Thread: [cgiirc-general] Need help with CGI:IRC
Brought to you by:
dgl
From: Ivan D. <iv...@gm...> - 2008-04-21 19:49:52
|
Hi guys... I recently had the idea of putting up our favorite hockey team's channel on IRC on the Internet, in the hopes of having more people show up and hang with us during games, etc. I have installed and done everything properly, however, when people connect to IRC using the site (which is PensChat.com), everyone on there has the exact same host. Thus, if any trolls or dummies sign up and try to spam the channel, there would be no way for me to ban them from the channel without banning everyone else who logs on through the site. If you log in through this site - http://webchat.xs4all.nl/ - the host for each person is different (I think the IP address is encoded). This is what I want for PensChat.com. Also, I would like to be able to customize the log in page on PensChat.com (where people type their nick), but that's not as important right now. I have gone through the advanced settings page on the CGI:IRC site, but I can't figure out how to do it. >From http://cgiirc.org/docs/advanced.php > identd.p > The identd lets a user be idented to a hex encoded version of their IP > address eg: c0a80202@your.host (this decodes to 192.168.2.2), you can use > the included decode.pl to decode an IP address (or work out the hex yourself > :). It makes banning on the host possible at channel and server level, which > makes it much easier to allow more unrestricted access to CGI:IRC. To set-up > the identd.pl you need root access to the system where you have installed > CGI:IRC. The identd.pl requires you to be using an inetd, i have used it > with inetd but people report it works with xinetd too. > > To install it, copy the identd.pl file to /usr/local/sbin (or any other > suitable location). Make sure it is set chmod 755 and the path to perl is > correct, add the following to /etc/inetd.conf: > ident stream tcp nowait nobody /usr/local/sbin/identd.pl > You might also need to change nobody to the user CGI scripts run as on the > server - this provides slight protection from local spoofing by checking the > user is correct. You can check it's set-up correctly by running telnet > localhost 113 - press enter and it should print something like INVALID > PORT. > This should work, but no other identd lookups will work - you can change > the reply variable in identd.pl to enable other lookups. Set to reply:textit would ident all other requests as "text" (similar to nullidentd). > linuxproc simply uses /proc/net/tcp to do full ident lookups on linux. > forward:port forwards to the identd running on a different local port; > this apparently works well with oidentd running with the proxy option. I don't know what most of that means. I don't know where the /usr/local/sbin directory is supposed to be. I don't know where the path to perl is. Same for /etc/inetd.conf... I'm completely lost. I'm very new to most of this, but since I've already done so many things for the site and would really like to set this up, I want to finish the site so it can work for years to come. If anyone can help me out, I would really appreciate it. Just e-mail me back or reply through the mailing list. Or you can IM me through Yahoo (my username is ivand67), or MSN (iv...@ho...). Thank you, Ivan |
From: Jim T. <jt...@on...> - 2008-04-21 20:47:44
|
On Apr 22, 2008, at 07:49, Ivan Daglio wrote: > I have installed and done everything properly, however, when people > connect to IRC using the site (which is PensChat.com), everyone on > there has the exact same host. Thus, if any trolls or dummies sign > up and try to spam the channel, there would be no way for me to ban > them from the channel without banning everyone else who logs on > through the site. Try experimenting with different values of encoded_ip in your cgiirc.config: # encoded_ip, set to 3 to send real IP in realname and encoded in username # set to 2 to send hex encoded IP address in username # and in realname, set to 1 to send only in realname and 0 to # disable. encoded_ip = 3 -- Jim Tittsler http://www.OnJapan.net/ GPG: 0x01159DB6 Python Starship http://Starship.Python.net/crew/jwt/ Mailman IRC irc://irc.freenode.net/#mailman |
From: Travis T. <tra...@gm...> - 2008-04-21 21:04:45
|
