View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0005550 | unreal | ircd | public | 2020-02-06 14:05 | 2020-04-12 15:20 |
Reporter | LesterClayton | Assigned To | |||
Priority | normal | Severity | feature | Reproducibility | always |
Status | acknowledged | Resolution | open | ||
Platform | Linux | OS | Ubuntu | OS Version | 19.10 |
Product Version | 5.0.2 | ||||
Summary | 0005550: Exempt users from connthrottle | ||||
Description | The new ConnThrottle module still activates for IP's which have except ban and/or except throttle in the main unrealircd.conf | ||||
Steps To Reproduce | 1) Install or run UnrealIRCD that has no Reputation database 2) Add config blocks for except throttle and/or except ban for your source IP's 3) Connect multiple clients in quick succession (I've wrtten an IRC Stress Tester client that will connect 1 client every second) 4) Watch ConnThrottle activate. | ||||
Additional Information | ConnThrottle in action: [20/02/06 13:28:07 +0100 GMT] -server3- *** Client connecting: SZLWIGLNWXRG (YDHGCGEMLO@10.1.128.101) [10.1.128.101] {0} [20/02/06 13:28:08 +0100 GMT] -server3- *** Client connecting: LZXYMNCLKZSG (KFUCTFOOLF@10.1.128.101) [10.1.128.101] {0} [20/02/06 13:28:08 +0100 GMT] -server2- *** Client connecting: JYUTQGSVTKVW (QUUBHDFVMW@185.x.y.z) [185.x.y.z] {0} [20/02/06 13:28:09 +0100 GMT] -server3- *** Client connecting: WOOYPMYQFFUP (HOWUSHSOSS@10.1.128.101) [10.1.128.101] {0} [20/02/06 13:28:09 +0100 GMT] -server2- *** Client connecting: MOGGWVKQQGGG (LHCXLVSDKI@185.x.y.z) [185.x.y.z] {0} [20/02/06 13:28:09 +0100 GMT] -server1- *** Client connecting: NFARUJVDAMMS (ZOWXQDDAVR@185.x.y.z) [185.x.y.z] {clients} [20/02/06 13:28:10 +0100 GMT] -server3- *** Client connecting: YCQPBBVWXXPE (MHMHTZUNBO@10.1.128.101) [10.1.128.101] {0} [20/02/06 13:28:10 +0100 GMT] -server2- *** Client connecting: TMNIXDLWUNKL (MILLHYCDHC@185.x.y.z) [185.x.y.z] {0} [20/02/06 13:28:10 +0100 GMT] -server1- *** Client connecting: CEEZHJWNELIH (JLTWGAOTQE@185.x.y.z) [185.x.y.z] {clients} [20/02/06 13:28:11 +0100 GMT] -server3- *** Client connecting: RLWJJFCMGCRF (LDLUYPHZAQ@10.1.128.101) [10.1.128.101] {0} [20/02/06 13:28:11 +0100 GMT] -server2- *** Client connecting: CUSDSSLXZLCF (JXAATWBYVS@185.x.y.z) [185.x.y.z] {0} [20/02/06 13:28:11 +0100 GMT] -server1- *** Client connecting: MWTYYKOZPWFO (IZQRMAFXZT@185.x.y.z) [185.x.y.z] {clients} [20/02/06 13:28:12 +0100 GMT] -server3- *** Client connecting: DCRPLHEGKHEQ (HVBEYJQTTQ@10.1.128.101) [10.1.128.101] {0} [20/02/06 13:28:12 +0100 GMT] -server2- *** Client connecting: UHKWFUBZTKXM (ECZJHVGAWX@185.x.y.z) [185.x.y.z] {0} [20/02/06 13:28:12 +0100 GMT] -server1- *** Client connecting: RJPMTVDEESJV (CAKAVLUPOR@185.x.y.z) [185.x.y.z] {clients} [20/02/06 13:28:13 +0100 GMT] -server3- *** Client connecting: UABSRJYDPYAG (VGKIFZDVIG@10.1.128.101) [10.1.128.101] {0} [20/02/06 13:28:13 +0100 GMT] -server2- *** Client connecting: EBYHSDGKCJST (KEKENCANRC@185.x.y.z) [185.x.y.z] {0} [20/02/06 13:28:14 +0100 GMT] -server1- *** Client connecting: VSFVIRWVLPST (OBZFJUPTRU@185.x.y.z) [185.x.y.z] {clients} [20/02/06 13:28:14 +0100 GMT] -server3- *** Client connecting: YHOSIXHETLLN (AQXCQVKOWG@10.1.128.101) [10.1.128.101] {0} [20/02/06 13:28:14 +0100 GMT] -server2- *** Client connecting: EKBUVIOFWGHD (GHFVLNATPK@185.x.y.z) [185.x.y.z] {0} [20/02/06 13:28:15 +0100 GMT] -server1- *** Client connecting: SILRBZGVHRHI (EFBJYVMYAM@185.x.y.z) [185.x.y.z] {clients} [20/02/06 13:28:15 +0100 GMT] -server3- *** Client connecting: LAHKOPDYZGHB (BJEUULIHJR@10.1.128.101) [10.1.128.101] {0} [20/02/06 13:28:15 +0100 GMT] -server2- *** Client connecting: XINTTAQEVUQK (REZILXDFXB@185.x.y.z) [185.x.y.z] {0} [20/02/06 13:28:16 +0100 GMT] -server1- *** Client connecting: BIKZHPSJSXSB (XKSJGWUMFG@185.x.y.z) [185.x.y.z] {clients} [20/02/06 13:28:16 +0100 GMT] -server3- *** Client connecting: NAZNJUSHNCQG (GZCNAIJLYL@10.1.128.101) [10.1.128.101] {0} [20/02/06 13:28:16 +0100 GMT] -server2- *** Client connecting: JCHQSZLEIHRO (PLSXRIVOEM@185.x.y.z) [185.x.y.z] {0} [20/02/06 13:28:17 +0100 GMT] -server1- *** Client connecting: GVANJJZKRDBO (TIGVNTBKKQ@185.x.y.z) [185.x.y.z] {clients} [20/02/06 13:28:17 +0100 GMT] -server3- *** Client connecting: QZUVPYOSCEZL (AWDZONBJKW@10.1.128.101) [10.1.128.101] {0} [20/02/06 13:28:17 +0100 GMT] -server2- *** Client connecting: ZFGQWPDHGZGE (EQLHTNDRYK@185.x.y.z) [185.x.y.z] {0} [20/02/06 13:28:18 +0100 GMT] -server1- *** [ConnThrottle] Connection throttling has been ACTIVATED due to a HIGH CONNECTION RATE. On every server: except ban { mask *@10.0.0.0/8; mask *@185.x.y.0/24; type all; }; except throttle { mask 10.0.0.0/8; mask 185.x.y.0/22; } This wouldn't ordinarily be an issue, since IRC administrators don't expect (or want) a large amount of clients coming from the same IP, but "except throttle" is there specifically to ignore connections from specific IP's or blocks. | ||||
Tags | ConnThrottle | ||||
3rd party modules | |||||
|
I've also added Elines for these IP's and it also doesn't help. /stats except shows these new Elines plus the ones from my configs, but ConnThrottle still ignores. |
|
I suppose we could not count users if they have an 'c' exemption. Or introduce a new type. I will have to think about it. Not too important, so a low priority item for me. I suggest you disable the module when you are load testing, like I do. Either interactively via /THROTTLE OFF, or by unloading/blacklisting it. |
|
Thanks for the /throttle off hint :) I'll be able to use that in my load testing. Agreed veeerrryy low priorioty. |
|
Due to the lower priority I have renamed it to "Exempt users from connthrottle" and changed it from minor to feature. I will probably not look at it anytime soon. |
Date Modified | Username | Field | Change |
---|---|---|---|
2020-02-06 14:05 | LesterClayton | New Issue | |
2020-02-06 14:05 | LesterClayton | Tag Attached: ConnThrottle | |
2020-02-06 16:11 | LesterClayton | Note Added: 0021285 | |
2020-02-08 10:25 | syzop | Note Added: 0021291 | |
2020-03-12 19:45 | LesterClayton | Note Added: 0021366 | |
2020-04-12 15:20 | syzop | Severity | minor => feature |
2020-04-12 15:20 | syzop | Summary | [ConnThrottle] ignores except ban and except throttle => Exempt users from connthrottle |
2020-04-12 15:20 | syzop | Note Added: 0021441 | |
2020-04-12 15:20 | syzop | Status | new => acknowledged |