pegasus/unrealircd
1
0
Fork 0
mirror of https://github.com/unrealircd/unrealircd.git synced 2026-06-12 19:14:46 +02:00
Code Activity

[nopost] Send these harmless kill messages to the junk snomask.

Browse Source 
Nowadays these are pretty much never proxy attacks. Only scanners and
crawlers trying HTTP commands on IRC connections.. which isn't even that
weird anymore since people tend to open up port 443 for SSL/TLS IRC
to bypass firewall restrictions.
This commit is contained in:
Bram Matthys
2019-04-28 12:12:53 +02:00
parent d3f061bbd9
commit f9bbeaa6ca
1 changed files with 4 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/modules/m_nopost.c
+4 -6
View File
@@ -83,7 +83,7 @@ static void init_config(void)
{
memset(&cfg, 0, sizeof(cfg));
/* Default values */
cfg.ban_reason = strdup("HTTP command from IRC connection (ATTACK?)");
cfg.ban_reason = strdup("HTTP command from IRC connection");
cfg.ban_action = BAN_ACT_KILL;
cfg.ban_time = 60 * 60 * 4;
}
@@ -216,14 +216,12 @@ CMD_FUNC(m_nopost)
{
if (MyConnect(sptr) && !is_except_host(sptr))
{
/* We send a message to the ircops if the action is KILL, because otherwise
* you won't even notice it. This is not necessary for *LINE/SHUN/etc as
* ircops see them being added.
/* BAN_ACT_KILL requires special handling because otherwise it would
* not be seen at all.
*/
if (cfg.ban_action == BAN_ACT_KILL)
{
sendto_realops("[m_nopost] Killed connection from %s", GetIP(sptr));
ircd_log(LOG_CLIENT, "[m_nopost] Killed connection from %s", GetIP(sptr));
sendto_snomask(SNO_JUNK, "[m_nopost] Killed HTTP connection from %s", GetIP(sptr));
}
return place_host_ban(sptr, cfg.ban_action, cfg.ban_reason, cfg.ban_time);
}