Re: bopm + unreal

Well, in accordance with these same manuals, the scanner instructs the
proxy to connect back to the address set in target_ip, target_port,
and looks for "target_string".  Its looking for the first responce the
target_ip / target_port in question return, hence why setting up the
port banner worked.  The problem is, if i set it to the ircd / port,
it does not respond at all until you authenticate, and at this stage
in the problem, it does not authenticate.


Heres the order of operations:

1:  Client connects,  seen by connregex (works perfectly as shown from
debug mode)
2:  bopm starts proxy check
3:  bopm finds proxy                              (works perfectly)
4:  bopm attempts to use the proxy to connect back to the target_ip /
target_port
     and looks for target_string                 (fails)
5:  if successfull, it assumes there is an open proxy 

i'm running out of ways to make this more clear, but the problem is
not connregex, it picks up the client connects perfectly, the problem
is even if i know 100% the open proxy is open, it does not detect it
as such because there is no port banner for it to detect unless i
setup the inetd port banner.  In which case it detects lovely.  My
question was for a  non kludgy way to get this system working.

On 6/5/05, Christian 'HERZ' Makowski <[email protected]> wrote:
> Nim,
> 
> you should better read the manuals,
> Unreal3.2.3 + BOPM is running _perfect_
> 
> There is no "Portscan Regex" your Target IP and
> Port is your Server who BOPM is connected as
> Scanner.
> 
> Just use the default bopm.conf with connregex
> from satmd with "PROTOCTL HCN" and your BOPM is
> working.
> 
> 
> Regards
> 
> Christian - HERZ - Makowski
> ---------------------------
> Networkadmin insiderZ.DE
> www.insiderZ.de
> 
> 
> Nim wrote:
> 
> >i'm not talking about the client connect regex, i'm talking about the
> >port scan regex, target_ip, target_port, and target_string
> >
> >On 6/4/05, satmd <[email protected]> wrote:
> >
> >
> >>Hi,
> >>
> >>I am running BOPM with UnrealIRCd 3.2.3 with no additional patches whatsoever.
> >>
> >>connregex = "\\*\\*\\* Notice -- Client connecting.*: ([^ ]+)
> >>\\(([^@]+)@([^\\)]+)\\) \\[([0-9\\.]+)\\].*";
> >>
> >>And make sure, you have
> >>perform = "PROTOCTL HCN";
> >>too.
> >>
> >>Please see the sample configuration file for instructions where to place these
> >>lines.
> >>
> >>I guess that's all needed in order to have BOPM check a whole network.
> >>
> >>(To the list: Feel free to add this to the wiki if you can confirm this, I
> >>didn't want to add this if it didn't work for others.)
> >>
> >>Am Samstag 04 Juni 2005 22:47 schrieb Nim:
> >>
> >>
> >>>We are running bopm in conjunction with unrealircd, but having a bit
> >>>of a problem.  We have run the bopm in debuging mode, and it is
> >>>actually picking up the client connect, and initiating a scan, but it
> >>>never detects anything.  We tracked this problem to Unrealircd not
> >>>presenting a Port Banner on connect, so we refered to a document in
> >>>the README stating for IRCu servers, you needed to setup an inetd
> >>>service with a portbanner.  Well, just out of curiosity, did we miss
> >>>something with unreal?  Did anybody else have this problem?  If so how
> >>>did you solve it?
> >>>
> >>>
> >
> >
> >
> >
> 
> 
> 


-- 
Mike Arnold