software/!RELEASES/ircservices/achurch.org/services/lists/ircservices/2001/001135.html

   1 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
   2 <HTML>
   3  <HEAD>
   4    <TITLE> [IRCServices] exceptions entries by IP &amp; channel bans with bahamut
   5    </TITLE>
   6    <LINK REL="Index" HREF="index.html" >
   7    <LINK REL="made" HREF="mailto:ircservices%40ircservices.za.net?Subject=%5BIRCServices%5D%20exceptions%20entries%20by%20IP%20%26%20channel%20bans%20with%20bahamut&In-Reply-To=">
   8    <META NAME="robots" CONTENT="index,nofollow">
   9    <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
  10    <LINK REL="Previous"  HREF="001134.html">
  11    <LINK REL="Next"  HREF="001137.html">
  12  </HEAD>
  13  <BODY BGCOLOR="#ffffff">
  14    <H1>[IRCServices] exceptions entries by IP &amp; channel bans with bahamut</H1>
  15     <B>Kelmar K. Firesun</B>
  16     <A HREF="mailto:ircservices%40ircservices.za.net?Subject=%5BIRCServices%5D%20exceptions%20entries%20by%20IP%20%26%20channel%20bans%20with%20bahamut&In-Reply-To="
  17        TITLE="[IRCServices] exceptions entries by IP &amp; channel bans with bahamut">kfiresun at ix.netcom.com
  18        </A><BR>
  19     <I>Fri Jan 19 16:19:21 PST 2001</I>
  20     <P><UL>
  21         <LI>Previous message: <A HREF="001134.html">[IRCServices] exceptions entries by IP &amp; channel bans with
  22  bahamut
  23 </A></li>
  24         <LI>Next message: <A HREF="001137.html">[IRCServices] exceptions entries by IP &amp; channel bans with bahamut
  25 </A></li>
  26          <LI> <B>Messages sorted by:</B>
  27               <a href="date.html#1135">[ date ]</a>
  28               <a href="thread.html#1135">[ thread ]</a>
  29               <a href="subject.html#1135">[ subject ]</a>
  30               <a href="author.html#1135">[ author ]</a>
  31          </LI>
  32        </UL>
  33     <HR>
  34 <!--beginarticle-->
  35 <PRE>----- Original Message -----
  36 From: Andy Smith &lt;<A HREF="http://www.ircservices.za.net/mailman/listinfo/ircservices">andy at strugglers.net</A>&gt;
  37 To: &lt;<A HREF="http://www.ircservices.za.net/mailman/listinfo/ircservices">ircservices at ircservices.za.net</A>&gt;
  38 Sent: Friday, January 19, 2001 2:15 PM
  39 Subject: [IRCServices] exceptions entries by IP &amp; channel bans with bahamut
  40
  41
  42 &gt;<i> Entries on the exception list do not seem to work if you give the IP
  43 </I>address
  44 &gt;<i> but the clients come online from a resolved host.  It'd be really nice to
  45 </I>be
  46 &gt;<i> able to specify an exception entry such as 192.168.0.*  (it'd be even
  47 </I>nicer
  48 &gt;<i> to be able to use proper CIDR notation too e.g. 192.168.0.0/24), any
  49 </I>chance
  50 &gt;<i> of that happening?
  51 </I>&gt;<i>
  52 </I>&gt;<i> Secondly, Bahamut allows bans applied by IP address to affect the
  53 </I>hostnames
  54 &gt;<i> that match, but chanserv unban &lt;nick&gt; doesn't take this into account.
  55 </I>This
  56 &gt;<i> leads to a bit of confusion when people try to unban a nick from outside
  57 </I>the
  58 &gt;<i> channel and it doesn't appear to be happening.  What are people's thoughts
  59 </I>&gt;<i> on this behaviour?
  60 </I>&gt;<i>
  61 </I>
  62 . o O ( It does!? )
  63
  64 I didn't see any evidence of that when I going thought the sources....
  65 Does it allow 192.168.0.0/24 bans on a channel?  I know you could ban
  66 on IPs for a long time but the ircds would only check if the user's
  67 host did not resolve.
  68
  69 ANYHOW!  The answer your question, yes and no.  You CAN do it but you have
  70 to change your ircds to transmit the IP addresses as well as the hostnames
  71 of your users, which is something I know Bahamut doesn't do.  (I'm guessing
  72 that each server checks the IP related bans locally, there for it works)
  73
  74
  75 The last thing you'd want is to have services sit there and hang up for
  76 a while as it performs 100s of DNS lookups (which might not resolve) on
  77 each user on your network... Even then what one server things the IP of
  78 one user might NOT be the IP that another server will resolve.
  79
  80 Here are two examples using a simple setup like so:
  81 Server 1 is on the east side of the US which is connected to Server 2
  82 on the west side of the US.  Server 2 is hosting a copy of Services
  83 for this hypothetical IRC network.  Our User A is on the East side of
  84 the US as well using a local ISP.  He'll be connecting to Server 1 because
  85 it's geographically closer to him.
  86
  87 Example 1:
  88 User A connects to Server 1.  Now let's just imagine that User A's ISP has
  89 just changed it's block of IPs or it's DNS entries, but these entries
  90 haven't propagated to Server 2's DNS records like they did to Server 1's.
  91 One of two things will happen.  Services will have the wrong IP, or it
  92 will not resolve at all, either way it's ban will not be effective if it
  93 triggers at all.
  94
  95 Example 2:
  96 User A connects to Server 1 who has a working DNS so Server 1 sends the
  97 hostname to Server 2 for the user.  However, Server 2's DNS is down so
  98 Services appears to &quot;hang&quot; while if finds out it can't resolve the hostname.
  99 Now you can write an asynchronous DNS library (I've done it myself) but
 100 either way you duplicate the problem above.
 101
 102 This is why you'd have to transmit the IP when the user connects.  Services
 103 doesn't know to set the ban if it cannot match the bans.
 104
 105 Bryce Simonds (Kelmar K. Firesun)
 106 IRC operator: dream.esper.net
 107
 108
 109
 110
 111 </PRE>
 112
 113 <!--endarticle-->
 114     <HR>
 115     <P><UL>
 116         <!--threads-->
 117         <LI>Previous message: <A HREF="001134.html">[IRCServices] exceptions entries by IP &amp; channel bans with
 118  bahamut
 119 </A></li>
 120         <LI>Next message: <A HREF="001137.html">[IRCServices] exceptions entries by IP &amp; channel bans with bahamut
 121 </A></li>
 122          <LI> <B>Messages sorted by:</B>
 123               <a href="date.html#1135">[ date ]</a>
 124               <a href="thread.html#1135">[ thread ]</a>
 125               <a href="subject.html#1135">[ subject ]</a>
 126               <a href="author.html#1135">[ author ]</a>
 127          </LI>
 128        </UL>
 129
 130 </body></html>