View Issue Details

IDProjectCategoryView StatusLast Update
0005598unrealircdpublic2023-03-17 19:00
ReporterPeGaSuS Assigned Tosyzop  
PrioritynormalSeverityfeatureReproducibilityN/A
Status resolvedResolutionfixed 
PlatformUnixOSUbuntuOS Version18.04 LTS
Product Version5.0.3.1 
Fixed in Version6.0.7 
Summary0005598: Add websocket yes/no option to security-group
DescriptionI have a KiwiIRC instance that uses websockets to connect to my server and that way eliminate the need to use the KiwiIRC gateway.
When I was using the gateway I needed to use a webirc block which worked fine.
The problem is that websockets are direct connection and therefore there's no need for webirc, which triggers my antirandom module threshold.
I'd like to know if it's possible and feasible in any way to also exempt websockets from antirandom checking.

Cheers!
TagsNo tags attached.
3rd party modules

Relationships

related to 0006222 resolvedsyzop add security-groups websocket 

Activities

syzop

2022-06-01 09:46

administrator   ~0022547

I have renamed this request from "Extend antirandom module to also expect websockets connections" to "Add websocket yes/no option to security-group". Which is basically what the request would be now that we have the security group / mask item stuff in mid-2022.

I can look at it post-6.0.4. We'll see.

syzop

2022-06-01 09:48

administrator   ~0022548

Related but also slightly off-topic:
Usually KiwiIRC and other trigger antirandom because they include the IP address in hexadecimal somewhere, such as the ident. If that is the case then I recommend you to disable that option. Then antirandom won't be triggered and your users also have better privacy.
Otherwise I am kinda wondering why KiwiIRC would trigger antirandom, or do people just type hfsdlhsfdklhsfd for their realname or something? :D

syzop

2023-03-17 19:00

administrator   ~0022774

Done, thanks for the suggestion.

https://github.com/unrealircd/unrealircd/commit/0428819c03a30d76da1f13ab2c709e27121bb8d8

commit 0428819c03a30d76da1f13ab2c709e27121bb8d8 (HEAD -> unreal60_dev, origin/unreal60_dev, origin/HEAD)
Author: Bram Matthys <[email protected]>
Date: Fri Mar 17 18:57:59 2023 +0100

    Add security group "websocket-users" and add security-group options
    security-group::websocket and security-group::exclude-websocket,
    all similar to how security-group::webirc works but for websocket.
    Suggested by PeGaSuS in https://bugs.unrealircd.org/view.php?id=5598
    and Nini in https://bugs.unrealircd.org/view.php?id=6222

Issue History

Date Modified Username Field Change
2020-03-24 20:39 PeGaSuS New Issue
2022-06-01 09:46 syzop Summary Extend antirandom module to also expect websockets connections => Add websocket yes/no option to security-group
2022-06-01 09:46 syzop Note Added: 0022547
2022-06-01 09:46 syzop Status new => acknowledged
2022-06-01 09:48 syzop Note Added: 0022548
2023-03-17 18:56 syzop Relationship added related to 0006222
2023-03-17 19:00 syzop Assigned To => syzop
2023-03-17 19:00 syzop Status acknowledged => resolved
2023-03-17 19:00 syzop Resolution open => fixed
2023-03-17 19:00 syzop Fixed in Version => 6.0.7
2023-03-17 19:00 syzop Note Added: 0022774