software/!RELEASES/ircservices/achurch.org/services/lists/ircservices/2002/002950.html

   1 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
   2 <HTML>
   3  <HEAD>
   4    <TITLE> Proxy scanning (was RE: [IRCServices] Another Feature Suggestion)
   5    </TITLE>
   6    <LINK REL="Index" HREF="index.html" >
   7    <LINK REL="made" HREF="mailto:ircservices%40ircservices.za.net?Subject=Proxy%20scanning%20%28was%20RE%3A%20%5BIRCServices%5D%20Another%20Feature%20Suggestion%29&In-Reply-To=">
   8    <META NAME="robots" CONTENT="index,nofollow">
   9    <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
  10    <LINK REL="Previous"  HREF="002948.html">
  11    <LINK REL="Next"  HREF="002951.html">
  12  </HEAD>
  13  <BODY BGCOLOR="#ffffff">
  14    <H1>Proxy scanning (was RE: [IRCServices] Another Feature Suggestion)</H1>
  15     <B>Ross Hosman</B>
  16     <A HREF="mailto:ircservices%40ircservices.za.net?Subject=Proxy%20scanning%20%28was%20RE%3A%20%5BIRCServices%5D%20Another%20Feature%20Suggestion%29&In-Reply-To="
  17        TITLE="Proxy scanning (was RE: [IRCServices] Another Feature Suggestion)">rosshosman at charter.net
  18        </A><BR>
  19     <I>Fri May 31 14:52:00 PDT 2002</I>
  20     <P><UL>
  21         <LI>Previous message: <A HREF="002948.html">Proxy scanning (was RE: [IRCServices] Another Feature Suggestion)
  22 </A></li>
  23         <LI>Next message: <A HREF="002951.html">Proxy scanning (was RE: [IRCServices] Another Feature Suggestion)
  24 </A></li>
  25          <LI> <B>Messages sorted by:</B>
  26               <a href="date.html#2950">[ date ]</a>
  27               <a href="thread.html#2950">[ thread ]</a>
  28               <a href="subject.html#2950">[ subject ]</a>
  29               <a href="author.html#2950">[ author ]</a>
  30          </LI>
  31        </UL>
  32     <HR>
  33 <!--beginarticle-->
  34 <PRE>btw, I was suggesting floodserv as a proxy monitor but as a channel/network
  35 flood monitor.
  36
  37 ----- Original Message -----
  38 From: &quot;Russell Garrett&quot; &lt;<A HREF="http://www.ircservices.za.net/mailman/listinfo/ircservices">rg at tcslon.com</A>&gt;
  39 To: &lt;<A HREF="http://www.ircservices.za.net/mailman/listinfo/ircservices">ircservices at ircservices.za.net</A>&gt;
  40 Sent: Friday, May 31, 2002 5:17 AM
  41 Subject: RE: Proxy scanning (was RE: [IRCServices] Another Feature
  42 Suggestion)
  43
  44
  45 &gt;<i> &gt; Since Services 5 will (or at very least could, given
  46 </I>&gt;<i> &gt; coding for a module)
  47 </I>&gt;<i> &gt; sport global Z: line management, would it make sense to
  48 </I>&gt;<i> &gt; have it send a
  49 </I>&gt;<i> &gt; message so that it adds your desired Z: line to Services?
  50 </I>&gt;<i> &gt; Or should one
  51 </I>&gt;<i> &gt; collect up the accumulated Z: lines on the respective
  52 </I>&gt;<i> &gt; servers BOPM is
  53 </I>&gt;<i> &gt; running on and manually add them later?
  54 </I>&gt;<i>
  55 </I>&gt;<i> The only problem with this is the single-point-of-failure problem: If
  56 </I>&gt;<i> someone DoSes your Services server, or the services hub off, then the
  57 </I>&gt;<i> point of having a seperate proxy monitor on each server is defeated,
  58 </I>&gt;<i> as they can't submit their z:lines.
  59 </I>&gt;<i>
  60 </I>&gt;<i> The most resilient solution, at least with BOPM, is to get each
  61 </I>&gt;<i> individual BOPM bot to submit by e-mail to blitzednet's DNS blacklist
  62 </I>&gt;<i> (you have to e-mail them to set this up, but it's very efficient) -
  63 </I>&gt;<i> all the other BOPM proxy monitors on your network and everywhere else
  64 </I>&gt;<i> will then pick compromised hosts up almost immediately using the
  65 </I>&gt;<i> blacklist lookup, without having to scan. This removes the
  66 </I>&gt;<i> single-point-of-failure problem (well I suppose someone could still
  67 </I>&gt;<i> DoS the blacklist server, but that would only slow down the k:lining
  68 </I>&gt;<i> of proxybots - if you're that paranoid you could use your own
  69 </I>&gt;<i> blacklist server).
  70 </I>&gt;<i>
  71 </I>&gt;<i> Russ Garrett
  72 </I>&gt;<i> <A HREF="http://www.ircservices.za.net/mailman/listinfo/ircservices">russ at garrett.co.uk</A>
  73 </I>&gt;<i> www.faereal.net
  74 </I>&gt;<i>
  75 </I>&gt;<i> ------------------------------------------------------------------
  76 </I>&gt;<i> To unsubscribe or change your subscription options, visit:
  77 </I>&gt;<i> <A HREF="http://www.ircservices.za.net/mailman/listinfo/ircservices">http://www.ircservices.za.net/mailman/listinfo/ircservices</A>
  78 </I>
  79
  80 </PRE>
  81
  82 <!--endarticle-->
  83     <HR>
  84     <P><UL>
  85         <!--threads-->
  86         <LI>Previous message: <A HREF="002948.html">Proxy scanning (was RE: [IRCServices] Another Feature Suggestion)
  87 </A></li>
  88         <LI>Next message: <A HREF="002951.html">Proxy scanning (was RE: [IRCServices] Another Feature Suggestion)
  89 </A></li>
  90          <LI> <B>Messages sorted by:</B>
  91               <a href="date.html#2950">[ date ]</a>
  92               <a href="thread.html#2950">[ thread ]</a>
  93               <a href="subject.html#2950">[ subject ]</a>
  94               <a href="author.html#2950">[ author ]</a>
  95          </LI>
  96        </UL>
  97
  98 </body></html>