|
|
| Author |
Message |
Robert-E-Lee Idler

Joined: 22 Nov 2004 Posts: 287 Location: in a room with your mum, teaching her how to do certain things....
|
Posted: Nov 15, 2005 1:07pm Post subject: |
|
|
yeah, after looking over all the code and such, the other guys are right, service based permission stripping would be the best way to go.
and before you comment about how it'd strip everyone over local, you can still comfortably have network wide permissions by linking in the module to strip permissions with something like the module which allows services controlled o-lines. it's easier than re-coding unreal, cuz, to reliably run an unreal recode, you'd have to alter the linking protocol to prevent non recoded servers from linking, which would be a major pain in the ass, not to mention guaranteed to invite people to find ways round it. ( and they would, trust me ) the only alternative to that issue would be to have services squit and jupe anyone linking in without the modified version, but that's just wasted code when you can do it without modifying unreal.
anywhoo, what i was meaning to say is, i'm ditching trying to modify unreal, and i'm moving onto writing anope modules to accomplish it. more updates as/when i write teh code. |
|
| Back to top |
|
 |
braindigitalis Idler

Joined: 22 Sep 2003 Posts: 443 Location: IRC
|
Posted: Nov 17, 2005 10:57am Post subject: |
|
|
| katsklaw wrote: | | magpie wrote: | I can see a big mess coming of it.  |
Hence, EFnet like Jason said  |
oh the irony, one big mess caused the creation of yet another big mess
Onto the subject at hand:
An open linking server has one major use: Development.
For inspircd we will eventually have an open-link test network where any inspircd server can link into it, nobody on the said network will have any expectations of:
1) Privacy
2) Stability
3) Reliability
Basically everyone will be free to rape loot and pillage the network, but there won't be anything worth 'taking' there anyway. Nobody with an ounce of common sense would put production servers on it -- that's the idea, as its for development!  |
|
| Back to top |
|
 |
EviL_SmUrF Lurker

Joined: 23 Feb 2004 Posts: 219
|
Posted: Nov 18, 2005 4:33pm Post subject: |
|
|
Yeah, a service package would be great for it. Only problem is what happens if someone links and tries to introduce their own services to the network, even with or without the same services names (IE, NickServ, ChanServ, etc)
is there a way to fix/prevent that problem as well? |
|
| Back to top |
|
 |
braindigitalis Idler

Joined: 22 Sep 2003 Posts: 443 Location: IRC
|
Posted: Nov 21, 2005 3:26am Post subject: |
|
|
| EviL_SmUrF wrote: | Yeah, a service package would be great for it. Only problem is what happens if someone links and tries to introduce their own services to the network, even with or without the same services names (IE, NickServ, ChanServ, etc)
is there a way to fix/prevent that problem as well? |
if none of the other services have u-lines for the new services server that someone tries to introduce, the services server simply will not work and its modes will be bounced. |
|
| Back to top |
|
 |
Bob-Lee Guest
|
Posted: Nov 23, 2005 12:16pm Post subject: |
|
|
k, excuse the non logged in reply, but, college, work, short on time.
anywhoo, yes, as brain said, if it's not u-lined then it can't set modes, but if you want to completely prevent it from even being linked, i'll see what i can do ( assuming i don't have to mess with linking protocols, that's too much hassle) ( Robert-E-Lee) |
|
| Back to top |
|
 |
HeeroYuy none

Joined: 06 Aug 2005 Posts: 14
|
Posted: Nov 27, 2005 1:20pm Post subject: |
|
|
Hardcode the U:line into the core, and make your hub operators have an authentication to the services server. This services service can do akills etc. You might consider anope and strip down lots of the features, simply levels, etc. Also-add a kill command, etc, that would allow you to add IRCops to a "global operator" list as you trusted them and worked with them. Add a services only mode for global operator, doesn't effect anything, but perhaps a channel mode or something for a services monitoring room or something
[/ideas]
EDIT:
The problem with using services to strip permission would be that if someone modified the core server code (which would be easy if you're deploying it with SRC so they can compile it for their platform) and didn't U:line your server the permission stripping would suddenly fail and-GASP-oh noes, they're an unauthorized global operator !1!1!!1111one.
Now-if you modified the IRCds themself, especially the hub, so it ignores global kills and doesn't propogate them, what the leafs do to their IRCds will just be worthless, incompatible, and useless. |
|
| Back to top |
|
 |
EviL_SmUrF Lurker

Joined: 23 Feb 2004 Posts: 219
|
Posted: Nov 28, 2005 8:34pm Post subject: |
|
|
| thats what i wanted to do was modify the hub so that it didnt send ANY global oper commands to the other leafs. wasnt quite sure how to do it though =S |
|
| Back to top |
|
 |
]Daniel Idler

Joined: 05 Jan 2006 Posts: 316 Location: Boise, ID
|
Posted: Jan 06, 2006 5:00am Post subject: |
|
|
| Well, first of ALL who needs services, second of all, use an ircd that does NOT have global powers, or easier to strip like IRCu. Sounds alot simplier then using unreal which is KNOWN to be over abusive on commands. |
|
| Back to top |
|
 |
Aven Idler

Joined: 05 Aug 2005 Posts: 393
|
Posted: Jan 06, 2006 8:08pm Post subject: |
|
|
| ]Daniel wrote: | | Well, first of ALL who needs services, second of all, use an ircd that does NOT have global powers, or easier to strip like IRCu. Sounds alot simplier then using unreal which is KNOWN to be over abusive on commands. |
Open link network + unrealircd = oper abusers
Probably ircds like ratbox should be used... barely any features but it is very secure and stable, which would be a good idea for an open-link network. |
|
| Back to top |
|
 |
YaNuSH Newbie

Joined: 27 Sep 2005 Posts: 81 Location: New Zealand
|
Posted: Jan 06, 2006 8:12pm Post subject: |
|
|
| heh knowing what to do within unreal, for example recoding it to what you want and get others to download the recoded version for the open network, look outside the square not inside it. |
|
| Back to top |
|
 |
EviL_SmUrF Lurker

Joined: 23 Feb 2004 Posts: 219
|
Posted: Mar 31, 2006 8:47pm Post subject: |
|
|
| ah everything would just be easier to do if i knew C =) |
|
| Back to top |
|
 |
Alek none

Joined: 14 Aug 2003 Posts: 24
|
Posted: Apr 01, 2006 11:05pm Post subject: |
|
|
I know this topic is kinda old, but an open-link network is an incredibly bad idea. It doesn't matter what ircd you use, what services you use to prevent oper powers, or whatnot. If a link can introduce a NICK, thats enough to nickcollide every single user on your network. Removing every single global oper power (hell, removing every single oper power period) will not prevent this from happening. That was one of the many problems back when ANet still existed.
So, don't waste time trying to modify ircds or services packages, if you want chaos, have chaos... its just not recommended. |
|
| Back to top |
|
 |
Kuplunk none

Joined: 30 Apr 2006 Posts: 24
|
Posted: May 01, 2006 2:01am Post subject: |
|
|
This post is kindof old but I was just wondering is there still any server on EFnet that does have open-linking?
- Kuplunk  |
|
| Back to top |
|
 |
Alek none

Joined: 14 Aug 2003 Posts: 24
|
Posted: May 01, 2006 11:52am Post subject: |
|
|
| EFnet was created on the principle of not allowing open-linking. I haven't seen a real production network which allows open-linking in a long long time. |
|
| Back to top |
|
 |
|
|
| |