UnrealIRCd Forums

need help some one seen this on http://www.wrongway.org/?unrealmodules reading :
"ADVISORY: How to tell if your Unrealircd network is spying on you:
- Ircops: If you type /modules and you see:
*** irc.somenet.net Hooks: 3 6 7 13 15 16 17 18
If the hooks contain the number 17, then private messages are being snooped. If it contains the number 18, then channel messages are being snooped.
- All users: If you type /version and you see:
Unreal3.2.7. irc.somenet.net FinWXeOoZEmM3 [*=2309]"
but further down it does say this
"Note: Some modules may hook private messages or channel messages but may still not be explicitly spying on you, for example the module may be preventing a specific type of spam or something. If you see these hooks in place, you should consult the network administrator as to their specific purpose, and judge for yourself."
##############################################################
WE run spamfilter which checks pm's and dcc
because our version reads (Unreal3.2.7. ***.***.com FinXeOoZEmM3 [*=2309] as well as the hooks 17 and 18,

now people are saying we spy on people pm's , when we don't at all we have nothing loaded to spy.
well will never do and never will.
can some one put this right.
i know its all Self explainer above, i can't see why people get mixed up.

one of your third party modules is causing this - many of the default spamfilters which ship with unrealircd affect privmsgs, so it's not an issue with spamfilters.

this is what we got loaded.
loadmodule "src/modules/commands.so";
loadmodule "src/modules/cloak.so";
loadmodule "src/modules/hideserver.so";
loadmodule "src/modules/netadmins.so";
loadmodule "src/modules/antirandom.so";
loadmodule "src/modules/m_scarecrow.so";
loadmodule "src/modules/m_blocknonalpha.so";
loadmodule "src/modules/m_dnsbl.so";
###################################
include "help.conf";
include "badwords.channel.conf";
include "badwords.message.conf";
include "badwords.quit.conf";
include "spamfilter.conf";
include "dccallow.conf";
##################################
spamfilter:
spamfilter {
regex "^([A-Z][a-z]{4,9})[0-9]{0,6}!\1[0-9]{2,6}@.*:\1[0-9]{1,6}$";
target { private; channel; };
action gline;
reason "Infected by Spam-Sex-Botz";

i can't see where our three party modules will cause the nm thats states we monitor pm's and channels,
or read people (users) pm's as i said before we never did and never will.
the extra m_ are old anti-virus/trojan block/ the other are botz block/and blacklist
we work very hard to protect our network and its users,
then we get labled "SPY ON USERS" network
gee whats this world coming too?

After downloading and reviewing source for as many of your modules as I could, my guess is that its the privdeaf module, blocking private messages. My networks run spamfilter, and those hooks nor characters show in module or version.

hi thank's for your input,we don't have "privdeaf module" = thats a module to set channels to +Mm so no pm's can be sent in that channel, same as "m_blocknonalpha" by setting the channel to +y no number nicks can entre without be registered.
the only extra modules loaded are listed above.
but what i will do today is rebuild unrealircd with any of the extra modules,until the hooks and characters show

in the scarecrow module i did find hooks to channel and users messages,
"bcopy(modinfo,&ADCMod,modinfo->size);
UserMsg = HookAddPCharEx(ADCMod.handle, HOOKTYPE_USERMSG, adc_usermsg);
ChanMsg = HookAddPCharEx(ADCMod.handle, HOOKTYPE_CHANMSG, adc_chanmsg);
return MOD_SUCCESS;
"
but i did download privdeaf module only to find the same hook,
CheckMsg = HookAddPCharEx(modinfo->handle, HOOKTYPE_USERMSG, privdeaf_checkmsg);
DLLFUNC char *privdeaf_checkmsg(aClient *cptr, aClient *sptr, aClient *acptr, char *text, int notice)
{
if ((acptr->umodes & UMODE_PRIVDEAF) && !IsAnOper(sptr) && !IsULine(sptr) && !IsServer(sptr))
{
sendnotice(sptr, "Message to '%s' not delivered: User does not accept private messages", acptr->name);
return NULL;
} else
return text;
}"
but i will carry out my little task today and see which module it is.

ok with out scarecrow the version is Unreal3.2.7. test.*.com FhiXeOoZE3
with scarecrow loaded it turns to Unreal3.2.7. test.*.com FhiXeOoZEmM3

i know scarecrow.c is a very old script
"ModuleHeader Mod_Header
= {
"m_scarecrow", /* Name of module */
"v0.0.7", /* Version */
"Scarecrow - http://ircdxp.sf.net", /* Short description of module */
"3.2-b8-1",
NULL
};
/*
* CONFIGURATION PART
*/
#define EXP_MIRC_DCC 1
/* [RECOMMENDED] enables protection against the mirc exploit */
#define TRJ_ANATOLY_FYLE_BOUNCE_TEXT 1
/* [OPTIONAL] sends a bounce when a suspicious text line is detected */
#define TRJ_ANATOLY_FYLE_BOUNCE_GLINE 0
/* [DISCOURAGED] sends a gline when a suspicious text line detected */
#define TRJ_ANATOLY_FYLE_EARLY_BOUNCE 1
/* [RECOMMENDED] sends a bounce when a suspicious nickserv register line is detected */
/* This will bounce the Trojan before even letting it to join a single channel */
/* Note: won't work if no nickserv is online, also no notice will be displayed */
/************************/

we always had it in since 3.2.2 days


ok found it as soon as i load scarecrow it turns to Unreal3.2.7. test.*.com FhiXeOoZEmM3

i can't find it on google for any one to download so they can test it
but i can paste the script here or email me i will be happy to email it on or if some one finds a working link