UnrealIRCd Forums

Hi all,

Having googled and othewise searched, including these forums etc. I need a little advice..

this may sound a silly question, but is there any way that /stats c can be removed completely or disallowed ?

The reason for asking is that I run hidden hub so ip address for connect only with a name that does not exist and has no dns to it., and although I trust current opers (all stats are oper only) if we link a new server, I do not want them finding the ip of the hub server.

I am assuming that making /stats c unavailable to all including opers that will assist in keeping the details more secure.

Any help of suggestions (of a polite nature ) will be more than welcome.

Thanks for your assistance

regards
barry.

No, it can't be disabled, but honestly; if you don't trust an oper, then don't let them oper. Run a new server in NOOP mode until you know and trust all their staff.

Uhm and... don't they need to know the hub? How are they supposed to link their server to your network if they don't know the hub?

I wondered that too :p

One would think that he'd have a "public" hub and the hub that his servers and services connected to.


Or something.

If someone has access to link a server to your network, they can get this information. /stats C is one of many ways that it can be found. If you don't trust them, don't let them link. Blocking /stats C just provides a false sense of security.

Thanks guys,

any new servers link to one of the public hubs, what I did not was new ops to be able to do a /stats c and find the C line of the main hidden hub.

but since it can't be done.. guess I'll have to think of another way of working this one..

but thanks for your replies and comments.

regards

barry.

Use services to place the newly linked servers in NOOP mode.

Stats C is not the only way to get the IP of the server!!

/trace Publichub.*

/trace Services.*


would show IP's as well. I suggest trying the NOOP as mentioned until you can build trust.

once again, thanks guys.

that is what I shall have to do, almost everything else is locked down, so that using /trace Services.* won't show the ip, although /trae hub.* will.. so will have to use NOOP.

thank you for all your help and advice. it is really appreciated.

regards,

barry.