Users registered with nickserv

[roughnecks]

Hi, i have an eggdrop and i get this problem...i'm the owner and my user is tizio (let's say my mask is *!tizio@*.telecom-italia.it); now if i change the user field in xchat and put the one of another user (let'say caio) who is registered in the bot userlist, i am identified as caio (in the case we have the same isp, i mean).

Is it right?
I find this behaviour not correct.
Is there a way to make eggdrop check the users flags before opping them?
For users flags i mean, for example the r flag wich nickserv assign to registered nicks upon connecting to the server. in this case i may use hostmasks such as tizio!tizio@*someisp.xx and have my eggdrop waiting before opping and being sure that tizio is the right registered user and not someone else trying to get opped.

I know that it's not so clear...so excuse me, but i'm italian.
Thanks

[TCL_no_TK]

I'd recommend using a differant hostmask then in the userfile. So the bot will identify only you, i wouldn't see adding more hostmask's that will allow you to use differant hostmasks or something would cause a problem. Hopefully the following will be helpful to you http://www.egghelp.org/enhance.htm#security

[roughnecks]

Thanks for the tip
Reading that stuff i see this:

Unless your Eggdrop is on a small, private channel which does not get many visitors you do not know, using auto-op greatly increases the risk of channel takeover. This is because, in order to get ops, a person only needs to match a hostmask of a user, and idents/hostnames can often be faked on IRC. It is best to make sure that users can only get ops after giving their password to the bot, typically by sending a /msg to the bot to request ops.

What is the /msg command to request op from eggdrop ?
See U

[TCL_no_TK]

/MSG <botnick> OP <password> [channel]
* Ops you on any channel where I have ops and you don't. If a channel name is specified, you will only be opped on that channel.

If you do not add hostmask's to the user record and wish for the user to /msg the bot for ops, i would recommend the use of the /msg <botnick> ident command.

/MSG <botnick> IDENT <password> [handle]
* This lets the bot recognize you from a new address. You don't need to specify a handle if your handle is the same as your nickname on IRC.

Add a user record in the bots user file i.e "myops" with a strong password and just give the "myops" user handle +o flag for the channel where "myops" will be op'ing and *then* give everyone who you wish to get ops on the channel you gave "myops" user handle +o flag on. The string password. And have them do: /msg <botnick> ident string password myops
and get ops that way? maybe.

Since using the "ident" command is considered insecure and the eggdrop config file recommend's unbinding it (removing it). You could use the following. simlar to the way the "hello" command is changed:

Code: Select all

unbind msg - ident *msg:ident
bind msg - <my-word> *msg:ident