Hello,
I have several servers running on unreal ircd 3.2.2 and 3.2.3 in the network. Now i've noticed that normal user on my network can check some /stats lists. Among them, there are should-be-hidden lists like (stats s, stats f and stats C). When i tested on another machine with newly installed unreal ircd 3.2.3 (most settings are default except Required ones), these three stats lists are limited only for Oper.
I wonder what's wrong with the servers on network. Since spammers and abusers can check up the spamfilter list, they can rearrange their spam msgs and it is messy. If anyone can point me out for some informations, i appreciate it.
Last but not least, are all /stats commands availabe only to Oper? Because, I still can check some lists like (stats Q and stats n) on my newly installed Unreal 3.2.3.
Thanks.
Privileges for /stats problem
You have to define which stats are oper-only in the configuration file (set::oper-only-stats block).
http://www.vulnscan.org/UnrealIRCd/unre ... l#setblock
http://www.vulnscan.org/UnrealIRCd/unre ... nformation
You should upgrade all servers on your network to the same version (the latest - 3.2.3).
http://www.vulnscan.org/UnrealIRCd/unre ... l#setblock
http://www.vulnscan.org/UnrealIRCd/unre ... nformation
You should upgrade all servers on your network to the same version (the latest - 3.2.3).
If you don't make mistakes, you aren't really trying.
- Coleman Hawkins
- Coleman Hawkins