UnrealIRCd Forums

Hello I have this person that is able to make my network split he PMed me and told me he thought it was funny and that there was nothing we could do about it. He does this at least once a week in the morning time and tries to take over channels and bring them along to his network...Our server restart/die passwords are all random so I'm not sure how's he doing this. He told me there was no way to fix it etc etc... All Help would be great thanks....

[Sun Jul 6 01:36:30 2008] - SQUIT oxygen.ca.us.network.net (Client exited)
[Sun Jul 6 01:38:22 2008] - SERVER oxygen.ca.us.network.net
[Sun Jul 6 01:39:07 2008] - SQUIT oxygen.ca.us.network.net (Client exited)
[Sun Jul 6 01:40:48 2008] - SERVER oxygen.ca.us.network.net
[Sun Jul 6 01:43:29 2008] - SQUIT oxygen.ca.us.network.net (Client exited)
[Sun Jul 6 01:45:10 2008] - SERVER oxygen.ca.us.network.net
[Sun Jul 6 01:45:30 2008] - SQUIT oxygen.ca.us.network.net (Client exited)
[Sun Jul 6 01:47:10 2008] - SERVER oxygen.ca.us.network.net
[Sun Jul 6 01:49:13 2008] - SQUIT oxygen.ca.us.network.net (Client exited)
[Sun Jul 6 01:50:54 2008] - SERVER oxygen.ca.us.network.net
[Sun Jul 6 01:51:19 2008] - SQUIT oxygen.ca.us.network.net (Client exited)
[Sun Jul 6 01:52:59 2008] - SERVER oxygen.ca.us.network.net
[Sun Jul 6 01:53:35 2008] - SQUIT oxygen.ca.us.network.net (Client exited)
[Sun Jul 6 01:55:15 2008] - SERVER oxygen.ca.us.network.net
[Sun Jul 6 01:55:50 2008] - SQUIT oxygen.ca.us.network.net (Client exited)
[Sun Jul 6 01:57:31 2008] - SERVER oxygen.ca.us.network.net
[Sun Jul 6 01:58:27 2008] - SQUIT oxygen.ca.us.network.net (Client exited)
[Sun Jul 6 02:00:07 2008] - SERVER oxygen.ca.us.network.net
[Sun Jul 6 02:03:01 2008] - SQUIT oxygen.ca.us.network.net (Client exited)
[Sun Jul 6 02:04:42 2008] - SERVER oxygen.ca.us.network.net
[Sun Jul 6 02:10:56 2008] - SQUIT oxygen.ca.us.network.net (Client exited)
[Sun Jul 6 02:12:37 2008] - SERVER oxygen.ca.us.network.net
[Sun Jul 6 02:15:40 2008] - SQUIT oxygen.ca.us.network.net (Client exited)
[Sun Jul 6 02:17:20 2008] - SERVER oxygen.ca.us.network.net
[Sun Jul 6 02:17:27 2008] - SQUIT oxygen.ca.us.network.net (Client exited)
[Sun Jul 6 02:19:07 2008] - SERVER oxygen.ca.us.network.net
[Sun Jul 6 02:19:15 2008] - SQUIT oxygen.ca.us.network.net (Client exited)
[Sun Jul 6 02:20:55 2008] - SERVER oxygen.ca.us.network.net
[Sun Jul 6 02:21:19 2008] - SQUIT oxygen.ca.us.network.net (Client exited)
[Sun Jul 6 02:23:00 2008] - SERVER oxygen.ca.us.network.net
[Sun Jul 6 02:27:45 2008] - SQUIT oxygen.ca.us.network.net (Client exited)
[Sun Jul 6 02:29:25 2008] - SERVER oxygen.ca.us.network.net
[Sun Jul 6 02:30:08 2008] - SQUIT oxygen.ca.us.network.net (Client exited)
[Sun Jul 6 02:31:49 2008] - SERVER oxygen.ca.us.network.net
[Sun Jul 6 02:33:21 2008] - SQUIT oxygen.ca.us.network.net (Client exited)
[Sun Jul 6 02:35:01 2008] - SERVER oxygen.ca.us.network.net
[Sun Jul 6 02:35:48 2008] - SQUIT oxygen.ca.us.network.net (Client exited)
[Sun Jul 6 02:37:29 2008] - SERVER oxygen.ca.us.network.net
[Sun Jul 6 02:38:15 2008] - SQUIT oxygen.ca.us.network.net (Client exited)
[Sun Jul 6 02:39:55 2008] - SERVER oxygen.ca.us.network.net
[Sun Jul 6 02:40:24 2008] - SQUIT oxygen.ca.us.network.net (Client exited)
[Sun Jul 6 02:42:05 2008] - SERVER oxygen.ca.us.network.net
[Sun Jul 6 02:42:19 2008] - SQUIT oxygen.ca.us.network.net (Client exited)
[Sun Jul 6 02:43:59 2008] - SERVER oxygen.ca.us.network.net
[Sun Jul 6 02:49:07 2008] - SQUIT oxygen.ca.us.network.net (Client exited)
[Sun Jul 6 02:50:48 2008] - SERVER oxygen.ca.us.network.net
[Sun Jul 6 02:55:42 2008] - SQUIT oxygen.ca.us.network.net (Client exited)
[Sun Jul 6 02:57:22 2008] - SERVER oxygen.ca.us.network.net

Change all your passwords, including shell/ftp passwords too. Also do the same for oper blocks as well.

From what you pasted it looks like he has access to the shell that the server that's SQUIT'ing is on and is simply kill'ing the process. So I would start there if I was you.

Additionally, you really didn't need to paste that much, a few lines followed by "(repeated more)" would have done.

Jobe1986 wrote:Change all your passwords, including shell/ftp passwords too. Also do the same for oper blocks as well.

From what you pasted it looks like he has access to the shell that the server that's SQUIT'ing is on and is simply kill'ing the process. So I would start there if I was you.

Additionally, you really didn't need to paste that much, a few lines followed by "(repeated more)" would have done.

We changed all the oper passwords and the server password is so random. Because the server's never die they reconnect a few mins after....