there are many issues with unreal, since i had a chance to build my own unreal services i stumbled a lot of sync issues. here are some issues, some of which (but not all) are already handled: +b can be overridden or be desynced. here are the reasons i remember for overrides: user who gets an /invite (services invite too in ajoin etc) user who has +e *!*@* +e can include shit loads of extensions i.e. +e ~c:#opers or ~r:gekos +I acts like /invite and also may include weird extensions and when u handle all that you need to start taking into account services timestamp desync handler, generally speaking, if your timestamp is higher than the one the ircd sends you, you need to discard your modes, if they are identical, you need to do an awkward merge, and if you have a lower value discard everything the server just told you. btw, are time desyncs (TS) taking into account here? usually not an issue when services link to localhost, but i've seen different setups. sounds simple? sure, just a couple more ideas my implementation unsets a ban after 5 minutes, to avoid ban list getting filled, and akicks/restricts always set a ban in *!*@host form to avoid dbls. some modules allow opers to override but that's obvious. i've still didn't have a chance to figure out the new maskign module (thanks ircd for sending * instead of the actual value) so i do USERHOST nick1 nick2 nick3 on every connect to get in sync. i've implemented ALL of that, and guess what, on extremely rare occasions, i still get a desync issue (my services think ban is set but it's not). i'm pretty sure it's just a protocol compatibility issue and not the services fault (although implementing more of the protocol would help), so my solution is to set +f with user join flood protection that bans users and unsets the bans after 5 minutes. <div class="gmail_quote">On Jan 6, 2008 2:05 AM, Robin Burchell <<a href="mailto:robin@en2no.com">robin@en2no.com</a>> wrote: <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> No +I masks, three +e masks are set, neither of which match me.. #helpers *!*@<a href="http://herring.chatspike.net" target="_blank">herring.chatspike.net</a> set by Om (Sat Nov 03 23:13:31) #helpers *!*@<a href="http://helper.chatspike.net" target="_blank"> helper.chatspike.net</a> set by Om (Sat Nov 03 23:13:27) #helpers *!*@<a href="http://tortoisegod.chatspike.net" target="_blank">tortoisegod.chatspike.net</a> set by Om (Sat Nov 03 23:13:21) #helpers End of Channel Exception List - #helpers End of Channel Invite Exception List w00t is <a href="mailto:w00t@globop.chatspike.net">w00t@globop.chatspike.net</a> * Master of all trades; jack of none <- being me. Explicit invite - (as in /invite?) - aren't used on that channel. It's also perhaps worthy of note that /invite only overrides ban on some software. I imagine the problem was caused as some IRCds will propegate the ban anyway (no duplicates checking) from a server to server link, so I guess that could be construed as a problem of sorts, though not a major one. Given the infrequency of this problem, I don't mind waiting until the list archives are back up for you to check, by all means. :) <div><div></div><div class="Wj3C7c"> On Jan 5, 2008 11:52 PM, Andrew Church <<a href="mailto:achurch@achurch.org">achurch@achurch.org</a>> wrote: > >I understand it must be frustrating to have an issue like this that's > >so hard to track down, but it is equally frustrating to get bit in the > >ass by it. Isn't it wise to assume that if they are joining an > >existing channel that a ban matching them doesn't exist anyway > >(otherwise how are they joining?) > > +e, +I, explicit INVITE, possibly other methods.  Originally, I didn't > bother checking for the ban, but apparently it caused a problem, because > I added the check in 4.5pre0: > > 2001/01/11      Fixed duplicate adding of bans when auto-kicking a user >                     from a channel.  Reported by James <<a href="mailto:daemus@evilcode.com"> daemus@evilcode.com</a>> > --- chanserv.c  11 Jan 2001 00:03:56 -0000      1.10 > +++ chanserv.c  11 Jan 2001 04:29:13 -0000      1.11 > @@ -670,10 +670,13 @@ >  #else >      } >  #endif > -    av[1] = "+b"; > -    av[2] = mask; > -    send_cmd(s_ChanServ, "MODE %s +b %s %lu", chan, mask, time(NULL)); > -    do_cmode(s_ChanServ, 3, av); > +    /* Apparently invites can get around bans, so check for ban first */ > +    if (!chan_has_ban(mask)) { > +       av[1] = "+b"; > +       av[2] = mask; > +       send_cmd(s_ChanServ, "MODE %s +b %s %lu", chan, mask, time(NULL)); > +       do_cmode(s_ChanServ, 3, av); > +    } >      free(mask); >      send_cmd(s_ChanServ, "KICK %s %s :%s", chan, user->nick, reason); >      if (stay) { > > The list archives are down at the moment, so I can't check exactly what > the problem was, whether it was a serious issue or just cosmetic; I'm > hesitant to remove the check without knowing more.  (Of course, you're > welcome to try removing it yourself and seeing what happens.) > > >   --Andrew Church >     <a href="mailto:achurch@achurch.org">achurch@achurch.org</a> >     <a href="http://achurch.org/" target="_blank">http://achurch.org/</a> > </div></div> <div><div></div><div class="Wj3C7c">> ------------------------------------------------------------------ > To unsubscribe or change your subscription options, visit: > <a href="http://lists.ircservices.za.net/mailman/listinfo/ircservices" target="_blank"> http://lists.ircservices.za.net/mailman/listinfo/ircservices</a> > -- Robin Burchell mob: +447702671419 msn: <a href="mailto:msn@viroteck.net">msn@viroteck.net</a> web: <a href="http://www.en2no.com" target="_blank"> http://www.en2no.com</a> ------------------------------------------------------------------ To unsubscribe or change your subscription options, visit: <a href="http://lists.ircservices.za.net/mailman/listinfo/ircservices" target="_blank"> http://lists.ircservices.za.net/mailman/listinfo/ircservices</a> </div></div></blockquote></div> -- Best Regards, Anton Wolkov Information Security Expert | BugSec Ltd. Mobile: 054-7703580 | Office: 03-9622655 Visit us at our web site: <a href="http://www.bugsec.com">www.bugsec.com</a>