UnrealIRCd Forums

Posted: **Fri Jan 07, 2005 4:53 pm**

i have in the .conf file setted up my host en ident to my own server correctly

but there is a user still capable to log in.. he says he has a hack for it because unreal is buggy but i searched my conf file many times and i dont find a link to him so =/ how is this possible?

RandyJC

i have it like this:

Code: Select all

oper RandyJC {
        class           clients;
        from {
                userhost RandyJC@*.cb3rob.net;
        };
        password "******";
        flags
        {
                netadmin;
                can_zline;
                can_gzline;
                can_gkline;
                global;
        };
};

Posted: **Fri Jan 07, 2005 5:54 pm**

Don't give him the password?

There shouldn't be such huge bugs in the current version, I think.

You should follow the Security Checklist in the Documentation:
http://www.vulnscan.org/UnrealIRCd/unre ... l#security

Posted: **Fri Jan 07, 2005 6:37 pm**

And just emphasizing a point made in the security checklist - always encrypt your passwords.

Posted: **Fri Jan 07, 2005 9:38 pm**

I think he was referring to the from { userhost }; part. Unfortunatly, I personally know Unreal checks the userhost and works.

The only way to figure out what is wrong is to either get one of the coders to go over all the code and see if they can find any "exploits", or get him to tell you what he is doing.

Posted: **Fri Jan 07, 2005 11:45 pm**

ok i'm gonna check some things out then..

UnrealIRCd Forums

oper mode error

oper mode error