Need help with CGI:IRC

View: New views
6 Messages — Rating Filter:   Alert me  

Need help with CGI:IRC

by ivand87 :: Rate this Message:

| View Threaded | Show Only this Message

Hi guys...

I recently had the idea of putting up our favorite hockey team's channel on IRC on the Internet, in the hopes of having more people show up and hang with us during games, etc.

I have installed and done everything properly, however, when people connect to IRC using the site (which is PensChat.com), everyone on there has the exact same host. Thus, if any trolls or dummies sign up and try to spam the channel, there would be no way for me to ban them from the channel without banning everyone else who logs on through the site.

If you log in through this site - http://webchat.xs4all.nl/ - the host for each person is different (I think the IP address is encoded). This is what I want for PensChat.com. Also, I would like to be able to customize the log in page on PensChat.com (where people type their nick), but that's not as important right now.

I have gone through the advanced settings page on the CGI:IRC site, but I can't figure out how to do it.
 
identd.p
The identd lets a user be idented to a hex encoded version of their IP address eg: c0a80202@... (this decodes to 192.168.2.2), you can use the included decode.pl to decode an IP address (or work out the hex yourself :). It makes banning on the host possible at channel and server level, which makes it much easier to allow more unrestricted access to CGI:IRC. To set-up the identd.pl you need root access to the system where you have installed CGI:IRC. The identd.pl requires you to be using an inetd, i have used it with inetd but people report it works with xinetd too.

To install it, copy the identd.pl file to /usr/local/sbin (or any other suitable location). Make sure it is set chmod 755 and the path to perl is correct, add the following to /etc/inetd.conf:
ident stream tcp nowait nobody /usr/local/sbin/identd.pl
You might also need to change nobody to the user CGI scripts run as on the server - this provides slight protection from local spoofing by checking the user is correct. You can check it's set-up correctly by running telnet localhost 113 - press enter and it should print something like INVALID PORT.
This should work, but no other identd lookups will work - you can change the reply variable in identd.pl to enable other lookups. Set to reply:text it would ident all other requests as "text" (similar to nullidentd). linuxproc simply uses /proc/net/tcp to do full ident lookups on linux. forward:port forwards to the identd running on a different local port; this apparently works well with oidentd running with the proxy option.

I don't know what most of that means. I don't know where the /usr/local/sbin directory is supposed to be. I don't know where the path to perl is. Same for /etc/inetd.conf... I'm completely lost. I'm very new to most of this, but since I've already done so many things for the site and would really like to set this up, I want to finish the site so it can work for years to come.

If anyone can help me out, I would really appreciate it. Just e-mail me back or reply through the mailing list. Or you can IM me through Yahoo (my username is ivand67), or MSN (ivand67@...).

Thank you,

Ivan

-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save $100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
cgiirc-general mailing list
cgiirc-general@...
https://lists.sourceforge.net/lists/listinfo/cgiirc-general

Re: Need help with CGI:IRC

by Jim Tittsler-3 :: Rate this Message:

| View Threaded | Show Only this Message

On Apr 22, 2008, at 07:49, Ivan Daglio wrote:
> I have installed and done everything properly, however, when people  
> connect to IRC using the site (which is PensChat.com), everyone on  
> there has the exact same host. Thus, if any trolls or dummies sign  
> up and try to spam the channel, there would be no way for me to ban  
> them from the channel without banning everyone else who logs on  
> through the site.

Try experimenting with different values of encoded_ip in your  
cgiirc.config:

# encoded_ip, set to 3 to send real IP in realname and encoded in  
username
# set to 2 to send hex encoded IP address in username
# and in realname, set to 1 to send only in realname and 0 to
# disable.
encoded_ip = 3




--
Jim Tittsler     http://www.OnJapan.net/      GPG: 0x01159DB6
Python Starship  http://Starship.Python.net/crew/jwt/
Mailman IRC      irc://irc.freenode.net/#mailman




-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save $100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
cgiirc-general mailing list
cgiirc-general@...
https://lists.sourceforge.net/lists/listinfo/cgiirc-general

Re: Need help with CGI:IRC

by Travis Tracy :: Rate this Message:

| View Threaded | Show Only this Message

Okay, I'm just going to ask here, hopefully it is allowed. Does anyone have an open CGI:IRC available? I have been unable to find a web hosting company that would allow CGI:IRC to be used. I only use it for personal use. The one I had been using is an extremely old version.
 
