egghelp.org community Forum Index
[ egghelp.org home | forum home ]
egghelp.org community
Discussion of eggdrop bots, shell accounts and tcl scripts.
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

Users registered with nickserv

 
Post new topic   Reply to topic    egghelp.org community Forum Index -> Eggdrop Help
View previous topic :: View next topic  
Author Message
roughnecks
Voice


Joined: 14 Sep 2008
Posts: 33
Location: Italy

PostPosted: Wed Oct 01, 2008 11:43 am    Post subject: Users registered with nickserv Reply with quote

Hi, i have an eggdrop and i get this problem...i'm the owner and my user is tizio (let's say my mask is *!tizio@*.telecom-italia.it); now if i change the user field in xchat and put the one of another user (let'say caio) who is registered in the bot userlist, i am identified as caio (in the case we have the same isp, i mean).

Is it right?
I find this behaviour not correct.
Is there a way to make eggdrop check the users flags before opping them?
For users flags i mean, for example the r flag wich nickserv assign to registered nicks upon connecting to the server. in this case i may use hostmasks such as tizio!tizio@*someisp.xx and have my eggdrop waiting before opping and being sure that tizio is the right registered user and not someone else trying to get opped.

I know that it's not so clear...so excuse me, but i'm italian.
Thanks
Back to top
View user's profile Send private message
TCL_no_TK
Owner


Joined: 25 Aug 2006
Posts: 509
Location: England, Yorkshire

PostPosted: Fri Oct 10, 2008 3:17 pm    Post subject: Reply with quote

I'd recommend using a differant hostmask then in the userfile. So the bot will identify only you, i wouldn't see adding more hostmask's that will allow you to use differant hostmasks or something would cause a problem. Hopefully the following will be helpful to you http://www.egghelp.org/enhance.htm#security Smile
_________________
TCL the misunderstood
Back to top
View user's profile Send private message Send e-mail
roughnecks
Voice


Joined: 14 Sep 2008
Posts: 33
Location: Italy

PostPosted: Fri Oct 10, 2008 3:29 pm    Post subject: another related question Reply with quote

Thanks for the tip
Reading that stuff i see this:

Unless your Eggdrop is on a small, private channel which does not get many visitors you do not know, using auto-op greatly increases the risk of channel takeover. This is because, in order to get ops, a person only needs to match a hostmask of a user, and idents/hostnames can often be faked on IRC. It is best to make sure that users can only get ops after giving their password to the bot, typically by sending a /msg to the bot to request ops.

What is the /msg command to request op from eggdrop ?
See U
Back to top
View user's profile Send private message
TCL_no_TK
Owner


Joined: 25 Aug 2006
Posts: 509
Location: England, Yorkshire

PostPosted: Fri Oct 10, 2008 3:38 pm    Post subject: Reply with quote

Quote:
/MSG <botnick> OP <password> [channel]
* Ops you on any channel where I have ops and you don't. If a channel name is specified, you will only be opped on that channel.


If you do not add hostmask's to the user record and wish for the user to /msg the bot for ops, i would recommend the use of the /msg <botnick> ident command.
Quote:
/MSG <botnick> IDENT <password> [handle]
* This lets the bot recognize you from a new address. You don't need to specify a handle if your handle is the same as your nickname on IRC.


Add a user record in the bots user file i.e "myops" with a strong password and just give the "myops" user handle +o flag for the channel where "myops" will be op'ing and *then* give everyone who you wish to get ops on the channel you gave "myops" user handle +o flag on. The string password. And have them do: /msg <botnick> ident string password myops
and get ops that way? maybe.

Since using the "ident" command is considered insecure and the eggdrop config file recommend's unbinding it (removing it). You could use the following. simlar to the way the "hello" command is changed:

Code:
unbind msg - ident *msg:ident
bind msg - <my-word> *msg:ident

_________________
TCL the misunderstood
Back to top
View user's profile Send private message Send e-mail
Display posts from previous:   
Post new topic   Reply to topic    egghelp.org community Forum Index -> Eggdrop Help All times are GMT - 4 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Forum hosting provided by Reverse.net

Powered by phpBB © 2001, 2005 phpBB Group
subGreen style by ktauber