changing the line to ::ffff:127.0.0.1 didn't seem to help, changing it
to *127.0.0.1 seemed to do the trick.
Not sure if you would want to include that as an example for IPv4 addresses in that file? I haven't looked, but I'm wondering if the code reading smapinntpd.allow doesn't recognize the : character.
Hi Jay.
16 Mar 24 14:18, you wrote to Nicholas Boel:
changing it toJH>> *127.0.0.1 seemed to do the trick.
Good to know! I've been running the ipv6-patched version for years, but never limited the access via the .allow file. "*" there only. :)
Also, in the paragraph above it tells you "*" supercedes the rest of what follows, so *127.0.0.1 is actually just "*", and with that said...
I don't think "*" should be a default example in any case, since that could potentially cause problems. so I think the '127.0.0.1' is and
always has been just a placeholder for people to change.
Ah, I missed that part. No wonder it works! :)
Before I just had 127.0.0.1 as I only want to allow connections from
nginx running on the same VPS.
What would I put in smapinntpd.allow if I wanted to restrict access to a single IPv4 address?
I don't have port 5000 exposed to the public internet, so it's not
really much of a concern, more of a belt & suspenders approach.
What would I put in smapinntpd.allow if I wanted to restrict access t single IPv4 address?
I would assume the exact IPv4 address you want to allow (if it is
outside your LAN).
I'm not sure if I'm explaining this very well. This is exactly what I was doing with the pre-IPv6 patched version & it seemed to work.
In this latest version the only thing that seems to work is *.
$ cat smapinntpd.allow
[cut commented lines]
127.0.0.1
173.32.178.232
$ telnet localhost 5000
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
502 Access denied.
Connection closed by foreign host.
From smapinntpd.log:
17-Mar-24 17:12:30 (::ffff:127.0.0.1:57298) Connection established to localhost
17-Mar-24 17:12:30 (::ffff:127.0.0.1:57298) Access denied (not in allow list)
17-Mar-24 17:13:11 (::ffff:173.32.178.232:61225) Connection established
to cpe1056117c4a5b-cm1056117c4a59.cpe.net.cable.rogers.com
17-Mar-24 17:13:11 (::ffff:173.32.178.232:61225) Access denied (not in allow list)
For now I'll stick with just a single * on its own line.
From smapinntpd.log:
17-Mar-24 17:12:30 (::ffff:127.0.0.1:57298) Connection established to localhost
17-Mar-24 17:12:30 (::ffff:127.0.0.1:57298) Access denied (not in allow list)
17-Mar-24 17:13:11 (::ffff:173.32.178.232:61225) Connection established
to cpe1056117c4a5b-cm1056117c4a59.cpe.net.cable.rogers.com
17-Mar-24 17:13:11 (::ffff:173.32.178.232:61225) Access denied (not in allow list)
For now I'll stick with just a single * on its own line.
I've kind of figured out what's going on, at the moment. Since IPv6 support was added, it is now storing the full address.domain (lookup) there. Basically, what you're seeing in the log after "Connection established to" is what is being checked for in smapinntpd.allow.
Try putting 'localhost' in that file, rather than 127.0.0.1. And if
you want to allow your laptop, try putting this in there:
cpe1056117c4a5b-cm1056117c4a59.cpe.net.cable.rogers.com
Yup, putting localhost & the rogers.com hostname into smapinntpd.allow does the trick.
::ffff:127.0.0.1 still didn't allow connections from localhost.
Did you by chance try out the latest version with huskylib and smapi included? I'd like to know if it works for you (compiling, that is.. nothing has changed with the .allow file yet).
On 18 Mar 2024, Nicholas Boel said the following...
Yes, I cloned that one & ran the ./build.sh first which worked and then make linux went off without a hitch as well.
Was nice not having to go into the file & point it to the husky sources, good work! :)
Sysop: | Eric Oulashin |
---|---|
Location: | Beaverton, Oregon, USA |
Users: | 91 |
Nodes: | 16 (1 / 15) |
Uptime: | 09:33:41 |
Calls: | 5,097 |
Calls today: | 5 |
Files: | 8,491 |
Messages: | 352,834 |
Posted today: | 2 |