egghelp.org community Forum Index
[ egghelp.org home | forum home ]
egghelp.org community
Discussion of eggdrop bots, shell accounts and tcl scripts.
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

userfile sharing: Disconnected from: <bot>
Goto page 1, 2  Next
 
Post new topic   Reply to topic    egghelp.org community Forum Index -> Eggdrop Help
View previous topic :: View next topic  
Author Message
kitten
Voice


Joined: 13 Jul 2005
Posts: 6

PostPosted: Wed Jul 13, 2005 3:30 am    Post subject: userfile sharing: Disconnected from: <bot> Reply with quote

Hello forum

I lost my botnet some time ago and have been updating egg to 1.6.17 and rewrote the conf files since then. I also checked some previous threads here to get help. Didn't help me so here you are, reading my complaining Wink

I have two bots, hub (Kuiskaus) and leaf (Kirous). They connect fine, but if I enable userfile sharing, I get errors:

Hub says:
10:17 <kuiskaus> *** Linked to Kirous
10:17 <kuiskaus> [11:39] Creating resync buffer for Kirous
10:17 <kuiskaus> [11:39] Sending user file send request to Kirous
10:17 <kuiskaus> [11:39] Disconnected from: Kirous. No reason (lost 1 bot and 1 user)
10:17 <kuiskaus> *** Disconnected from: Kirous. No reason (lost 1 bot and 1 user)
10:17 <kuiskaus> [11:39] (Userlist transmit aborted.)

Leaf says:
10:18 <Kirous> *** Linked to Kuiskaus
10:18 <Kirous> [10:13] Downloading user file from Kuiskaus
10:18 <Kirous> [10:13] Lost userfile transfer from Kuiskaus; aborting.
10:18 <Kirous> *** Kuiskaus
10:18 <Kirous> [10:13] (Userlist download aborted.)

Hub thinks:
10:27 <kuiskaus> HANDLE PASS NOTES FLAGS LAST
10:27 <kuiskaus> Kirous yes 0 abflo 11:49 (unlinked)
10:27 <kuiskaus> BOT FLAGS: gs
10:27 <kuiskaus> HOSTS: *!*kirous@blaablaa.com
10:27 <kuiskaus> -telnet!*@blaablaa.com

Leaf thinks:
10:27 <Kirous> HANDLE PASS NOTES FLAGS LAST
10:27 <Kirous> Kuiskaus yes 0 abflo 10:22 (unlinked)
10:27 <Kirous> BOT FLAGS: ghp
10:27 <Kirous> HOSTS: *!telnet@dsl-blaablaa.com
10:27 <Kirous> *!*Kuiskaus@dsl-blaablaa.com
10:27 <Kirous> ADDRESS: myhost.com
10:27 <Kirous> users: 2010, bots: 2010


Now.. I saw in one thread that disabling resync buffer might help. What bugs me is that i get "Creating resync buffer for Kirous" if I have "set allow-resync 0" or "set allow-resync 1" in kuiskaus.conf file.

I have no NATs, but firewalls on both boxes. And Kirous is in a linux box not under my control so I can't access to its firewall rules. But that shouldn't be a problem since I did some research with Ethereal and no new connections are initialized from Kuiskaus to Kirous. Noticed however that all ident connections fail, but that shouldn't be a problem?

Here is some highlights from conf files:
kuiskaus.conf:
set reserved-portrange 2010:2020
set my-hostname "<my-host-name.com>"
loadmodule transfer
loadmodule share
loadmodule compress
set allow-resync 0

kirous.conf:
set reserved-portrange 2010:2020
loadmodule transfer
loadmodule share
loadmodule compress
set allow-resync 0

This has bugged me for months and I forgot it in between, so any help is appreciated Cool
Back to top
View user's profile Send private message
demond
Revered One


Joined: 12 Jun 2004
Posts: 3073
Location: San Francisco, CA

PostPosted: Wed Jul 13, 2005 3:57 am    Post subject: Reply with quote

firewalls normally prevent DCC by not allowing listening and inbound connections on arbitrary ports - whereas all IRC clients and bots, including eggdrop, by default use random listening ports for DCC (userfile transfer) - but there is a solution to this:

from eggdrop.conf:
Quote:

# If you want all dcc file transfers to use a particular portrange either
# because you're behind a firewall, or for other security reasons, set it
# here.
#set reserved-portrange 2010:2020


so, find open port(s) at your linux firewall (or ask the admin to open some) and set reserved-portrange
Back to top
View user's profile Send private message Visit poster's website
kitten
Voice


Joined: 13 Jul 2005
Posts: 6

PostPosted: Wed Jul 13, 2005 5:47 am    Post subject: Reply with quote

Thanks for the quick answer.

