At 11:23 AM 3/4/2002 -0600, you wrote: >that module is for accepting DCC connections, a feature of IRC clients. >note that you do not need to load it for normal IRC chatting, only for DCC >chats/file transfers, which are rare outside of the warez crowd nowadays.
Ah, that explains why my warez site in the sky isn't working.. I was giving out illegal copies of Linux to anyone that wanted it. Oh wait.. ;) Regards, Dustin >-Tim > > > >Dustin Puryear wrote: > >>At 08:22 AM 3/4/2002 -0600, you wrote: >> >>> If I read this right, this only affects people who are silly >>> enough to put IRC on their firewall. >> >> >>I don't think so. Unless I'm mistaken, if you load the irc module for >>netfilter (similar to the ftp or realaudio module) then you may be >>vulnerable. I would think a lot of the netfilter scripts floating around >>do so. (For those that don't know, these modules help netfilter modify >>packets as they traverse the firewall. They are needed because some >>protocols, like ftp, embed client information (ie., IP addresses) in the >>data field.) I just checked and found the irc module on my RH7.2 system: >> >>/lib/modules/2.4.9-31/kernel/net/ipv4/netfilter/ip_nat_irc.o >> >>To be honest, I have played much with netfilter, and I don't know exactly >>what ip_nat_irc does.However, if you are using netfilter you may want to >>see if you have that module loaded with lsmod: >> >># lsmod >> >>I just looked at the source: >> >>http://www.linuxhq.com/kernel/v2.4/patch/patch-2.4.14-pre7/linux/net/ipv4/netfilter/ip_nat_irc.c.html >> >> >> >>And this does indeed appear to be for clients of IRC, and not those just >>running servers. >> >>Regards, Dustin >> >> >>--- >>Dustin Puryear <[EMAIL PROTECTED]> >>Information Systems Contractor >>http://members.telocity.com/~dpuryear >>PGP Key available at http://www.us.pgp.net >>In the beginning the Universe was created. >>This has been widely regarded as a bad move. - Douglas Adams >> >>================================================ >>BRLUG - The Baton Rouge Linux User Group >>Visit http://www.brlug.net for more information. >>Send email to [EMAIL PROTECTED] to change >>your subscription information. >>================================================ > > > >================================================ >BRLUG - The Baton Rouge Linux User Group >Visit http://www.brlug.net for more information. >Send email to [EMAIL PROTECTED] to change >your subscription information. >================================================ --- Dustin Puryear <[EMAIL PROTECTED]> Information Systems Contractor http://members.telocity.com/~dpuryear PGP Key available at http://www.us.pgp.net In the beginning the Universe was created. This has been widely regarded as a bad move. - Douglas Adams ================================================ BRLUG - The Baton Rouge Linux User Group Visit http://www.brlug.net for more information. Send email to [EMAIL PROTECTED] to change your subscription information. ================================================
