Re: IRC Bouncers

On Thursday 13 May 2004 06:53 pm, Andy Smith wrote:
> On Thu, May 13, 2004 at 06:51:14PM -0400, Jeff Stuart wrote:
> > On Thursday 13 May 2004 07:10 pm, Alex R. wrote:
> > > Each connection from a BNC is like a connection from another valid
> > > host. BNCes do not run on any specific ports or whatever. The only way
> > > that I see that you would be able to detect them would be to scan every
> > > single port on the machine and have a client try to detect if its
> > > psybnc/muh/etc. That is not feasible though and would cause huge
> > > amounts of traffic.
> >
> > Ok, question.. what if I scanned the port that connected to me?
>
> It will have nothing bound to it and you will get connection
> refused..
>
> You don't even have any guarantee that the bouncer concerned is
> listening on the same IP that you receive the connection from, since
> bouncers only need to listen on one IP, but can source outgoing
> traffic from any.  (so can proxies, or anything else of course)

UGH.. that's what I was afraid of... :(  there has GOT to be a way to block 
these folks... damn it..

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQBAo/6WCjBq5yGznksRAjCNAJ0VbWSM/hC9BWT7sR+Tk7hb96s0VACgiMtV
J1eCj/8lcPp7zFbadPQMmH4=
=K/+c
-----END PGP SIGNATURE-----