Are you sure firewall needs to be mangled in leaf bot side? Ethereal didn't show any tcp handshakes to that direction. Normal DCC chat to the leaf bot works fine too.
Back to top
View user's profile Send private message
demond
Revered One


Joined: 12 Jun 2004
Posts: 3073
Location: San Francisco, CA

PostPosted: Wed Jul 13, 2005 11:17 am    Post subject: Reply with quote

the hub needs to be able to open a listen port (a la DCC SEND request) and accept incoming connections on it; the firewall on the leaf side has no effect on that (as long as it allows outbound connections on arbitrary ports, which normally all firewalls in default configuration do)
Back to top
View user's profile Send private message Visit poster's website
kitten
Voice


Joined: 13 Jul 2005
Posts: 6

PostPosted: Thu Jul 14, 2005 12:44 am    Post subject: Reply with quote

Hmm.. then I'm stuck again. Well, I tought about coding a module that shares user information via common channel like #egg98721lnkfa982 Twisted Evil

Too much effort? Maybe, but then by botnet would work, hehe..
Back to top
View user's profile Send private message
demond
Revered One


Joined: 12 Jun 2004
Posts: 3073
Location: San Francisco, CA

PostPosted: Thu Jul 14, 2005 1:06 am    Post subject: Reply with quote

what have you been smoking? Wink that's the weirdest eggdrop idea I've ever heard

if you absolutely cannot get an open port on that firewall (which I very much doubt, most admins will open port(s) if asked to do so - that is, unless your bot is illegal), set up as hub the other bot, the one that runs on a host without firewall
Back to top
View user's profile Send private message Visit poster's website
kitten
Voice


Joined: 13 Jul 2005
Posts: 6

PostPosted: Thu Jul 14, 2005 5:53 am    Post subject: Reply with quote

Dunno, man. Being tired and at work early in the morning gives you ideas Laughing

Oh, the hub is in the comp I have root access and also I can manage that firewall. ISP doesn't do any filtering or firewalling either.

What I dug up of ethereal:
- Hellos, username, passwords exchanged.
- Linked to..
- Both send my handle and host (I think this is because i'm in bots party lines?)
- Leaf says: "suy exempts invites compress" -> kuiskaus
- Hub says: "sfeats exempts invites compess" -> kirous
- Hub says: "kirous +EDNE.sus <some numbers>" -> kirous
- Leaf says: "bye" -> kuiskaus
- Hub says: "bye" -> kirous
- Fin. Connection closing

I don't know if this helps in any way but decided still to share it Very Happy
Any idea how to get rid of that resync buffer (somebody suggested it in some thread) since set allow-resync 0 really doesn't do it?

Oh and yeah, the bots stay connected if I disable +s flag so I don't try to send userfile.

Thanks for demond this far trying to help me.
Back to top
View user's profile Send private message
demond
Revered One


Joined: 12 Jun 2004
Posts: 3073
Location: San Francisco, CA

PostPosted: Thu Jul 14, 2005 12:39 pm    Post subject: Reply with quote

you better use console logging with +th flags (log raw botnet traffic, share traffic; raw-log must be 1 for this to work) than ethereal

and double-check your config & scripts, since setting allow-resync to 0 really disables that resync buffer; maybe some script keeps setting it to 1 (but you ought to use it, I mean the resync buffer, since transfering the entire userfile after each reconnect doesn't make much sense)
Back to top
View user's profile Send private message Visit poster's website
kitten
Voice


Joined: 13 Jul 2005
Posts: 6

PostPosted: Fri Aug 26, 2005 1:57 am    Post subject: Reply with quote

Back after a long pause..
Thanks for the advice. Here comes some logs then, I hope you get something from them. Kuiskaus is hub and Kirous is leaf. Before this I changed allow-resync back to 1.

08:51 <Kirous> [08:46] Received challenge from Kuiskaus... sending response ...
08:51 <Kirous> [08:46] Linked to Kuiskaus.
08:51 <Kirous> *** Linked to Kuiskaus
08:51 <Kirous> [08:46] [Kuiskaus] tb Kuiskaus
08:51 <Kirous> [08:46] [Kuiskaus] j *********
08:51 <Kirous> [08:46] [Kuiskaus] i Kuiskaus I Dj
08:51 <Kirous> [08:46] {Kuiskaus} u?
08:51 <Kirous> [08:46] Downloading user file from Kuiskaus
08:51 <Kirous> [08:46] [Kuiskaus] el
08:51 <Kirous> [08:46] {Kuiskaus} feats exempts invites compress
08:51 <Kirous> [08:46] [Kuiskaus] u Kirous +EDNE
08:51 <Kirous> [08:46] {Kuiskaus} us 2130706433 2011 3628
08:51 <Kirous> [08:46] Lost userfile transfer from Kuiskaus; aborting.
08:51 <Kirous> *** Kuiskaus
08:51 <Kirous> [08:46] (Userlist download aborted.)

