egghelp/eggheads community Discussion of eggdrop bots, shell accounts and tcl scripts. 2004-03-22T00:55:52-04:00 https://forum.eggheads.org/app.php/feed/topic/7116 2004-03-22T00:55:52-04:00 2004-03-22T00:55:52-04:00 https://forum.eggheads.org/viewtopic.php?p=34845#p34845 <![CDATA[userfile sending prob [again/still]]]> Statistics: Posted by gumbydammit — Mon Mar 22, 2004 12:55 am

]]> 2004-03-21T20:32:09-04:00 2004-03-21T20:32:09-04:00 https://forum.eggheads.org/viewtopic.php?p=34843#p34843 <![CDATA[userfile sending prob [again/still]]]> my problem was that the dcc-port ranges, which are used for file-fransfers, were not the same ranges on both bots.


big thanks to hellios who helped me a lot figuring this out.

Statistics: Posted by Guest — Sun Mar 21, 2004 8:32 pm

]]> 2004-03-21T14:38:28-04:00 2004-03-21T14:38:28-04:00 https://forum.eggheads.org/viewtopic.php?p=34831#p34831 <![CDATA[userfile sending prob [again/still]]]> I just wanna put a little bit effort into this now so we maybe get the thing solved. therefore I try to be as precise as possible in the following description.

my botnet consists of 2 bots.
the HubBot is on a firewalled box with a static, public IP. the leafbot is on a firewalled box with a dynamic, public IP.
the firewalls are bocking ICMP; the listening and dcc-range ports are opened.

here are the partyline messages (just for the sake of completness ;> they have been posted here thousand times before)

::: case 1 - HubBot linking to LeafBot :::
on HubBot

Linking to LeafBot at LeafBot.host.from.dyndns.org:1234 ...
Linked to LeafBot.
*** Linked to LeafBot
Creating resync buffer for LeafBot
Sending user file send request to LeafBot
Disconnected from: LeafBot. No reason (lost 1 bot and 0 users)
*** Disconnected from: LeafBot. No reason (lost 1 bot and 0 users)
(Userlist transmit aborted.)
on LeafBot

Received challenge from HubBot... sending response ...
Linked to HubBot.
*** Linked to HubBot
Downloading user file from HubBot
[Failed connection; aborted userfile transfer.
Disconnected from: HubBot. No reason (lost 1 bot and 0 users)
*** Disconnected from: HubBot. No reason (lost 1 bot and 0 users)
::: Case 2 - LeafBot linking to HubBot :::
on HubBot

Telnet connection: LeafBot.hostname/30000
Lost connection while identing [LeafBot.hostname/30000]
on LeafBot

Linking to HubBot at HubBot.hostname:1234 ...
*** [LeafBot] Couldn't link to HubBot.
Failed link to HubBot.

configuration HubBot:

Code: 

set my-ip "123.456.78.90"[...]listen 1234 allset protect-telnet 1set ident-timeout 60set open-telnets 0set stealth-telnets 1set connect-timeout 60set paranoid-telnet-flood 1set resolve-timeout 60[...]set reserved-portrange 1234:4321[...]set allow-resync 0


transfer, filesys and shared module loaded and working. as you can see: I increased all timeouts form 15 secs to 60 but it's still not working.

the configuration on the LeafBot looks almost the same. with only one difference:

Code: 

set my-hostname "LeafBot.hostname.from.dyndns.org"
because the LeafBot has a dynamic IP I set up an host from dyndns for it.
a demon is updating the hostname regularly so the hostname always links to the current dynamic IP.

I can telnet in to both bots on the specific listening ports, so the firewall should not be the problem.
but tbh I dont know what else I could try. I hope anyone here got a good idea.

thx for reading
/gogo


edit:
both boxes dont have an identd running

Statistics: Posted by Guest — Sun Mar 21, 2004 2:38 pm

]]>