View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0002572unrealircdpublic2005-06-26 04:242005-07-02 12:21
ReporterCaedmon Assigned To 
PrioritynormalSeveritymajorReproducibilityalways
Status closedResolutionno change required 
Product Version3.2.3 
Summary0002572: Users able to connect under opers class
DescriptionI have users able to connect under my opers class. The users class is present, and there is no allow block for the opers class, aside from one that only permits from 192.168.*

It almost seems that it's seeing the client as a clone of a current oper, and thus moving them into the opers class with the original connection.. But as far as I, and the supporters know, that's not possible.
3rd party modules

Activities

RandomNumber

2005-06-26 04:40

reporter   ~0010131

As I know itll be asked, what to the classes look like? As in paste please :)

Caedmon

2005-06-26 04:41

reporter   ~0010133

class clients {
  pingfreq 90;
  maxclients 150;
  sendq 100000;
};
class opers {
  pingfreq 90;
  maxclients 100;
  sendq 1000000;
};

Dukat

2005-06-26 06:05

reporter   ~0010134

Paste all allow blocks too, please =)

RandomNumber

2005-06-26 06:18

reporter   ~0010135

and your listen blocks?

Caedmon

2005-06-26 07:05

reporter   ~0010136

allow {
 ip "*@*";
 hostname "*@*";
 maxperip 2;
 class clients;
 redirect-server "irc.christian-irc.net";
 };
 allow {
 ip "*@218.101.48.236";
 hostname "*@*";
 maxperip 2;
 class clients;
 };
 allow {
 ip "*@*";
 hostname "*@192.168.*";
 maxperip 3;
 class opers;
 };

Caedmon

2005-06-26 07:07

reporter   ~0010137

listen xx.xx.xx.xx:6666-6669
 {
  options {
   clientsonly;
  };
 };
listen xx.xx.xx.xx:7646
 {
 options {
  serversonly;
 };
};
 listen xx.xx.xx.xx:6697
 {
 options {
 ssl;
 };
 };

Caedmon

2005-06-26 07:08

reporter   ~0010138

Something to be mentioned, while there is an allow block for opers, it's restricted to a private IP. The clients logging into the opers class are all remote clients.

RandomNumber

2005-06-26 10:20

reporter   ~0010139

Your problem is that allow blocks are viewd from bottom to top and you have your oper one on the bottom and it will match any host. or am I totaly wrong there

aquanight

2005-06-26 11:29

reporter   ~0010140

Last edited: 2005-06-26 11:31

 No, this is the problem:

allow {
 ip "*@*";
 hostname "*@192.168.*";

Try:

ip *@192.168.*;
hostname <garbage>;

http://vulnscan.org/UnrealIrcd/unreal32docs.html#allowblock :p

Issue History

Date Modified Username Field Change
2005-06-26 04:24 Caedmon New Issue
2005-06-26 04:40 RandomNumber Note Added: 0010131
2005-06-26 04:41 Caedmon Note Added: 0010133
2005-06-26 06:05 Dukat Note Added: 0010134
2005-06-26 06:18 RandomNumber Note Added: 0010135
2005-06-26 07:05 Caedmon Note Added: 0010136
2005-06-26 07:07 Caedmon Note Added: 0010137
2005-06-26 07:08 Caedmon Note Added: 0010138
2005-06-26 10:20 RandomNumber Note Added: 0010139
2005-06-26 11:29 aquanight Note Added: 0010140
2005-06-26 11:29 aquanight Note Edited: 0010140
2005-06-26 11:31 aquanight Note Edited: 0010140
2005-07-02 12:21 codemastr Status new => closed
2005-07-02 12:21 codemastr Resolution open => no change required