map/links Restriction

These are old archives. They are kept for historic purposes only.
Post Reply
compengi
Posts: 4
Joined: Fri Nov 07, 2008 10:11 am

map/links Restriction

Post by compengi » Wed Nov 19, 2008 8:51 pm

Is there a way to restricit /map to opers only (removing sensitive servers from the list)? If yes, how and if it's also possible to edit /links list also under the same aim?

Casper
Posts: 338
Joined: Sun Jul 08, 2007 7:44 am
Location: The Netherlands

Re: map/links Restriction

Post by Casper » Wed Nov 19, 2008 9:01 pm

Taken from docs:
set::options::flat-map;
If this is present, all servers will appear as directly linked in /map and /links, thus you can no longer see which server is linked to which. This is a little help against (D)DoS attacks because evil people now no longer can easily see the 'weak points'.
That's the best you can do, because later on when you read the documentation:
MAP / LINKS
Several people have asked if there was some way to disable /map or /links. Our position on this is that it's silly and gives a false sense of security, let me explain... Hiding servers that are actually used by users is useless since they already know about your servers (how else could they get on them in the first place?). For any servers that you don't want users on, see section 8.6.
Now what CAN you do? Since 3.2.1 there's an option called 'flat map' (set::options::flat-map), this will make all servers appear as 'directly linked' in /map and /links, thus normal users can no longer see which server is linked to which... This can be a nice additional layer of protection because this way a kiddie cannot easily spot any 'weak points' with /map or /links. So, use of this is recommended. Note that this is not foolproof... If any split happends someone can still see which server was linked to which, and this is also true for some other things as well.
I guess you're stuck here.
Ex Network-Administrator

zEkE
Posts: 111
Joined: Wed Apr 14, 2004 9:30 am
Location: Harrisonburg, VA
Contact:

Re: map/links Restriction

Post by zEkE » Wed Nov 19, 2008 10:39 pm

In addition, if you have sensitive servers (such as hubs, etc) they should probably not be user-connectable anyway, thus DNS doesn't need to resolve and only the servers (and admins) need to know the IP addresses of such. U:Lines are typically hidden from the map for non-opered users, but again there shouldn't be any DNS for these and noone needs to know the IP addresses for them.

Code: Select all

set::options::hide-ulines;
If this is present, Ulined server will be hidden in a /links requested by non-opers.
NetAdmin - irc.unitedchristianchat.net
http://www2.i-al.net/ircbots/

[dx]
Posts: 107
Joined: Sat Jun 16, 2007 1:03 am

Re: map/links Restriction

Post by [dx] » Thu Nov 20, 2008 12:30 am

Or

http://www.angrywolf.org/hideserver.tar.gz

Hides specific servers from the output of /map and /links or restricts the usage of both commands to IRCops only.

Post Reply