in unrealdocs ban version is stated like this:
"This makes use of the clients CTCP version reply. Therefore if a client does not send out a CTCP version, the ban will not work."
is there a possibility that normal irc clients, bitchx, mirc, mesias, doesnt
reply a version??
because Id love to ask for the implementation of a ban if the client dont
respond to it,
"This feature is intended to allow you to block malicious scripts."
in fact the current malicious scripts dont respond to that...
the version reply depends on something that makes impossible to kill a
user if he dont respond??somehow ethically I mean...?
saludos
Ban version
The problem you face is a lot of clients allow you to turn off ctcp replys . THen your potentially banning users that have done nothing wrong . Just because a script doesnt ctcp reply doesnt make it hostile .
Yawn. So there's yet another "if the user clicks the button, they're infected" exploit. Why is this news? We already know users are idiots.
-
- Posts: 84
- Joined: Mon Nov 21, 2005 6:15 am
- Location: Cuba
Solutech:
thats why I asked if a normal irc client could not reply a version,
hostile scripts are currently mirc addons, but they dont reply nothing though
the user who has it loaded do reply a version,
I know innocent users could get caught, but I am searching for a solution
and for a way to make the server more secure,
collateral damage is impossible to avoid..
fgeek:
most of users on mi server use mIRC, but still load addons and make
tons of clones, flood, etc... if those clons reply anithing, the task shold be
done..
but in fact they dont... :/
I think the idea of making configurable the option to kill if dont reply a
version, isnt that bad..
thats why I asked if a normal irc client could not reply a version,
hostile scripts are currently mirc addons, but they dont reply nothing though
the user who has it loaded do reply a version,
I know innocent users could get caught, but I am searching for a solution
and for a way to make the server more secure,
collateral damage is impossible to avoid..
fgeek:
most of users on mi server use mIRC, but still load addons and make
tons of clones, flood, etc... if those clons reply anithing, the task shold be
done..
but in fact they dont... :/
I think the idea of making configurable the option to kill if dont reply a
version, isnt that bad..