View Issue Details

IDProjectCategoryView StatusLast Update
0000864unrealircdpublic2003-11-20 19:46
Reportergauntlet Assigned Tocodemastr 
PrioritynormalSeverityfeatureReproducibilityN/A
Status closedResolutionno change required 
Product Version3.2-beta15 
Summary0000864: Add Feature, +X or something, hide all Server Links from non-ircops, or ircops without flag to see them
DescriptionIs there a feature or any thing that can be added to HIDE all Server Linking information, and make it seem as if they are connecting to one server, even though it connected to linked servers. Im talking hiding from general users. Add a new Flag or something. Just a Suggestion.... Help prevent DDOS attacks, GRRRRR, info they cant get, cant be used. is all
Steps To Reproducen/a
Additional Informationn/a
3rd party modules

Activities

AngryWolf

2003-04-03 08:41

reporter   ~0002082

My opinion: hiding these messages from non-ircops is OK, but adding a new userflag or a snomask is stupid, because then lamers (who don't know anything about the new flag) won't see these information, and they won't know what's wrong, they'll send a bugreport, and so on.

gauntlet

2003-04-03 17:00

reporter   ~0002086

LOL, stupid lamers, o well, yah i agree with u AngryWolf, but i still think it be a good idea to be able to hide it from packet kiddies what u think???

Lx

2003-04-03 17:31

reporter   ~0002087

my opinion is they should add an option on the unrealircd.conf for enable or disable the /links for users.

gauntlet

2003-04-03 17:50

reporter   ~0002088

That would work, just allow similar to the hide ulines, hide linklines options should be added, that would make more sense to everyone :D. because opers would still be able to access it, but normal users would not, therefor making linked servers less vulnerable to net-splits and other attacks.

AngryWolf

2003-04-03 18:42

reporter   ~0002089

Oh, I think i misunderstood your problem, so you want only to hide /list, yes? Sorry, that's better. You aren't the first for asking about such a feature, there was a message on unreal-users mailing list about droolin wanted to restrict using of /list and /map to IRC Operators only.

Dunno what is the coders' idea of it, they might say that it's an idiotic feature or not, but I liked the reasons you told in the bugreport. I think we should use an operflag for it instead of a userflag.

mister

2003-04-04 06:25

reporter   ~0002098

Well, it's not /list but /links... but doesn't matter

I agree to say that the servers map should be hidden, but in any case, even a stupid lamerized scriptkiddie can find server ip... it's even often announced in the status window when connecting to the server... and a simple netstat or net visualisation soft can give you the ip you're connected to
lamerz are lamerz, and the only way to protect a computer is to shut it down...
if you don't want people to know your servers links, I think simply to give them a non DNS name, e.g. your server is called FackDaLamerz.ircnet.net and other one SuckMyIPsDick.ircnet.net will be a solution... Am I wrong ?

AngryWolf

2003-04-04 11:39

reporter   ~0002099

Last edited: 2003-04-04 11:41

Gosh, I'm sorry again :) I wanted to say /links...

By the way, you aren't wrong. But if somebody want, can collect information by doing /whoises on different users or watching netsplits. Denying /links and /map makes only a delay for the kiddies to find out the structure of an IRC Network. It's something like a puzzle for them. :)

edited on: 04-04 11:41

Brad

2003-04-04 20:48

reporter   ~0002103

how bout a hideserver; option in the links config? That was you can choose which servers to hide, such as hubs, and maybe it wouldn't list a hidden server in netsplits?

*shrug*

AngryWolf

2003-04-05 08:13

reporter   ~0002104

Last edited: 2003-04-05 09:07

I don't agree. If a server goes down, why not to inform people?

edited on: 04-05 09:07

syzop

2003-04-05 22:55

administrator   ~0002119

Just wondering, what exactly are you trying to protect?
I assume you aren't trying to hide your own "public servers" (like where users should be on). You are trying to hide your hub? Why not just use a fake hostname then.. Like hub.blah.com (like mister says, and like most ppl do which want to prevent hub-attacks).
Like I said on the mailinglist (don't care if it was you), hiding the servername itself is (too) much work. It's shown in /whois, it can be shown in netjoins, it's shown in some notices, map, links, and probably X other places..
So again, I recommend just using a fake servername :P.

codemastr

2003-04-06 06:26

reporter   ~0002120

I _THINK_ he is talking something like undernet has where /links and /map are disabled? In which case, disabling /links is a violation of RFC1459.

mister

2003-04-06 14:51

reporter   ~0002125

not only this I think...
on undie you also have the servername hidden in /WHOIS if the user you whoised his on another server
*.undernet.org :The Undernet Underworld

but to my mind and as syzop said, it's nearly too much work for nothing...
using hub as hubs and giving them a non DNS name is the simplest way

Issue History

Date Modified Username Field Change
2003-11-20 19:46 syzop Status resolved => closed