cgi:irc host spoofing module?

These are old archives. They are kept for historic purposes only.
Post Reply
Hal9000
Posts: 6
Joined: Mon Mar 29, 2004 12:47 am
Contact:

cgi:irc host spoofing module?

Post by Hal9000 » Thu Apr 29, 2004 6:52 am

Hello!
I would like to see if it's possible to add some cgi:irc support in unreal, or via a module or something.

Let me first explain the issue: cgi:irc is a web chat which runs on cgi/perl, so the socket is made by the web server it's running on, resulting that the host isn't the real host the user has, and that all users of cgi:irc have the same host (in my case, localhost).

Now to my "unclean" solution, with which I'm running the thing till now: there's an eggdrop with op powers that watches all connections from localhost, and thanks to a tcl script it then changes the hostname (/chghost) of the user using the username (which is the hex-encoded IP), then changes username and realname based on the nick. It's also able to decode those encoded ip's on request.

But there are still limitations which result in problems: glines, for example, won't work. If I do a gline i'm killing localhost (i put an exception now).
Reading at the cgi:irc page I saw that there is a patch for bahamut ircd which, if I'm not mistaken, makes the stuff work like this:

The cgi client connects to the ircd supplying the real host as password. The ircd understands that it's the cgi client connecting based on the host (localhost) and spoofs the host using the one he got as password.
This is used on the blitzed network for example.

I think having a feature like this in Unreal would be a nice thing for many people, as cgi:irc is a nice alternative to offer to users which don't have or don't like java.

Unfortunatelly I'm no coder, so my question is if there is any volunteer to write a module for such a thing, if it's doable etc. and of course what do you think about all this.

Ok I think that's it ;)
Keep up the good work!

Hal9000

Dukat
Posts: 1083
Joined: Tue Mar 16, 2004 5:44 pm
Location: Switzerland

Post by Dukat » Thu Apr 29, 2004 9:15 am

I think what you need is AngryWolf's cgiirc-Module...

http://www.angrywolf.org/

ATM it's still marked "experimental"... :(


I personally prefer Java-Applets... it uses ressources on the client and not on the server :wink:

Hal9000
Posts: 6
Joined: Mon Mar 29, 2004 12:47 am
Contact:

Post by Hal9000 » Thu Apr 29, 2004 4:56 pm

thanks dude!!!! :D

i tried the module and patched cgi:irc, right now the module is running on a test ircd to see if it's reliable.
seems working without problems till now, wonderful!

on the site it says it needs to be enstalled on each ircd but it seems to work even if installed just on the ircd where cgi:irc connects to.

i hope the module proves out to be stable, because it will be installed on the main hub ;)

thanks again for the link, you made my day

Hal9000

AngryWolf
Posts: 554
Joined: Sat Mar 06, 2004 10:53 am
Location: Hungary
Contact:

Post by AngryWolf » Thu Apr 29, 2004 9:10 pm

on the site it says it needs to be enstalled on each ircd but it seems to work even if installed just on the ircd where cgi:irc connects to.
Oops, sorry, that was a mistake. It has been corrected now. :)

Post Reply