08:51 <Kuiskaus> *** Linked to Kirous
08:51 <Kuiskaus> [10:07] [Kirous] tb Kirous
08:51 <Kuiskaus> [10:07] [Kirous] j *********
08:51 <Kuiskaus> [10:07] [Kirous] i Kirous I G
08:51 <Kuiskaus> [10:07] [Kirous] el
08:51 <Kuiskaus> [10:07] {Kirous} uy exempts invites compress
08:51 <Kuiskaus> [10:07] Creating resync buffer for Kirous
08:51 <Kuiskaus> [10:07] Sending user file send request to Kirous
08:51 <Kuiskaus> [10:07] [Kirous] bye
08:51 <Kuiskaus> [10:07] Disconnected from: Kirous. No reason (lost 1 bot and 1 user)
Back to top
View user's profile Send private message
demond
Revered One


Joined: 12 Jun 2004
Posts: 3073
Location: San Francisco, CA

PostPosted: Fri Aug 26, 2005 2:42 am    Post subject: Reply with quote

that means DCC userfile transfer has been tried but interrupted (or possibly never initiated successfully); in any case it's a firewall problem, and it's a problem that could be remedied, since the bots were already able to connect and establish a botlink

oh, and it has nothing to do with allow-resync
Back to top
View user's profile Send private message Visit poster's website
kitten
Voice


Joined: 13 Jul 2005
Posts: 6

PostPosted: Fri Aug 26, 2005 5:57 am    Post subject: Reply with quote

demond wrote:
that means DCC userfile transfer has been tried but oh, and it has nothing to do with allow-resync


Well that a good thing to know.
But hmm... That was new to me that userfile is transferred separately over DCC. I thought it is transferred in same socket as botnet.

I have access to the firewall in hub bot's end and any TCP from leaf's IP address is allowed. I tested with irc client from leaf bot's comp to the hub bot and all dcc chat/send/get went ok. Is there something more I should know about dcc?
Back to top
View user's profile Send private message
arlo
Voice


Joined: 27 Nov 2005
Posts: 2
Location: Minnesota

PostPosted: Sun Nov 27, 2005 4:56 pm    Post subject: Reply with quote

Just wanted to mention that I'm having the *exact* same problem. I'm running both the hub and leaf bots on the same machine, which I have complete control over. The firewall is open for needed ports, and I even tried it with the firewall completely disabled. All other botnet features function correctly. I carefully went over the instructions in the link posted above, and all the settins are as they should be. I'm stumped!
Back to top
View user's profile Send private message
CrazyEgg
Halfop


Joined: 28 Jul 2005
Posts: 47

PostPosted: Wed Nov 30, 2005 9:43 am    Post subject: Reply with quote

Quote:
Hub thinks:
10:27 <kuiskaus> HANDLE PASS NOTES FLAGS LAST
10:27 <kuiskaus> Kirous yes 0 abflo 11:49 (unlinked)
10:27 <kuiskaus> BOT FLAGS: gs
10:27 <kuiskaus> HOSTS: *!*kirous@blaablaa.com
10:27 <kuiskaus> -telnet!*@blaablaa.com


ADRESS and user/bots addresses?
Back to top
View user's profile Send private message
arlo
Voice


Joined: 27 Nov 2005
Posts: 2
Location: Minnesota

PostPosted: Wed Nov 30, 2005 10:13 am    Post subject: Reply with quote

That's a good idea, thanks. Unfortunately, it didn't change anything for me. I even added *!*@* to both bots' host lists. *sigh*
Back to top
View user's profile Send private message
jinxdone
Voice


Joined: 28 Jan 2006
Posts: 1

PostPosted: Sun Jan 29, 2006 7:38 am    Post subject: Reply with quote

Try setting either my-hostname or my-ip to your ip/host.

It helped for me, after some hairsplitting I noticed eggdrop that previously worked fine started acting up after I installed newer distro (recompile didn't help).. Turns out it was telling people to connect to 127.0.0.1 instead of eth0's address for dcc transfers -> userfile transfer fails.

Even though this is an old thread I hope it helps anybody with the same problem!
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    egghelp.org community Forum Index -> Eggdrop Help All times are GMT - 4 Hours
Goto page 1, 2  Next
Page 1 of 2

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Forum hosting provided by Reverse.net

Powered by phpBB © 2001, 2005 phpBB Group
subGreen style by ktauber