[IRCServices] JOIN 0 subject

Andrew Kempe andrewk at icon.co.za
Wed Sep 22 10:23:59 PDT 1999


I will fix this problem soon. Removing support for /JOIN 0 from the ircd
source is just not a viable option. There are far too many ircd variants out
there, and this is legacy code. We just have to go with the flow. Besides,
it's not that hard to implement.

Andrew

> -----Original Message-----
> From: owner-ircservices at ender.shadowfire.org
> [mailto:owner-ircservices at ender.shadowfire.org]On Behalf Of Pinto, Joao
> Luis (J.)
> Sent: 22 September 1999 17:55
> To: 'ircservices at ender.shadowfire.org'
> Subject: [IRCServices] JOIN 0 subject
>
>
> About ircd with JOIN 0 support and services not supporting it, this should
> be considered a major security problem because it can block some services
> functionalities and also serve as a DoS for services
> explaining:
> 	a bot programmed to join form chanell #a to #zzzzzzzzz, using join
> #a,#b,#c and then join 0 .... can in a couple of hours disable mlock and
> keep topic functionality for several hundreds of channels, until the bot
> quit's or the services are restarted, anyway for every channel
> the bot joins
> the channel is created on services internal channel list, so it will
> sequentially  memory and slow down findchan function a lot
> because there are
> much more channels to search on.
> My opinio is the best way to fix the problem is not to code join 0 in
> services but take it out from ircd, since most of users don't use it, and
> this way you save ircd cpu insted of using more cpu on services :)
>
> Just some ideas
>
> João Luís Marques Pinto
> PTlink Tech - Lamego at PTlink.net
> <A  HREF="http://www.PTlink.net">http://www.PTlink.net</A>
>
>
>
> ---------------------------------------------------------------
> To unsubscribe, send email to majordomo at ender.shadowfire.org
> with "unsubscribe ircservices" in the body, without the quotes.
>

---------------------------------------------------------------
To unsubscribe, send email to majordomo at ender.shadowfire.org
with "unsubscribe ircservices" in the body, without the quotes.