Security Threats - Through Admins and servers, links etc

RhiN0 · Post by **RhiN0** » Tue Nov 15, 2005 4:57 am

Alright i want ot make my own irc server, i got a temp one, but if i want to make a real one ill have to get it on a good computer and fast internet, i need to know if there are threats that links can produce (i.e thru editing of the .conf file to add their own admins. Now i really dont know the difference of Hub And Leaf - from what ive tried to put together, Hub is like the central server - then leafs connect to the central server, and players can be connected to the hub and the leaf - but im guessing Hub has more power?

basically i want to know the possible risks if i decide to host something i worked on somewhere else

w00t · Post by **w00t** » Tue Nov 15, 2005 7:05 am

Not quite sure what you're meaning.. if you mean other servers- if they add their own o:lines (as they can) - they can do damage. This is why you get to know and trust someone (as an IRC admin, not as a person) before linking to them.

If you mean hosting your server externally, most people do that.

RhiN0 · Post by **RhiN0** » Tue Nov 15, 2005 9:27 am

so all servers (both leaves and hubs) can produce the same secruity risks thru their ability to make o lines?

Solutech · Post by **Solutech** » Tue Nov 15, 2005 1:57 pm

yup anyone who can add olines can cause you grief . As W00t says make sure you trust whoever you give olines to .

Matridom · Post by **Matridom** » Tue Nov 15, 2005 3:22 pm

I learned the hardway (when setting up my own server years ago) that there is a "quarantine" option for the link block, it disables IRCop's from that server from having the same right on your server. meaning, he can't kill someone on your server from his. However, it causes issues with services.

Otherwise i would agree with everyone, know and trust the people you deal with.

aquanight · Post by **aquanight** » Tue Nov 15, 2005 6:09 pm

quarantine doesn't work :P

Matridom · Post by **Matridom** » Tue Nov 15, 2005 6:22 pm

aquanight wrote:quarantine doesn't work

it did back in 3.1.12 beta

w00t · Post by **w00t** » Tue Nov 15, 2005 11:00 pm

Actually, I looked at this the other day, and I'm not too sure why it wouldn't be working.. unless it's some bizarre conf voodoo. The MODE code checks for quarantine properly and reverses changes (or should) ok...

Jason · Post by **Jason** » Tue Nov 15, 2005 11:30 pm

Is there some minor name difference in the checked variable?