egghelp/eggheads community

secure bot?

2004-06-05T13:46:54-04:00

can u edit the file for me? And corecct the misstakes?

Statistics: Posted by [R] — Sat Jun 05, 2004 1:46 pm

secure bot?

2004-06-05T11:49:15-04:00

Those global-flood settings look a bit funky.
Personly I'd go with something more strict

Statistics: Posted by greenbear — Sat Jun 05, 2004 11:49 am

secure bot?

2004-06-05T11:31:03-04:00

oh
here is my config file.. Plz post ur comments to the file? Is there an error or a better way to secure?
Or insecure file?
Post!

Statistics: Posted by [R] — Sat Jun 05, 2004 11:31 am

secure bot?

2004-06-05T11:16:46-04:00

excuse me , yes I mean 1.6.16 =)
Is it important to update?

Kima: I need only this script? Anything else needed?

Statistics: Posted by [R] — Sat Jun 05, 2004 11:16 am

secure bot?

2004-06-05T10:06:24-04:00

Who said that AversE or Evangeline isn't Eggdrop? Not me. Both bots are eggdrops modification (AversE - 1.4.2, Evangeline - 1.6.16). Both have uses modified +bitch, which i named +defense in sources (not in tcl).

You have to modify irc.mod a little to kick instead of deopping using +bitch channel setting.

It is obvoius that compiled code (in C, C++ etc) is faster than code written in tcl, but i didnt timed both methods (btw. it depends also on the software - tcl version).

AversE have quite poor english documentation, Evangeline have it much better but unfinished yet.

Statistics: Posted by KrzychuG — Sat Jun 05, 2004 10:06 am

secure bot?

2004-06-05T09:27:53-04:00

How much faster is using the module compared to the .tcl anyways ?
Has anyone actually timed both methods ?

And no, don`t say it depends on the hardware/shell/upstream/etc

I would be curious to know the difference. Actually, if I were to pick any module, it would prolly be the botnetops since I`m not really into irc wars anymore.

Kami: before I download the bot sources you posted earlier, do they have files in English? I noticed the websites weren't ... I would assume Polish

Statistics: Posted by j0n — Sat Jun 05, 2004 9:27 am

secure bot?

2004-06-05T08:52:53-04:00

Hm great answers , Great Board!

But Id like eggdrops!
I think its the best bot
I am using a +bitch modul , not a script... Modules are faster than scripts... How can I kick not allowed ops with this modul?
Where can I find more settings from my bot?!
Can everybody help me to secure my eggdrop?

by the way: hmh i need a update, perhabs? I have got 1.16.5 ...
Is it important , to update my bot?

Thx and Greetz

[R]

Well, you can't kick people with bitch module, but you can do it with superbitch.This is extrabitch script which kicks both users (one who oped, and one who got op):

Code:

set channels "#channel1 #channel2"# Here you put chans on which you want script to workset allowmn 1            set kickmsg "[censored] OfF" bind mode - * mode:bitchie_staffproc mode:bitchie_staff {nick uhost handle channel mchange theone} { global channels kickmsg botnick allowmn  set mode [lindex $mchange 0]  if {$mode != "+o" || ![string match "* [string tolower $channel ]*" "l [string tolower $channels] l"] || [matchattr $handle b] || [string tolower $theone] == [string tolower $botnick] || [string tolower $nick] == [string tolower $botnick]} {return 0}  if {$allowmn == 1 && ([matchattr $handle n] || [matchattr $handle m])} {return 0}  putquick "KICK $channel $nick :$kickmsg"  putquick "KICK $channel $theone :$kickmsg"   return 0}

Btw, about version...You wanted to say 1.6.15, right?

Statistics: Posted by ]Kami[ — Sat Jun 05, 2004 8:52 am

secure bot?

2004-06-05T08:24:47-04:00

Hm great answers , Great Board!

But Id like eggdrops!
I think its the best bot
I am using a +bitch modul , not a script... Modules are faster than scripts... How can I kick not allowed ops with this modul?
Where can I find more settings from my bot?!
Can everybody help me to secure my eggdrop?

by the way: hmh i need a update, perhabs? I have got 1.16.5 ...
Is it important , to update my bot?

Thx and Greetz

[R]

Statistics: Posted by [R] — Sat Jun 05, 2004 8:24 am

secure bot?

2004-06-04T19:19:00-04:00

True, but if userfiles are encrypted, they can't take your channels, they can only kill your process.

Not true.. if they gain root access, they can control your bot's net stream, manipulating your bot -> server tcp stream into giving ops to whomever they want.

Statistics: Posted by strikelight — Fri Jun 04, 2004 7:19 pm

secure bot?

2004-06-04T17:12:34-04:00

how can the key be "protected" when you give away the source code ?

and as Caesar said, this is offtopic, the guy asked for a script that kick on +bitch

Statistics: Posted by greenbear — Fri Jun 04, 2004 5:12 pm

secure bot?

2004-06-04T16:31:43-04:00

The only thing which make your botnet more secure is userfile and eventually chanfile encryption and also share encryption (available in Evangeline). Evangeline have much better encrypted userfiles (i'm using blowfish) and generally its key is "protected" (you can't find it in binary).

Caesar, you said about good passwords, but what if someone hack on the shell and add some hostmask to eggdrop userfile and/or change some chansets or simply remove channel from chanlist to get it back?

Encryption doesn't have so much influence on irc reactions and doesn't use more cpu resources than normal eggdrops.

Maybe that will be offtopic, but in my oppinion Eggdrops aren't optimized for IRCnet, and thats why they are "slow" there.

Statistics: Posted by KrzychuG — Fri Jun 04, 2004 4:31 pm

secure bot?

2004-06-04T15:14:01-04:00

We seem to go *off topic* and that's not nice. [R] asked for some sugestions about how to improve it's security on it's bot or botnet or whatever and we kinda express our ideeas about wich bot is slower and wich is faster.. umm.. actualy you did kidding

Ps; Big deal.. same bloddy thing. A bunch of lazy ass bots that sit and do nothing.

Statistics: Posted by caesar — Fri Jun 04, 2004 3:14 pm

secure bot?

2004-06-04T15:12:15-04:00

pilot error

Statistics: Posted by greenbear — Fri Jun 04, 2004 3:12 pm

secure bot?

2004-06-04T15:12:20-04:00

Well, yeah it depends on all of this...But all Eggdrops are slow.Every one on IRCNet and there are many many shell providers...I think they aren't made for IRCNet and for protection channels...

Btw, if i remove picture and add text, then you won't see this nice red and green colors anymore

Statistics: Posted by ]Kami[ — Fri Jun 04, 2004 3:10 pm

secure bot?

2004-06-04T15:10:38-04:00

As far as I can see the *reaction* of your eggdrops was absolute 0 (zero, none, naza, zip, rien, etc.. you name it). By using the default built in flud kick would prevent a channel takeover to happen. Also the speed of the *actions* of eggdrop depends on stuff like it's the CPU it eats, the binds he knows (I'm talking about TCL scripts), the server it sits on and so on. Probably you had an slow eggdrop just coz you had sloppy scripts or something similar and cos the person that deoped all your eggdrops had a a lot of luck and was on an a lil bit more fast server than yours. As I have said, lots of stuff can contribute to it's speed.

PS: Add plain text if realy needed not pics.

Statistics: Posted by caesar — Fri Jun 04, 2004 3:04 pm