Thanks,
-Travis T.

 
On 4/21/08, Jim Tittsler <jt@...> wrote:
On Apr 22, 2008, at 07:49, Ivan Daglio wrote:
> I have installed and done everything properly, however, when people
> connect to IRC using the site (which is PensChat.com), everyone on
> there has the exact same host. Thus, if any trolls or dummies sign
> up and try to spam the channel, there would be no way for me to ban
> them from the channel without banning everyone else who logs on
> through the site.

Try experimenting with different values of encoded_ip in your
cgiirc.config:

# encoded_ip, set to 3 to send real IP in realname and encoded in
username
# set to 2 to send hex encoded IP address in username
# and in realname, set to 1 to send only in realname and 0 to
# disable.
encoded_ip = 3




--
Jim Tittsler     http://www.OnJapan.net/      GPG: 0x01159DB6
Python Starship  http://Starship.Python.net/crew/jwt/
Mailman IRC      irc://irc.freenode.net/#mailman




-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save $100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
cgiirc-general mailing list
cgiirc-general@...
https://lists.sourceforge.net/lists/listinfo/cgiirc-general


-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save $100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
cgiirc-general mailing list
cgiirc-general@...
https://lists.sourceforge.net/lists/listinfo/cgiirc-general

Re: Need help with CGI:IRC

by ivand87 :: Rate this Message:

| View Threaded | Show Only this Message

Hi Jim...

Thanks for the suggestion. I had already tried that, and unfortunately it doesn't work, because it doesn't change the user's host.

The /whois for the user now is:

PensC0701 is ivand87@... * [467987bc] PensChat.com
PensC0701 on #penschatdotcomtest
PensC0701 using irc.shoutcast.com HELLO WORLD
PensC0701 actually using host 208.113.192.21
PensC0701 End of /WHOIS list.

The ivand87@... is the user's address. And that IP address (208.113.192.21) is not MY address, so it must be my web host's (meaning anyone who signs on through the site would get that same address). The part after the asterisk ([467987bc] PensChat.com) is just the username, which you can't ban (that's what changed when I set "encoded_ip = 2").

So, the host didn't change doing this. I think I have to do what I quoted from the advanced settings page... Thanks again Jim.

Ivan

On Mon, Apr 21, 2008 at 4:47 PM, Jim Tittsler <jt@...> wrote:
On Apr 22, 2008, at 07:49, Ivan Daglio wrote:
I have installed and done everything properly, however, when people connect to IRC using the site (which is PensChat.com), everyone on there has the exact same host. Thus, if any trolls or dummies sign up and try to spam the channel, there would be no way for me to ban them from the channel without banning everyone else who logs on through the site.

Try experimenting with different values of encoded_ip in your cgiirc.config:

# encoded_ip, set to 3 to send real IP in realname and encoded in username
# set to 2 to send hex encoded IP address in username
# and in realname, set to 1 to send only in realname and 0 to
# disable.
encoded_ip = 3




--
Jim Tittsler     http://www.OnJapan.net/      GPG: 0x01159DB6
Python Starship  http://Starship.Python.net/crew/jwt/
Mailman IRC      irc://irc.freenode.net/#mailman





-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save $100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
cgiirc-general mailing list
cgiirc-general@...
https://lists.sourceforge.net/lists/listinfo/cgiirc-general

Re: Need help with CGI:IRC

by Jim Tittsler-3 :: Rate this Message:

| View Threaded | Show Only this Message

On Apr 22, 2008, at 10:29, Ivan Daglio wrote:

> Thanks for the suggestion. I had already tried that, and  
> unfortunately it doesn't work, because it doesn't change the user's  
> host.
>
> The /whois for the user now is:
>
> PensC0701 is ivand87@... * [467987bc] PensChat.com
> PensC0701 on #penschatdotcomtest
> PensC0701 using irc.shoutcast.com HELLO WORLD
> PensC0701 actually using host 208.113.192.21
> PensC0701 End of /WHOIS list.
>
> The ivand87@... is the user's address. And that  
> IP address (208.113.192.21) is not MY address, so it must be my web  
> host's (meaning anyone who signs on through the site would get that  
> same address). The part after the asterisk ([467987bc]  
> PensChat.com) is just the username, which you can't ban (that's  
> what changed when I set "encoded_ip = 2").

