need help to put this right

These are old archives. They are kept for historic purposes only.
Post Reply
Deepwater906uk
Posts: 4
Joined: Tue Aug 12, 2008 10:56 pm

need help to put this right

Post by Deepwater906uk »

need help some one seen this on http://www.wrongway.org/?unrealmodules reading :
"ADVISORY: How to tell if your Unrealircd network is spying on you:
- Ircops: If you type /modules and you see:
*** irc.somenet.net Hooks: 3 6 7 13 15 16 17 18
If the hooks contain the number 17, then private messages are being snooped. If it contains the number 18, then channel messages are being snooped.
- All users: If you type /version and you see:
Unreal3.2.7. irc.somenet.net FinWXeOoZEmM3 [*=2309]"
but further down it does say this
"Note: Some modules may hook private messages or channel messages but may still not be explicitly spying on you, for example the module may be preventing a specific type of spam or something. If you see these hooks in place, you should consult the network administrator as to their specific purpose, and judge for yourself."
##############################################################
WE run spamfilter which checks pm's and dcc
because our version reads (Unreal3.2.7. ***.***.com FinXeOoZEmM3 [*=2309] as well as the hooks 17 and 18,

now people are saying we spy on people pm's , when we don't at all we have nothing loaded to spy.
well will never do and never will.
can some one put this right.
i know its all Self explainer above, i can't see why people get mixed up.
Last edited by Deepwater906uk on Wed Aug 13, 2008 12:40 am, edited 1 time in total.
greg27
Posts: 7
Joined: Tue Jan 08, 2008 12:43 pm

Re: need help to put this right

Post by greg27 »

one of your third party modules is causing this - many of the default spamfilters which ship with unrealircd affect privmsgs, so it's not an issue with spamfilters.
Deepwater906uk
Posts: 4
Joined: Tue Aug 12, 2008 10:56 pm

Re: need help to put this right

Post by Deepwater906uk »

this is what we got loaded.
loadmodule "src/modules/commands.so";
loadmodule "src/modules/cloak.so";
loadmodule "src/modules/hideserver.so";
loadmodule "src/modules/netadmins.so";
loadmodule "src/modules/antirandom.so";
loadmodule "src/modules/m_scarecrow.so";
loadmodule "src/modules/m_blocknonalpha.so";
loadmodule "src/modules/m_dnsbl.so";
###################################
include "help.conf";
include "badwords.channel.conf";
include "badwords.message.conf";
include "badwords.quit.conf";
include "spamfilter.conf";
include "dccallow.conf";
##################################
spamfilter:
spamfilter {
regex "^([A-Z][a-z]{4,9})[0-9]{0,6}!\1[0-9]{2,6}@.*:\1[0-9]{1,6}$";
target { private; channel; };
action gline;
reason "Infected by Spam-Sex-Botz";

i can't see where our three party modules will cause the nm thats states we monitor pm's and channels,
or read people (users) pm's as i said before we never did and never will.
the extra m_ are old anti-virus/trojan block/ the other are botz block/and blacklist
we work very hard to protect our network and its users,
then we get labled "SPY ON USERS" network
gee whats this world coming too?
zEkE
Posts: 111
Joined: Wed Apr 14, 2004 9:30 am
Location: Harrisonburg, VA
Contact:

Re: need help to put this right

Post by zEkE »

After downloading and reviewing source for as many of your modules as I could, my guess is that its the privdeaf module, blocking private messages. My networks run spamfilter, and those hooks nor characters show in module or version.
NetAdmin - irc.unitedchristianchat.net
http://www2.i-al.net/ircbots/
Deepwater906uk
Posts: 4
Joined: Tue Aug 12, 2008 10:56 pm

Re: need help to put this right

Post by Deepwater906uk »

hi thank's for your input,we don't have "privdeaf module" = thats a module to set channels to +Mm so no pm's can be sent in that channel, same as "m_blocknonalpha" by setting the channel to +y no number nicks can entre without be registered.
the only extra modules loaded are listed above.
but what i will do today is rebuild unrealircd with any of the extra modules,until the hooks and characters show
Deepwater906uk
Posts: 4
Joined: Tue Aug 12, 2008 10:56 pm

Re: need help to put this right

Post by Deepwater906uk »

in the scarecrow module i did find hooks to channel and users messages,
"bcopy(modinfo,&ADCMod,modinfo->size);
UserMsg = HookAddPCharEx(ADCMod.handle, HOOKTYPE_USERMSG, adc_usermsg);
ChanMsg = HookAddPCharEx(ADCMod.handle, HOOKTYPE_CHANMSG, adc_chanmsg);
return MOD_SUCCESS;
"
but i did download privdeaf module only to find the same hook,
CheckMsg = HookAddPCharEx(modinfo->handle, HOOKTYPE_USERMSG, privdeaf_checkmsg);
DLLFUNC char *privdeaf_checkmsg(aClient *cptr, aClient *sptr, aClient *acptr, char *text, int notice)
{
if ((acptr->umodes & UMODE_PRIVDEAF) && !IsAnOper(sptr) && !IsULine(sptr) && !IsServer(sptr))
{
sendnotice(sptr, "Message to '%s' not delivered: User does not accept private messages", acptr->name);
return NULL;
} else
return text;
}"
but i will carry out my little task today and see which module it is.

ok with out scarecrow the version is Unreal3.2.7. test.*.com FhiXeOoZE3
with scarecrow loaded it turns to Unreal3.2.7. test.*.com FhiXeOoZEmM3

i know scarecrow.c is a very old script
"ModuleHeader Mod_Header
= {
"m_scarecrow", /* Name of module */
"v0.0.7", /* Version */
"Scarecrow - http://ircdxp.sf.net", /* Short description of module */
"3.2-b8-1",
NULL
};
/*
* CONFIGURATION PART
*/
#define EXP_MIRC_DCC 1
/* [RECOMMENDED] enables protection against the mirc exploit */
#define TRJ_ANATOLY_FYLE_BOUNCE_TEXT 1
/* [OPTIONAL] sends a bounce when a suspicious text line is detected */
#define TRJ_ANATOLY_FYLE_BOUNCE_GLINE 0
/* [DISCOURAGED] sends a gline when a suspicious text line detected */
#define TRJ_ANATOLY_FYLE_EARLY_BOUNCE 1
/* [RECOMMENDED] sends a bounce when a suspicious nickserv register line is detected */
/* This will bounce the Trojan before even letting it to join a single channel */
/* Note: won't work if no nickserv is online, also no notice will be displayed */
/************************/

we always had it in since 3.2.2 days


ok found it as soon as i load scarecrow it turns to Unreal3.2.7. test.*.com FhiXeOoZEmM3

i can't find it on google for any one to download so they can test it
but i can paste the script here or email me i will be happy to email it on or if some one finds a working link
Post Reply