Re: some strange proxy results

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

surprisingly enough this very issue was what bought me to this list a
year ago, and still nothing has been done because they don't consider it
a bug. However, i'm still being glined and klined from efnet for having
an open proxy when im a false positive, and you'd think efnet would get
their configuration RIGHT. ongeboren is right in saying it should NOT
just assume an open proxy without checking the connection to the
target_ip beforehand!

Thanks,
Craig Edwards

ongeboren wrote:
> OK,
> 
> I try to answer everybody... You suggest I should
> change the target string.. This must not be an issue!
> BOPM tries to use the host it connects to to proxy the
> connection back to the server on which the bopm is
> /oper-ed for instance. So, any target_string would do
> the thing. The problem is that if the proxy sends this
> target string through the socket, before proxying the
> connection, bopm will think immediately it is a
> working proxy, before even checking if it is possible
> to connect to the target_ip. This is the true issue.
> BOPM identifies a proxy as such by verifying the
> target_string, before connecting to the target_ip.
> This is how I see it and why I bother writing to the
> list.
> 
> Regards,
> ongeboren
> 
> p.s. Please, please, please, why every time I write to
> this list people try to prove me an idiot that does
> not read the fine manual or compiled a bopm for the
> first time last night?
> 
> p.s.2. I know it is unlikely for an ircd to listen on
> port 1080, but whatever.. this is the admin's
> decision, the point is bopm should not mark the host
> as proxy, as it runs a totally different daemon on
> this port!
> 
> 
> 
> 
> --- Craig Edwards <[email protected]> wrote:
> 
> 
> We have the same problem.
> 
> The thing is, all the large nets have not changed
> their target strings
> either, so whenever this box connects to a large
> network (say for
> example efnet) it gets klined...
> 
> 
> Craig Edwards
> 
> Philipp Kern wrote:
> 
>>On 16 Mar 2005, at 01:44, ongeboren wrote:
> 
> 
>>>One of the administrators on my network had port
> 
> 1080
> 
>>>as listen port for his ircd.. the centralized
> 
> bopm
> 
>>>scanned the host of the ircd, as there are
> 
> several
> 
>>>bots running from this mashine and reported it as
> 
> a
> 
>>>proxy. Is this a normal behaviour and if such,
>>>shouldn't it be changed somehow?
> 
> 
>>Modify the target string BOPM looks for... seems
> 
> like a misconfiguration
> 
>>to me.
> 
>>Regards,
>>Philipp Kern
>>Blitzed OPM
> 
> 
> 
> --
> WinBot IRC client developer: http://www.winbot.co.uk
> ChatSpike - The users network:
> http://www.chatspike.net
> InspIRCd - Modular IRC server:
> http://www.inspircd.org
> Online RPG Developer: http://www.ssod.org
> --

> __________________________________ 
> Do you Yahoo!? 
> Yahoo! Mail - Easier than ever with enhanced search. Learn more. 
> http://info.mail.yahoo.com/mail_250



- --
WinBot IRC client developer: http://www.winbot.co.uk
ChatSpike - The users network: http://www.chatspike.net
InspIRCd - Modular IRC server: http://www.inspircd.org
Online RPG Developer: http://www.ssod.org
- --
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (MingW32)

iD8DBQFCOD0w0k42Wxli/BARAkYbAJ9yeZEfvttfSOsLxYgSCOC2eXP5RgCfeyQ0
e2ZHOnqfAI9nBhma4XqwiVM=
=c6eu
-----END PGP SIGNATURE-----