Page 1 of 1
Banning certain client-versions?
Posted: Sat May 08, 2004 12:54 pm
by janosch
Hello!
Is it possible to ban _all_ client-connections except the ones from a special client software!? In my case I want to allow connections from a Java-Webchat-Applet to my server, only!
Thanks for hints!
Posted: Sat May 08, 2004 1:15 pm
by Dukat
Just use a Password (if you Java-Applet is supporting this).
"Normal" Clients still could connect, though, if they know the password...
http://www.vulnscan.org/UnrealIRCd/unre ... allowblock
Unreal's Ban Version Block won't work, because if a Client isn't sending a CTCP Version, the Ban will not work.
Maybe it could be done in a module...
Or you could possibly use Services... if you have anope, you might try the ircd_ctcpversion module (I haven't tried that one... maybe it does something completely different *g*)
http://modules.anope.org/modules.php?op=details&id=27
I think the Passworded Allow Block is the best method...

Posted: Sat May 08, 2004 1:17 pm
by katsklaw
and use a non-standard port such as 4500.
Posted: Sat May 08, 2004 1:25 pm
by Dukat
Security by obscurity?
Oh well...
It could add a bit of additional security, right...
I think the main problem is, that you have to expose the Server Address, Port and Password in plain text in the HTML-Document the Applet is loaded from...

Re: Banning certain client-versions?
Posted: Sat May 08, 2004 3:20 pm
by _MiF_
janosch wrote:Hello!
Is it possible to ban _all_ client-connections except the ones from a special client software!? In my case I want to allow connections from a Java-Webchat-Applet to my server, only!
Thanks for hints!
If it's Java Applet - that is no problem, coz your clients will have same ip address, or host prefix. Ban all, and make an exception for users that using your applet..

Re: Banning certain client-versions?
Posted: Sat May 08, 2004 3:25 pm
by Dukat
_MiF_ wrote:If it's Java Applet - that is no problem, coz your clients will have same ip address, or host prefix. Ban all, and make an exception for users that using your applet..

If it's a Java Applet, they WON'T have the same IP Address or same host prefix... They will have their REAL IP Address.
You may could set them all the same ident - but that wouldn't be more secure than any of the other solutions mentioned... oh well

Re: Banning certain client-versions?
Posted: Sat May 08, 2004 4:11 pm
by _MiF_
Dukat wrote:_MiF_ wrote:If it's Java Applet - that is no problem, coz your clients will have same ip address, or host prefix. Ban all, and make an exception for users that using your applet..

If it's a Java Applet, they WON'T have the same IP Address or same host prefix... They will have their REAL IP Address.
You may could set them all the same ident - but that wouldn't be more secure than any of the other solutions mentioned... oh well

Most JAPPs have option to change or add prefix to user's host. So it can be very actual for this situation.
Posted: Sat May 08, 2004 5:04 pm
by Dukat
I think we mean the same
But it is obvious that the Users won't have the same IP Address, just because a Java Applet is nothing different than any other IRC Client (kinda *g*).
Posted: Sat May 08, 2004 5:16 pm
by _MiF_
Check the options... By myself i wrote some gate applets =)