View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0002939 | unreal | ircd | public | 2006-05-31 17:28 | 2006-06-11 06:53 |
| Reporter | avenger | Assigned To | |||
| Priority | normal | Severity | feature | Reproducibility | always |
| Status | closed | Resolution | no change required | ||
| Product Version | 3.2.5 | ||||
| Summary | 0002939: Cloak GLine hunting | ||||
| Description | I want with this note request a feature (maybe as a #define) to implement an option to check a virtual host or a cloaked host for GLining (or other autokill procedure which involves reverse hostname matching). | ||||
| Steps To Reproduce | No GLine matches the cloaked version of the users' IP address. | ||||
| Additional Information | Well, the idea is: - With Cloaks: upon make_virthost(), if the mask matches an active gline, that the ban be applied to the user. The make_virthost() call could be moved also be moved to register-time (leaving the already discussed responsability of calling make_virthost() to UMODE +x), so the possible cloak G-Line is matched earlier. - With actual virtual hosts: Well, akill hunting for these is somewhat pointless. Maybe just add a test to SETHOST/CHGHOST to warn/applyKill/deny the change of host if it matches an active gLine. The suggestions derives from the will of keeping IP addresses off even from real opers (e.g other opers that are not admins/svsadmin/netadmins), just to keep even privacy to the users and being able to accept more IRCOps to a given network that otherwise, although he could give good service to the network, his ethics could be questionable or, better, for opers while being recently adopted to the network (hardening social engineering attacks, in a harmless manner. Some other 'ip cloaking' would fit this ideal, but the idea of hiding the client's access IP address is more 'vital' in an ethic view. | ||||
| 3rd party modules | |||||
|
|
I can't see the need for this. Firstly, if you use /gline nick, Unreal automatically fills in the real host. Secondly, anyone with /gline access can just /whois the user to get his real hostname. Or use the +R flag of /who. Thirdly, IRCops that can't be trusted with IPs shouldn't be IRCops in the first place ;P . |
|
|
Nah.. as aquanight says, I don't like this idea. Our position on ircops is exactly as he says: We are not going to put all kinds of IP hiding stuff for opers in the IRCd. If you would want something like this - which is useless if they still have ircop rights since there are still tons of ways to get people IP's - then I suggest to make some kind of service for "low ranking opers" or whatever.. use your imagination :P. But it won't be in Unreal. |
