This is the new home of the egghelp.org community forum.
All data has been migrated (including user logins/passwords) to a new phpBB version.


For more information, see this announcement post. Click the X in the top right-corner of this box to dismiss this message.

undernet +x mode and ban

Old posts that have not been replied to for several years.
Locked
E
EEggy
Op
Posts: 122
Joined: Thu Sep 26, 2002 11:46 pm

undernet +x mode and ban

Post by EEggy »

Hi, just wondering since after this new undernet +x mode and host hiding
ident@username.users.undernet.org, lets say user joined irc with AOL, and then after using /mode nick +x now his host is ident@usernames.users.undernet.org, and joined the channel, is there anyway to -> set banmask..... so it can grab his origional ip, before +x mode as well and after +x mode as well, and banned both....

thanks
regards
EEggy
p
ppslim
Revered One
Posts: 3914
Joined: Sun Sep 23, 2001 8:00 pm
Location: Liverpool, England

Post by ppslim »

This depends.

Note, I am no expert on IRC services (I use sivice less servers, for the authentic experience), especialy undernet.

My guess is, this feature has been designed to prevent dos & ddos attacks of the service users.

From what I gather, it will allow you to ban by the newly designed host system, thus preventing a specific user from entering.

Due to the first point, it is unlikely, that the system, allows for you to obtain the real information, with some form of command to the server.

There is a slight loophole int he system though. If the user enters the channel, before authenticating with X, then eggdrop has information about the user stored in memory, which can be obtain with getchanhost in Tcl.

If not, then you are likely out of luck.

There is another slight way around it, which is to prevent unregistered/un-authenticated users from entering, by using a script,t hat will kick people that come in, with a host, that doesn't corespond with the *!*@*.users.undernet.org
S
Saktas

Post by Saktas »

Mostly the answer is no.

The new +x mode on Undernet.org uses a fake quit when you set it, that way all servers, clients and bots will think the user me@something.aol.com quit a new user with the same nick appears as something@myname.users.undernet.org

however if you ban the myname.users.undernet.org host the server will mask the ban correctly.

THe only way for the user to evade then is to disconnect from the server and come back without +x mode and then you can ban them again ;)
p
ppslim
Revered One
Posts: 3914
Joined: Sun Sep 23, 2001 8:00 pm
Location: Liverpool, England

Post by ppslim »

OK, so am I right in saying the following is true.

UserA join #chanA.

UserA is not set +x.

When UserA send an auth request, and is set +x. #chanA will see a quit for UserA, and join right away?

On top of this, using a quit, would mean that the /whowas command is able to get information on there provious hostmask. Is this true?
E
EEggy
Op
Posts: 122
Joined: Thu Sep 26, 2002 11:46 pm

Post by EEggy »

yeap, its true
EEggy
S
Saktas

Post by Saktas »

No, you can not /whowas to see previous host information.

see;

*** Joins: Saktas (saktas@140.186.176.253)
*** X sets mode: +v Saktas
*** Quits: Saktas (saktas@140.186.176.253) (Registered)
*** Joins: Saktas (saktas@saktas.users.undernet.org)
*** Oslo2.NO.EU.undernet.org sets mode: +v Saktas

the fake quit re-synchs you with the channel, and your local server re-sets any channel modes you help before the fake quit.
If another user does /whowas they get;

saktas There was no such nickname
-
End of WHOWAS
-
---
Hope that helps :)
Locked