Page 1 of 1
Security Threats - Through Admins and servers, links etc
Posted: Tue Nov 15, 2005 4:57 am
by RhiN0
Alright i want ot make my own irc server, i got a temp one, but if i want to make a real one ill have to get it on a good computer and fast internet, i need to know if there are threats that links can produce (i.e thru editing of the .conf file to add their own admins. Now i really dont know the difference of Hub And Leaf - from what ive tried to put together, Hub is like the central server - then leafs connect to the central server, and players can be connected to the hub and the leaf - but im guessing Hub has more power?
basically i want to know the possible risks if i decide to host something i worked on somewhere else
Posted: Tue Nov 15, 2005 7:05 am
by w00t
Not quite sure what you're meaning.. if you mean other servers- if they add their own o:lines (as they can) - they can do damage. This is why you get to know and trust someone (as an IRC admin, not as a person) before linking to them.
If you mean hosting your server externally, most people do that.
Posted: Tue Nov 15, 2005 9:27 am
by RhiN0
so all servers (both leaves and hubs) can produce the same secruity risks thru their ability to make o lines?
Posted: Tue Nov 15, 2005 1:57 pm
by Solutech
yup anyone who can add olines can cause you grief . As W00t says make sure you trust whoever you give olines to .
Posted: Tue Nov 15, 2005 3:22 pm
by Matridom
I learned the hardway (when setting up my own server years ago) that there is a "quarantine" option for the link block, it disables IRCop's from that server from having the same right on your server. meaning, he can't kill someone on your server from his. However, it causes issues with services.
Otherwise i would agree with everyone, know and trust the people you deal with.
Posted: Tue Nov 15, 2005 6:09 pm
by aquanight
quarantine doesn't work :P
Posted: Tue Nov 15, 2005 6:22 pm
by Matridom
aquanight wrote:quarantine doesn't work

it did back in 3.1.12 beta

Posted: Tue Nov 15, 2005 11:00 pm
by w00t
Actually, I looked at this the other day, and I'm not too sure why it wouldn't be working.. unless it's some bizarre conf voodoo. The MODE code checks for quarantine properly and reverses changes (or should) ok...
Posted: Tue Nov 15, 2005 11:30 pm
by Jason
Is there some minor name difference in the checked variable?