You didn't tell us what ivand87's IP address was, but are you sure it  
wasn't 70.121.135.188?  (That is what 467987bc is telling you with  
encoded_ip=2.  It is even more obvious set to 3 as I suggested.)  If  
you want to ban then from using the cgiirc server, you certainly can  
use that IP address in your cgiirc "ipaccess" file.

If you want to ban them at the remote IRC daemon from using that  
server or a particular channel on that server, you are right you will  
have to make it a function of the user name because the IP address at  
the irc daemon will always look like your web server (208.113.192.21).

> So, the host didn't change doing this. I think I have to do what I  
> quoted from the advanced settings page... Thanks again Jim.

I don't think so, the bit you quoted was about identd... and many  
hosts no longer run it (or at least no longer allow access outside of  
the LAN).  Its purpose was to narrow down which user on a multi-user  
host was using a service.



--
Jim Tittsler     http://www.OnJapan.net/      GPG: 0x01159DB6
Python Starship  http://Starship.Python.net/crew/jwt/
Mailman IRC      irc://irc.freenode.net/#mailman




-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save $100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
cgiirc-general mailing list
cgiirc-general@...
https://lists.sourceforge.net/lists/listinfo/cgiirc-general

Re: Need help with CGI:IRC

by Søren Jensen :: Rate this Message:

| View Threaded | Show Only this Message

But identd.pl IS what he needs then?
But it requires root access to the machine with CGI:IRC and that there runs
no other ident daemon on the machine.
The result will be <nick>!<encoded user host as ident>@<penschat webserver
host/ip>.
It will then be possible to ban a user on ident@webserver-host.
It will not work very well if an abusing user is using a dynamic IP that
changes often, as the users ident will change along with the IP change.

Best regards Søren Jensen

-----Original Message-----
From: cgiirc-general-bounces@...
[mailto:cgiirc-general-bounces@...] On Behalf Of Jim
Tittsler
Sent: Tuesday, April 22, 2008 9:24 AM
To: Ivan Daglio
Cc: cgiirc-general@...
Subject: Re: [cgiirc-general] Need help with CGI:IRC

On Apr 22, 2008, at 10:29, Ivan Daglio wrote:

> Thanks for the suggestion. I had already tried that, and  
> unfortunately it doesn't work, because it doesn't change the user's  
> host.
>
> The /whois for the user now is:
>
> PensC0701 is ivand87@... * [467987bc] PensChat.com
> PensC0701 on #penschatdotcomtest
> PensC0701 using irc.shoutcast.com HELLO WORLD
> PensC0701 actually using host 208.113.192.21
> PensC0701 End of /WHOIS list.
>
> The ivand87@... is the user's address. And that  
> IP address (208.113.192.21) is not MY address, so it must be my web  
> host's (meaning anyone who signs on through the site would get that  
> same address). The part after the asterisk ([467987bc]  
> PensChat.com) is just the username, which you can't ban (that's  
> what changed when I set "encoded_ip = 2").

You didn't tell us what ivand87's IP address was, but are you sure it  
wasn't 70.121.135.188?  (That is what 467987bc is telling you with  
encoded_ip=2.  It is even more obvious set to 3 as I suggested.)  If  
you want to ban then from using the cgiirc server, you certainly can  
use that IP address in your cgiirc "ipaccess" file.

If you want to ban them at the remote IRC daemon from using that  
server or a particular channel on that server, you are right you will  
have to make it a function of the user name because the IP address at  
the irc daemon will always look like your web server (208.113.192.21).

> So, the host didn't change doing this. I think I have to do what I  
> quoted from the advanced settings page... Thanks again Jim.

I don't think so, the bit you quoted was about identd... and many  
hosts no longer run it (or at least no longer allow access outside of  
the LAN).  Its purpose was to narrow down which user on a multi-user  
host was using a service.



--
Jim Tittsler     http://www.OnJapan.net/      GPG: 0x01159DB6
Python Starship  http://Starship.Python.net/crew/jwt/
Mailman IRC      irc://irc.freenode.net/#mailman




-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save $100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javao
ne
_______________________________________________
cgiirc-general mailing list
cgiirc-general@...
https://lists.sourceforge.net/lists/listinfo/cgiirc-general


-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save $100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
cgiirc-general mailing list
cgiirc-general@...
https://lists.sourceforge.net/lists/listinfo/cgiirc-general