View Issue Details

IDProjectCategoryView StatusLast Update
0003721unrealircdpublic2015-08-08 17:56
Reporterkillerdedieu Assigned Tosyzop  
PrioritynormalSeverityminorReproducibilityalways
Status closedResolutionunable to duplicate 
Product Version3.2.5 
Summary0003721: Allow Block ( I:Line) Hostname restried dosent work
DescriptionHi,

When i use the Allow block ( I:line ) for control user, i want just user who hostname is: Java@*

This is my block :

allow {
hostname Java@*;
ip *@*;
class clients;
password "pass";
maxperip 5;
};

But that doesn't work...

it a bug of Unreal ?
Steps To Reproduceallow {
hostname Java!*@*;
ip *;
class clients;
password "pass";
maxperip 5;
};
3rd party modules

Activities

WolfSage

2008-08-22 19:46

reporter   ~0015370

Last edited: 2008-08-22 19:54

http://www.unrealircd.com/files/docs/unreal32docs.html#allowblock

About matching
The access control works like this: ip matches OR host matches, so "hostname *@*"; and "ip *@1.2.3.4" will mean it will always match. Also the allow blocks are read upside down, so you need specific host/ip allow blocks AFTER your general *@* allow blocks. Additionally, if you want to setup a block that only matches based on IP, then set the hostname to something invalid, such as "hostname NOBODY;", this will allow the block to only match based on IP.

If you want to just match user@*, you need to put an invalid IP in.
IE: *@255.255.255.255 (should never work)

Although, since you're not actually using the hostname itself, just the user mask, you may as well do:

hostname Java@*;
ip Java@*;

killerdedieu

2008-08-22 23:59

reporter   ~0015371

Hi,

i have read the unrealircd doc for allowblock before asking there... but no anwser...

if i put a bad ip that say me : (You are not authorized to connect to this server)

nobody can connect....

doesn't work...

argvx

2008-08-25 13:53

reporter   ~0015373

you need use 'nopasscont' option for this work.

killerdedieu

2008-08-25 14:47

reporter   ~0015374

Hi Fbi,

nopasscont : continue matching if no password was given (so you can put clients in special classes if they supply a password).

I need the password AND hostname...

How make it ?

syzop

2008-12-21 12:40

administrator   ~0015461

Tested, works perfectly fine here:

allow {
        ip "*@*";
        hostname "*@*";
        class clients;
        maxperip 2;
};

allow {
        ip "Java@*";
        hostname "Java@*";
        class clients2;
        maxperip 2;
        password "testing";
};

Connecting with a client (with ident enabled) with an ident of Java, makes it require a password. Connecting with both the Java ident and the password succeeds and puts the user in the clients2 class (verified with /TRACE).

If the above example does not work, it's probably identd related.

syzop

2008-12-21 12:40

administrator   ~0015464

this was tested on current cvs btw.

killerdedieu

2008-12-21 15:18

reporter   ~0015476

Thx i will try it later and give u a feedback

Issue History

Date Modified Username Field Change
2008-08-22 19:20 killerdedieu New Issue
2008-08-22 19:46 WolfSage Note Added: 0015370
2008-08-22 19:50 WolfSage QA => Not touched yet by developer
2008-08-22 19:50 WolfSage U4: Need for upstream patch => No need for upstream InspIRCd patch
2008-08-22 19:50 WolfSage U4: Upstream notification of bug => Not decided
2008-08-22 19:50 WolfSage U4: Contributor working on this => None
2008-08-22 19:50 WolfSage Status new => feedback
2008-08-22 19:54 WolfSage Note Edited: 0015370
2008-08-22 23:59 killerdedieu Note Added: 0015371
2008-08-25 13:53 argvx Note Added: 0015373
2008-08-25 14:47 killerdedieu Note Added: 0015374
2008-12-21 12:40 syzop Note Added: 0015461
2008-12-21 12:40 syzop Note Added: 0015464
2008-12-21 12:40 syzop Severity block => minor
2008-12-21 15:18 killerdedieu Note Added: 0015476
2015-08-08 17:56 syzop Status feedback => closed
2015-08-08 17:56 syzop Assigned To => syzop
2015-08-08 17:56 syzop Resolution open => unable to duplicate