Re: hostmangling in new ircd

Well, I have poured over the register_user() and related functions
and I had a list of concerns/questions from users such as
hosts being seen via watch, ect.

It cant happen. when the user is 'cloaked' if you will, its done before
registration is completed.
The connecting client has barely passed drone/ban checks.

Then there was the question about ban evasion and being able to
remove the masking and join a channel that you were banned from.
That can no longer happen as the masked host is generated on connect
and it is with you for life.
That mask is checked for a matching ban so evasion is going to be pretty
hard.
Best get a new host or something, basically.

There was an issue that I was made aware of that yout original host was
still visible
in some contexts. I found that issue and resolved it.

So, what else can you guys find and break?

Good luck and happy hunting :)


Andy Smith wrote:

>On Tue, Aug 23, 2005 at 04:19:09PM -0700, Philipp Kern wrote:
>  
>
>>On Aug 23, 2005, at 06:00 , Andy Smith wrote:
>>    
>>
>>>On Tue, Aug 23, 2005 at 10:41:34PM +1000, Andryan Gunawan wrote:
>>>      
>>>
>>>>Can't we remove hostmask from notify report?
>>>>        
>>>>
>>>I'd rather have hostmangling and then not have to worry about it..
>>>      
>>>
>>What about server password to NickServ passing, and early  
>>hostmasking? ;)
>>    
>>
>
>|  client connects to network with server password
>|
>t  server converts password to SIDENTIFY command sent over net to
>i  services
>i
>m  client registers to irc network
>e
>|  services sends messages back to the network regarding whether the
>|  SIDENTIFY was successful or not
>v
>  
>
>------------------------------------------------------------------------
>
>_______________________________________________
>public mailing list
>public-Hb7ITwsGSD4lroQnaJEqWdi2O/[email protected]
>http://lists.blitzed.org/listinfo/public
>  
>