Warning to all network/server admins

Zero_Cool · none Joined: 19 Jan 2004 Posts: 2

Hey all, there's a guy named Proto running loose and if ya see him, don't trust him. A friend of mine did and out of nowhere, he tried to take over her network, dropped nicks and banned opers..also ddos'd. He runs a server off of his cable connection and if he gets a wild hair, he will attack and try to take over. Just warning everyone bout this guy

codemastr · Idler Joined: 05 Feb 2004 Posts: 353

The first mistake is allowing someone who runs a server off of an ISP account to link to your network...

Ashen · Idler Joined: 05 Jan 2004 Posts: 285

Imho, bad idea to link ircds to production networks that are running off of home connections - yes, even cable.

Imho, you should be more careful who you let link, and use OS NOOP / JUPE if the situation
does get that bad - that way you can quickly remove the offending oper/server before the
situation gets fubar.

Thanks for the warning though.

-Ashen

Plasma · Newbie Joined: 10 Dec 2003 Posts: 63

Thats why you never:

* Link to someone you do not know, OR do not trust
* If they approach you out of no where asking for a link (why would they want to link? Have you asked for links etc?)

Think about it, your handing over most control of your network to other users, so you have to be careful Smile

Ashen · Idler Joined: 05 Jan 2004 Posts: 285

You're right Plasma, that is also true. So true in fact, most people assume it without writing it Smile

(though, whether they actually abide by those principles when it comes to crunch time is another matter)

Guest · Posted: Jul 12, 2004 1:13pm Post subject:

That is the reason i left the network you are speaking of Zero_Cool . I was linked there and the Netowner was in such a hurry to link Proto without knowing anything about him. And he was also very insistant on the link being done ASAP. No thought was given to it, and the next day i delinked my server. Within a week there were problems there and she almost lost it all.

Julia · none Joined: 30 Jun 2004 Posts: 17

Normal (not childish, not lame, not ran by kids) networks must have linking policies and procedures that minimize risks of getting such idiots on network 90% or such, getting someone linked immediately is a good way to get yourself troubles on network. Being IRC administrator for more than 5 years, i ve seen big enough such lame server administrators. To protect yourself:

* Ensure you know the person who is going to be server admin,
or find someone who know them if possible

* If they want to link a shell - write mail to root@theirserver, ensure that they have a permission to run ircd, i knew many cases when we have linked a server
which was later been shut down because it was bot/bnc/.. something else but not an ircd account.

* Dont link them immediately, have them to fill some sophisticated Link Application Form, most possible troublemaker admins are lazy to fill any forms,they want LINK RIGHT NOW, and they will go find another network, let them go Smile

* Give test period with restricted count of O: lines per server for 2-3 (or more) weeks, other restrictions minimize the risks, if they dont like it - they are not serious and dont really want to join YOUR network, they just want some sort of link and be cool, do you need such server administrators? I dont.

You may have another opinions, policies.. I just share my look on it, last 2 years we have not linked any idiots that caused trouble to us, so probably i`m right

Casey · none Joined: 22 Jul 2004 Posts: 45

No need to say anything, everyone already said what I was going to say. Heh, ;o(

Casey, NETADMIN @ FOUR2OH IRC.

Talrias · Lurker Joined: 16 Feb 2004 Posts: 163 Location: :noitacoL

Erm, so why are you making a post if you have nothing to add? It looks to me like you just want to advertise your network a bit.

Chris

magpie · Idler Joined: 18 Jan 2004 Posts: 454 Location: Essex, UK

Bingo. :)

V8d_Org · none Joined: 23 Jan 2006 Posts: 7

Look left, Look right, Look left

Best advice anyone has given me, I like to have physical contact with any links, or atleast know someone who does. Makes it feel a bit more real.

braindigitalis · Idler Joined: 22 Sep 2003 Posts: 443 Location: IRC

Loser04 · Posted: Jan 29, 2006 12:10pm Post subject:

I too had Proto linked to my network, he seem'd like a cool guy, and he was linked with me for a couple months Im wanting to think.. His server was pretty stable, and it wasnt a cable connection, it was with FDCServers (CRAPPY) but didnt really have any stability problems, but he just up and delinked, no real reason.

chasingsol · none Joined: 23 Apr 2005 Posts: 44

This is the routing application that we use on our network. Feel free to modify for your usage. It gets the important information regarding their IRCD. Of course, being familiar with who is asking to link is important too. As others have said in this thread, link people you don't know that well at your own peril. It amazes me the number of people who ask for a link that have been on our network for a couple of days.

Aven · Idler Joined: 05 Aug 2005 Posts: 393

Very good application chasingsol... People should also look at some other big networks like Quakenet, Dalnet, undernet, etc. and see how seriou applications should be. You're giving someone a lot of power, make sure you really know the person.

Any known script kiddy can easily hide with a different nickname and a connection and easily trick you.