search by ircd / services

Ashen · Idler Joined: 05 Jan 2004 Posts: 285

(this might have been asked before, and if so I apologise)

I really like using networks that have hybrid/ratbox ircds and hybserv2 services. I've not found a way to search the searchirc.org site by ircd or services version yet... am I missing it? or is this feature there at all? If not, and it's not too much trouble, I'd really appreciate it being added... as some of the lesser known ircds are really appealing to some people and difficult to find.

-Ashen

Jason · Posted: Mar 13, 2004 8:25pm Post subject:

Hey Ashen,

Currently this is the only way to see more than one networks ircd versions:

http://searchirc.com/ircd-versions

We specifically do not have a version search as that would make it easy for someone to find all networks a given exploit would work on.

On the other hand, if you are bored, you may want to try picking a random network and looking in the motd list to see what ircds they use.

stephenthierry · Guest

thats a lot of networks to search through for a specific IRCd.. a list of the networks by their IRCd would be cool.. but to prevent exploiters, you could search by "unreal", "hybrid", etc.. and not the exact version.

IMO, this would be great. nice idea Ashen Wink

Ashen · Idler Joined: 05 Jan 2004 Posts: 285

Hrm, I suppose.... the reason I'd like this feature is that most of the networks out there now use unrealircd, which I'm personally not fond of, and the types of ircds I like (bahamut, hybrid, ratbox, etc) plus the types of services I like (anope, hybserv2, chanfix) are pretty rare combinations.

Yeah, I know there are a few big networks that use hybrid + chanfix, efnet for example, the the networks I'm looking for are very specific and as such, hard to find amongst the hordes of unrealircd warez nets >_<.

While this feature would be useful, I'd have to agree with Jason, in that I wouldn't want it to be made avalible if it resulted in the easy exploitation of countless irc networks due to a search for exploitable ircd versions. Admins have a hard enough time already.

-Ashen

[DiMENSiON] · Eleet Joined: 06 Sep 2003 Posts: 621

I think searching by what IRCd networks use woud be a good idea, i don't personally think you need services aswell but what IRCd is used not actual specific version woudl be a nice addition to SearchIRC. :)

Guest · Posted: May 28, 2004 5:11pm Post subject:

if XGoogle can do it i think SearchIRC could Wink

check out http://www.xgoogle.com/ircd for what you want.. sorry if this is considered spam.. but this is what these guys were looking for.. lets hope SearchIRC can do it too Wink

Jason · Posted: May 28, 2004 6:17pm Post subject:

see my initial statement - I can do it too, but I am choosing not to.

I don't want to supply any information that can then be used to harm a network.

codemastr · Idler Joined: 05 Feb 2004 Posts: 353

As an IRCd programmer, I must say, people would most definately use this for exploit purposes. It's almost like adding an "Only search for websites running IIS." If a new exploit comes out for Hybrid, someone can quickly get a list of all servers running the exploitable version.

But on the other hand, it could be useful for that very same reason. I can't speak for every IRCd coder, but when an exploit is found in Unreal, we want everyone to upgrade as soon as possible! The faster people upgrade, the less the exploit gets used, and the less problems that occur. Yes, we post the info on our website, yes we send it to the mailinglist, yes we post it in our IRC channel. But it doesn't reach everyone. I know, from having looked at the SearchIRC list in the past, that there are still people running Unreal3.2-beta8. Anyone who thinks that in the *14* releases since then, not a single bug has been found, is just crazy. No matter what the software, running a version that is 14 releases old is just asking for trouble. If SearchIRC had a list of exactly which servers were running it, I could get contact info and let the admins know the risk of running that version.

So I guess it's a double-edged sword. In the right hands, it can reduce exploits, in the wrong hands, it can increase them. But, since I'm sure there would only be about 5-6 people who would use this feature for the purpose of notifying about exploits, I certainly understand why SearchIRC would not want to make such an option available.

Maybe, since the main reason people want this (other than myself) is because "I like feature X," maybe SearchIRC could make that info searchable? Like basically, allow searching based on some 005 tokens. "Only include servers that allow halfops" and stuff like that. That way, you're not actually looking for a particular IRCd (many IRCds support halfops), but you get the feature you want. And if you are so misguided as Ashen is Wink

, you could select some option that would exclude Unreal from the search results.

uchat · Idler Joined: 17 Mar 2004 Posts: 335

mouselike · Idler Joined: 09 Dec 2003 Posts: 258

Id vote yes to having this if it ever came around, though I can see where the people who say no to it are coming from. Would some sort of solution where just the ircd name like UnrealIRCd or IRCu would show up rather than something like UnrealIRCd3.2.... and so on, then it widens the search into narrower categories thus making the list for these used/mostly used ircd's a lot larger and highly doubt someone would go around exploiting hundreds of ircd's if not thousands if it were to become the case of filtering.

If this feature exists on xgoogle then those who wish to just be lame and exploit ircd bugs could just go there? Perhaps limiting its use to registered members to would be an option.

btw ive noticed that that the ircd-version list isnt exactly right at all. i.e u2.10.11.04+asuka(1.0.6a) is quakenets ircd, they run 39 servers but the list says 23, and the same goes for the bahamut ircd's and ratbox/hybrid etc, this a known problem or is it updated on a rare/radom bases thus giving these sort of figures?

Regards
Rob.

Jason · Posted: Jun 08, 2004 4:57pm Post subject:

mouselike,

The reason why you don't see an accurate server count for that version is:

1) The counts are made up of servers that the indexers have connected to. So if the indexer isn't welcome on 100% of the servers, or the RR doesn't point to all servers, it will not pick up info for all of them.

2) As per my post on http://searchirc.com/boards/viewtopic.php?t=1127 there was a problem with the indexers until very recently. The problem lasted ~1 month, so the counts were not updating for a while.

mouselike · Idler Joined: 09 Dec 2003 Posts: 258