Hello,
I like the idea of hostmasking, however as mentioned in the previous emails, its something that needs planning and to take into consideration many factors, personally I think only +r users deserve +H, since its used for legitimate purposes and in case of abuse would be way easier to control via services (SAbuse will have more work ;))
As Andreas mentioned it, fqircd has implemented it successfully, I've tried it on network some friends and I run without problems at all, works pretty decent, however, needs lots of testing before releasing, so thinking on every kind of abuse are considerations the coders should make.
You always have the option to use hostmasking or not, so whether if you like it or not, you will be able to use it or not. If aint broken dont fix it, well there is something maybe we should take into consideration which is masking the servers as well, from my undernet experience (which is different since you cant register nicknames) the hostmasking just make users go for the servers, so if I want nick X or nick Y what's the easiest way? take down the server.
Now, why do I mention serverhostmasking as well? in many cases, users try to register a channel that just dropped, and yes I know, chanserv kicks everyone after a channel dropped, but this is not working at all, why? I have seen users in #dalnethelp or #operhelp still asking for @ in certain channel to register it, so if they cant take down the users by DDoSing their hosts, they will target the servers they are in to register the channel.
My two cents,
./dros
2009/10/14 Andreas <andreas@kolsyrad.net>
Vin King wrote:
Err, lemme clarify that a little.
If the user is banned, how do you ban a segment if their ISP? Example, 127-0-0-1.mn.rocks.someisp.net <http://127-0-0-1.mn.rocks.someisp.net> can be banned at a state level, without banning all of someisp.net <http://someisp.net>. Banning all of an ISP isn't usually a wanted thing, but banning regions of an ISP is.
On FreeQuest, we have implemented hostmasking successfully (Bahamut 1.8.x). We mask the first part of the hostname (sometimes the second part as well, IIRC), or if you don't resolve your IP you'll have a long mask ending in .IP.
IRC Operators can still see the users real host, and the ban mechanism takes both into consideration, that is you can ban the users real IP, and if they mask it and try to join again, they're still banned.
A similar implementation shouldn't be too hard for DALnet to implement, since opermasking already is in place.
/Andreas aka ph0x
_______________________________________________
DALnet-src mailing list
DALnet-src@lists.dal.net
https://lists.dal.net/mailman/listinfo/dalnet-src