How to Gline or Kline through services

ApacheAh64D · Post by **ApacheAh64D** » Wed Sep 21, 2005 1:20 pm

Hello all,

I am currently working on a security service for our IRC network.
But I have one problem: I don't know how to let my service Gline or Kline other users.
I tried :Security GLINE *hostmask* already, but it doesn't work. The server tells my service that it doesn't have the permission to do that. Everything else works fine.
Does anyone have an idea how to let my service bot ban hosts?

Thanks in advance,
-Tom

w00t · Post by **w00t** » Wed Sep 21, 2005 1:29 pm

Giving it an oline helps.

ApacheAh64D · Post by **ApacheAh64D** » Wed Sep 21, 2005 1:38 pm

Hello,

thanks for the reply. I set up an o:line for the service that has the right flags. It still isn't able to GLINE or KLINE. It always gets the same reply

481 Security ermission Denied- You do not have the correct IRC operator privileges

I used :Security OPER username password to make it oper up.

Any suggestions?

-Tom

w00t · Post by **w00t** » Wed Sep 21, 2005 2:02 pm

What reply from the server did you get?

Also, make sure the oline you are using for it has can_gline (think that's the right flagname?)

ApacheAh64D · Post by **ApacheAh64D** » Wed Sep 21, 2005 2:13 pm

Nevermind, I found out how.
The flags in the u:line must be:

admin;
can_gkline;
can_setq;

Thanks for pointing me to the right direction

-Tom

Stealth · Post by **Stealth** » Wed Sep 21, 2005 9:36 pm

If the Security Service is connected as a server, you need to use the proper server-to-server TKL commands.

Moogey · Post by **Moogey** » Wed Sep 21, 2005 9:47 pm

You shouldn't need an O:Line for services; what you DO need for services is a link block + a mentioning of the services' name in the U:Line

link services.mysite.net {
...
};

ulines {
...
services.mysite.net;
...
};

of course without the extra triple dots!

or maybe i just misunderstood you

ApacheAh64D · Post by **ApacheAh64D** » Wed Sep 21, 2005 11:01 pm

Hey,

well, that's what I did...

Code: Select all

ulines {
	security.server.org;
};

link security.server.org {
	username *;
	hostname *;
	bind-ip *;
	port 6668;
	hub *;
	password-connect "test2"
	password-receive "test";
	class servers;
};

-Tom

Moogey · Post by **Moogey** » Wed Sep 21, 2005 11:04 pm

I *think* you're supposed to put the uline underneath the link line

This *might* matter.

If it does matter then the uline probably has no effect.

Stealth · Post by **Stealth** » Wed Sep 21, 2005 11:06 pm

It does not matter... And what is it with people who like ignoring my posts?

I said: Use the proper server-to-server TKL command.

I don't know the syntax, but I am sure someone can eventually post that.

ApacheAh64D · Post by **ApacheAh64D** » Wed Sep 21, 2005 11:31 pm

Hello,

sorry stealth, I didn't see your post. My fault.
Now what is a server-to-server TKL command?

-Tom

Post by **Syzop** » Wed Sep 21, 2005 11:58 pm

You are making services, right?
As in: you are connecting as a server, not a regular user.

The format is quite simple, actually.. you probably have seen it already :P. Because when you connect as a server, you get all the *lines via TKL from the server you connected to (if you did not have any glines, just set one, and you'll see).

Although there are no docs, the source is your friend (src/s_kline.c, or in cvs/next3.2.4 in src/modules/m_tkl.c):

Code: Select all

/*
 * m_tkl:
 * HISTORY:
 * This was originall called Timed KLines, but today it's
 * used by various *line types eg: zline, gline, gzline, shun,
 * but also by spamfilter etc...
 * USAGE:
 * This routine is used both internally by the ircd (to
 * for example add local klines, zlines, etc) and over the
 * network (glines, gzlines, spamfilter, etc).
 *           add:      remove:    spamfilter:    spamfilter+TKLEXT  sqline:
 * parv[ 1]: +         -          +/-            +                  +/-
 * parv[ 2]: type      type       type           type               type
 * parv[ 3]: user      user       target         target             hold
 * parv[ 4]: host      host       action         action             host
 * parv[ 5]: setby     removedby  (un)setby      setby              setby
 * parv[ 6]: expire_at            expire_at (0)  expire_at (0)      expire_at
 * parv[ 7]: set_at               set_at         set_at             set_at
 * parv[ 8]: reason               regex          tkl duration       reason
 * parv[ 9]:                                     tkl reason [A]
 * parv[10]:                                     regex
 *
 * [A] tkl reason field must be escaped by caller [eg: use unreal_encodespace()
 *     if m_tkl is called internally].
 *
 */

When we are at it, many commands are local commands and not server command, these commands include GLINE, KLINE, OPER, etc. Many commands do not "check" if the remote server is (incorrectly) requesting the command, and may cause problems ranging from crashes to hard-to-detect memory corruption, so it's not something to just toy around with ;).

As a guideline, the tokens (and thus, commands too) listed in doc/technical/token.txt from CVS are safe, be careful with the rest :P.

w00t · Post by **w00t** » Thu Sep 22, 2005 12:37 am

Of course, if you're connecting as a user, you won't be regarding that

I thought you were meaning a single bot style service, rather than identifying as a service.

Post by **Syzop** » Thu Sep 22, 2005 12:50 am

Could well be, that he is/was unaware that services connect as a server ;).

ApacheAh64D · Post by **ApacheAh64D** » Thu Sep 22, 2005 1:04 am

Hey,

Could well be, that he is/was unaware that services connect as a server .

Well, No. I said

tried :Security GLINE *hostmask* already, but it doesn't work

You don't send commands through the console like this as a normal user..
Thank you though, that looks very interesting. I'm gonna look into that stuff.

And big thanks for the support,

-Tom