Okay, I'm just going to ask here, hopefully it is allowed. Does anyone have an open CGI:IRC available? I have been unable to find a web hosting company that would allow CGI:IRC to be used. I only use it for personal use. The one I had been using is an extremely old version. Thanks, -Travis T. On 4/21/08, Jim Tittsler <jt...@on...> wrote: > > On Apr 22, 2008, at 07:49, Ivan Daglio wrote: > > I have installed and done everything properly, however, when people > > connect to IRC using the site (which is PensChat.com), everyone on > > there has the exact same host. Thus, if any trolls or dummies sign > > up and try to spam the channel, there would be no way for me to ban > > them from the channel without banning everyone else who logs on > > through the site. > > Try experimenting with different values of encoded_ip in your > cgiirc.config: > > # encoded_ip, set to 3 to send real IP in realname and encoded in > username > # set to 2 to send hex encoded IP address in username > # and in realname, set to 1 to send only in realname and 0 to > # disable. > encoded_ip = 3 > > > > > -- > Jim Tittsler http://www.OnJapan.net/ GPG: 0x01159DB6 > Python Starship http://Starship.Python.net/crew/jwt/ > Mailman IRC irc://irc.freenode.net/#mailman > > > > > ------------------------------------------------------------------------- > This SF.net email is sponsored by the 2008 JavaOne(SM) Conference > Don't miss this year's exciting event. There's still time to save $100. > Use priority code J8TL2D2. > > http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone > _______________________________________________ > cgiirc-general mailing list > cgi...@li... > https://lists.sourceforge.net/lists/listinfo/cgiirc-general > |
From: Ivan D. <iv...@gm...> - 2008-04-21 22:29:56
|
Hi Jim... Thanks for the suggestion. I had already tried that, and unfortunately it doesn't work, because it doesn't change the user's host. The /whois for the user now is: PensC0701 is iv...@ca... * [467987bc] PensChat.com PensC0701 on #penschatdotcomtest PensC0701 using irc.shoutcast.com HELLO WORLD PensC0701 actually using host 208.113.192.21 PensC0701 End of /WHOIS list. The iv...@ca... is the user's address. And that IP address (208.113.192.21) is not MY address, so it must be my web host's (meaning anyone who signs on through the site would get that same address). The part after the asterisk ([467987bc] PensChat.com) is just the username, which you can't ban (that's what changed when I set "encoded_ip = 2"). So, the host didn't change doing this. I think I have to do what I quoted from the advanced settings page... Thanks again Jim. Ivan On Mon, Apr 21, 2008 at 4:47 PM, Jim Tittsler <jt...@on...> wrote: > On Apr 22, 2008, at 07:49, Ivan Daglio wrote: > > > I have installed and done everything properly, however, when people > > connect to IRC using the site (which is PensChat.com), everyone on there has > > the exact same host. Thus, if any trolls or dummies sign up and try to spam > > the channel, there would be no way for me to ban them from the channel > > without banning everyone else who logs on through the site. > > > > Try experimenting with different values of encoded_ip in your > cgiirc.config: > > # encoded_ip, set to 3 to send real IP in realname and encoded in username > # set to 2 to send hex encoded IP address in username > # and in realname, set to 1 to send only in realname and 0 to > # disable. > encoded_ip = 3 > > > > > -- > Jim Tittsler http://www.OnJapan.net/ GPG: 0x01159DB6 > Python Starship http://Starship.Python.net/crew/jwt/ > Mailman IRC irc://irc.freenode.net/#mailman > > > > |
From: Jim T. <jt...@on...> - 2008-04-22 07:24:36
|
On Apr 22, 2008, at 10:29, Ivan Daglio wrote: > Thanks for the suggestion. I had already tried that, and > unfortunately it doesn't work, because it doesn't change the user's > host. > > The /whois for the user now is: > > PensC0701 is iv...@ca... * [467987bc] PensChat.com > PensC0701 on #penschatdotcomtest > PensC0701 using irc.shoutcast.com HELLO WORLD > PensC0701 actually using host 208.113.192.21 > PensC0701 End of /WHOIS list. > > The iv...