Message - Unauthorized connection from Nick[IP]

[LandRocket]

Hi there,

We are currently running Unreal 3.2.3 and everything was linked and working fine (it's been fine ever since 3.2.3 was release) and AFAIK none of the configs have been changed.

However, for the past day I am getting the message (quite regularly) of:

Notice -- Unauthorized connection from anIRCnick[IPAddress]

Anybody tell me what situation causes this message to appear, and if there's something wrong that I need to rectify?

Many thanks in advance

LR

[Syzop]

If I'm not mistaken, this means the client does not match any of your allow { } blocks and is thus not allowed in.
Basically, this happens if you don't have an allow block for *@*
This could be "normal decision" by the admin though (eg: rejecting all clients whos hostname does not resolve or rejecting all clients which do not have ident enabled).. But if that wasn't your intention, then just add a *@* block (in both the hostname and ip fields ;p)

[LandRocket]

I did look over the configs again, and indeed they hadn't changed....

allow block was already set for *@*, however, checking ident seemed to be taking a lot longer...

I removed "set options identd-check;" and the messages have stopped so I can only assume that port-blocking/firewalling is now taking place at the shell provider that previously wasn't

[aquanight]

... Who the heck blocks 113 outgoing?

Could be just as likely the remote clients are having identd problems.

[LandRocket]

Nope, got up this morning and another message was there.

The configs are definately the same as always - so this problem has only appeared after what, a good year of using Unreal and it's not because I've done an upgrade....

I don't believe it's down to the IRCd itself, but I'd love to know what the heck could cause it.... I have access to a spare IP and a BSD box with pf so might try setting up some dumbass pf rules and seeing if I can replicate elsewhere.. I'm still sure it's down to the shell provider...

[Syzop]

It IS the ircd self, and if you have a proper working *@* block then it has nothing to do with ident working or not either (nor anything else firewall related)...

Could you paste your allow blocks you have in unrealircd.conf? And also paste the output of '/stats I' on IRC.

[LandRocket]

OK, I finally found out what happened....

/stats I gives:
I *@* * *@* 3 clients irc.removedforforum.com 6667

unrealircd.conf reads:

class clients
{
pingfreq 90;
maxclients 500;
sendq 100000;
recvq 8000;
};

allow {
ip *@*;
hostname *@*;
class clients;
maxperip 3;
};

(no other allow blocks in unrealircd.conf)

And the answer was:

in the config block I had:

set {
dns {
nameserver x.x.x.x; (IP removed for forum)

It turned out the provider had recently changed nameservers... updating this from info from resolv.conf has solved it.

Many thanks to those who helped

LR

[Syzop]

That should work fine.

Btw, set::dns::* is completely ignored ;p.