Re: Re: RFC: ircd choice vote

Andy Smith wrote:

>On Fri, Aug 05, 2005 at 03:09:31PM -0400, Mark Rutherford wrote:
>  
>
>>>I would set a very low priority on the made up hosts (what I call
>>>host spoofing).  I can really only see it as useful in the sort of
>>>way that freenode use it.
>>>
>>>      
>>>
>>We dont make up hosts rather scramble the ip address if the user
>>did not resolve, or prefix their hostmask if it did resolve with a
>>hash of sorts that will remain the same across connects, to avoid
>>someone getting banned from a channel and then reconnecting to
>>simply get another one. a lot of implementations where I have seen
>>the NETWORKNAME-NUMBER.rest.of.host usually assign a new number
>>and this is easily used for ban evasion.  (ive seen it exploited
>>on poorly designed implementations)
>>    
>>
>
>So can every server independently construct the masked host from the
>hostname/ip?
>
>Do you use a secret key on every server to keep others from doing
>the translation, or is it something that people could figure out
>from the code?
>
>  
>
there are 3 keys used, they are ascii and can be 1 to 128 characters. (I
think, gotta look at the code)
The issue with that is the keys need to be provided to the server admin
and all servers need the same keys.
I have some notes, and plans to impement some method to update the keys
without providing keys to server
admins and waiting for them to input the keys and rehash it.

Its really, at this point a theory but I cant see it being too hard.
services should have a method of sending the keys to the server
the issue there is writing them to the config, that I dont know about.

thoughts? :)

>>Well, depending on what you guys decide I will stay tuned. if you want 
>>to go that route.
>>My plan would be to snatch the latest Bahamut (1.8.3) and pull it apart.
>>The reason I would not pick CVS is because thats an ongoing project.
>>(there are a bunch of known issues in cvs)
>>    
>>
>
>So what's your thoughts David?  Are you happy to see this option
>added onto the vote?
>
>  
>
>>Are there any others that would step up to the plate and get the job 
>>done... other than us?
>>I know Blitzed has got to have bunches of C geeks around :)
>>    
>>
>
>Not any that have a lot of time for this project I think, or they
>would have done it already, as we've been talking about this for
>over a year.
>
>I can certainly help a bit and no doubt a few others can as well.  I
>don't have a problem with you being in charge of it as long as
>you're listening to what people want. :)
>  
>
Well, lets make a list. :)

>------------------------------------------------------------------------
>
>_______________________________________________
>public mailing list
>public-Hb7ITwsGSD4lroQnaJEqWdi2O/[email protected]
>http://lists.blitzed.org/listinfo/public
>  
>