@ca... is the user's address. And that > IP address (208.113.192.21) is not MY address, so it must be my web > host's (meaning anyone who signs on through the site would get that > same address). The part after the asterisk ([467987bc] > PensChat.com) is just the username, which you can't ban (that's > what changed when I set "encoded_ip = 2"). You didn't tell us what ivand87's IP address was, but are you sure it wasn't 70.121.135.188? (That is what 467987bc is telling you with encoded_ip=2. It is even more obvious set to 3 as I suggested.) If you want to ban then from using the cgiirc server, you certainly can use that IP address in your cgiirc "ipaccess" file. If you want to ban them at the remote IRC daemon from using that server or a particular channel on that server, you are right you will have to make it a function of the user name because the IP address at the irc daemon will always look like your web server (208.113.192.21). > So, the host didn't change doing this. I think I have to do what I > quoted from the advanced settings page... Thanks again Jim. I don't think so, the bit you quoted was about identd... and many hosts no longer run it (or at least no longer allow access outside of the LAN). Its purpose was to narrow down which user on a multi-user host was using a service. -- Jim Tittsler http://www.OnJapan.net/ GPG: 0x01159DB6 Python Starship http://Starship.Python.net/crew/jwt/ Mailman IRC irc://irc.freenode.net/#mailman |
From: Søren J. <egg...@sj...> - 2008-04-22 10:43:31
|
But identd.pl IS what he needs then? But it requires root access to the machine with CGI:IRC and that there runs no other ident daemon on the machine. The result will be <nick>!<encoded user host as ident>@<penschat webserver host/ip>. It will then be possible to ban a user on ident@webserver-host. It will not work very well if an abusing user is using a dynamic IP that changes often, as the users ident will change along with the IP change. Best regards Søren Jensen -----Original Message----- From: cgi...@li... [mailto:cgi...@li...] On Behalf Of Jim Tittsler Sent: Tuesday, April 22, 2008 9:24 AM To: Ivan Daglio Cc: cgi...@li... Subject: Re: [cgiirc-general] Need help with CGI:IRC On Apr 22, 2008, at 10:29, Ivan Daglio wrote: > Thanks for the suggestion. I had already tried that, and > unfortunately it doesn't work, because it doesn't change the user's > host. > > The /whois for the user now is: > > PensC0701 is iv...@ca... * [467987bc] PensChat.com > PensC0701 on #penschatdotcomtest > PensC0701 using irc.shoutcast.com HELLO WORLD > PensC0701 actually using host 208.113.192.21 > PensC0701 End of /WHOIS list. > > The iv...@ca... is the user's address. And that > IP address (208.113.192.21) is not MY address, so it must be my web > host's (meaning anyone who signs on through the site would get that > same address). The part after the asterisk ([467987bc] > PensChat.com) is just the username, which you can't ban (that's > what changed when I set "encoded_ip = 2"). You didn't tell us what ivand87's IP address was, but are you sure it wasn't 70.121.135.188? (That is what 467987bc is telling you with encoded_ip=2. It is even more obvious set to 3 as I suggested.) If you want to ban then from using the cgiirc server, you certainly can use that IP address in your cgiirc "ipaccess" file. If you want to ban them at the remote IRC daemon from using that server or a particular channel on that server, you are right you will have to make it a function of the user name because the IP address at the irc daemon will always look like your web server (208.113.192.21). > So, the host didn't change doing this. I think I have to do what I > quoted from the advanced settings page... Thanks again Jim. I don't think so, the bit you quoted was about identd... and many hosts no longer run it (or at least no longer allow access outside of the LAN). Its purpose was to narrow down which user on a multi-user host was using a service. -- Jim Tittsler http://www.OnJapan.net/ GPG: 0x01159DB6 Python Starship http://Starship.Python.net/crew/jwt/ Mailman IRC irc://irc.freenode.net/#mailman ------------------------------------------------------------------------- This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Don't miss this year's exciting event. There's still time to save $100. Use priority code J8TL2D2. http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javao ne _______________________________________________ cgiirc-general mailing list cgi...@li... https://lists.sourceforge.net/lists/listinfo/cgiirc-general |