Feature in DCH++

[Henrik]

After running dch++ for a little while I have noticed a couple of new features I would like to have implemented in the hub.

+settings - displays current settings

Change in
+isreg - If you have the highest level you should be able to see the password of other with same level. If someone hacks an admin account i.m.h.o. you have bigger problems then him being able to see other admin passwords.

Features:

- Extra connection port. Useful if you want your hub to run on the
default dc port. However you also want to have a different connection
port for user who may not have access to port 411 due to over cautious
network admins (schools/uni's/work places/etc..)

- $UserIP support in hub, a lot of my users are on dhcp networks with almost no lease time, and some of them even have a hardware router, this means that the user must always stay updated and changing the IP setting in dc++ client. I would like to see a passive listening support for $UserIP in the dc++ client, and a support in dch++ for sending this string to the client who changes the IP in settings.
This would lead to fewer users having download problems with timeout.

- Allowed IPrange for an op, if op has right nick and password but come from a not pre stated allowed ip.He/she should not be allowed to use bot nor op-commands. He could instead be degraded to an no share account, Could be good even if it’s the right person behind the client sometimes. Lets say op is at a party and wants to download some mp3:s. We can for the sake of it say that he/she has had a little much to drink and needs to take a leak. The downloads aren’t finished yet. What the other ppl do with there new won power is up to your imagination but the users won’t be happy.

[Sedulus]

what if the party is at his own house? ;)

[Henrik]

Due to the possibility of having you furniture broken, and your neighbours breathing down your neck for a couple of month, you need to have the party elsewhere. Any “sane� person know this

Well this was not really what my last posting was all about what do you think of the feature requests?

[Sedulus]

I know :)
I was just too damn tired yesterday :)

+settings - displays current settings

will do

Change in
+isreg - If you have the highest level you should be able to see the password of other with same level.

ok.. I don't see anything wrong with that, except that I'm used to never being able to view passwords at all (one-way encryption instead) (adding the password view was someone elses request as well, and if I added that, I can fix this too)

- Extra connection port.

this would be a job for arne. except that a decent firewall/NAT-device/packet-mangler can do this for you already. the tools exist, at least on real operating systems ;)

Code: Select all

iptables -t nat -A PREROUTING -d $MYIP -p tcp --dport $MY2ndPORT -j DNAT --to $MYIP:$MY1stPORT

- $UserIP support in hub
[..snip..]
I would like to see a passive listening support for $UserIP in the dc++ client, and a support in dch++ for sending this string to the client [which] changes the IP in settings.

don't look at me.. a UserIp plugin exists already. (it works with an active request by the client though, $UserIPv1)
getting $UserIP implemented in dc++, well.. is arne's job. I'd be happy to supply a patch if he wants, but previously he refused.

- Allowed IPrange for an op, if op has right nick and password but come from a not pre stated allowed ip.He/she should not be allowed to use bot nor op-commands. He could instead be degraded to an no share account,

I'll think about it

[Henrik]

I know that a good fw will do this for me. I have a gentoo running as a firewall with ip-tables, snort, guardian the only thing my firewall does is to protect my hub. I have forwarded another port to 411 on my own system. I just don’t think I can demand the other hubs to use 2 computers for one hub .

But the multiple listening port would be a easy feature for the hub owner to use multiple.

So I hope Arne reads this

And I now got a better answer for you about why you don’t log in on dc to download mp3:s during a party.

You already have the mp3:s you like to listen to.. If you log in on dc.. Other ppl could get there wish thou, and you would be stuck listening to shit music

[Henrik]

- $UserIP support in hub
[..snip..]
I would like to see a passive listening support for $UserIP in the dc++ client, and a support in dch++ for sending this string to the client [which] changes the IP in settings.

don't look at me.. a UserIp plugin exists already. (it works with an active request by the client though, $UserIPv1)
getting $UserIP implemented in dc++, well.. is arne's job. I'd be happy to supply a patch if he wants, but previously he refused.

I think this would be done best with an active hub and passive client.
This means the client won’t need to ask for it, so the hub would if the $connec2me does not add up it sends out the right ip. or even if the hub detects a dc++ client, it can in the login string send over $userip. Less trafic between the client and hub. And servers who does not support $userip wont get commands it doesn’t understand.

[OLDoMiNiON]

OK, how about a command to monitor a certain user?

You could type +watch <nick> and whatever they say/do, is PMed to via the Bot. This would be useful for monitoring users who are suspected of advertising, and other things. I know it's an invasion of privacy, therefore restrict it to top-level Ops, and make the plugin announce "The OPs in this hub have to power to monitor your Private Messages, please diconnect now if you disagree with this."

[Henrik]

You could type +watch <nick> and whatever they say/do, is PMed to via the Bot.

*shivers* this is a plug-in surely some hub owners would like. But I don’t think this feature even should exist

Privacy to the ppl! Freedom of speech!

Really how many ppl changes hub cause of an adv? I think most ppl think just like me, what a looser hub that needs to be adv. for.

[BSOD2600]

I've actually got a Ptokax Spy Bot that works under DCH++.

Can report chat, PMs, searches, connection attempts to others

[Sedulus]

I think this would be done best with an active hub and passive client.
This means the client won’t need to ask for it, so the hub would if the $connec2me does not add up it sends out the right ip. or even if the hub detects a dc++ client, it can in the login string send over $userip.

- passive client: I don't really mind sending a $UserIP to everyone at logon, but you might want to run this through the Direct Connect Protocol Extensions Group ;)

- wrong ctm: looking at every Ctm would use more cpu than the bandwidth you save (I think)

- only send to known clients: nonono.. the hub shouldn't have to keep a list of clients known to support stuff and use (simple) CDM to figure out to whom to send. in that case a $Supports UserIP from the client, or the active UserIP request would be better.

[Sedulus]

Privacy to the ppl!

unless there is a reasonable suspicion. take the scenario where a friend of mine got friend B kicked for harassing A. A was lying out his teeth, and such a spy-bot would determine who's doing what.

personally I have never needed or run any plugin like those, but I can understand situations where people think/feel it's needed.

Freedom of speech!

!= privacy

[OLDoMiNiON]

yes, that's very true with my hub actually. i often get PMs telling me things like that, but who to believe? ..i can't do anything about it! With a watch bot i could. I recognise the minor abusability factor of this, however imho the pasitive aspects outweigh the negative.

[OLDoMiNiON]

It seems i'm on a role!

How about a bad-file checker? i found these to be invaluable in Ptokax, as they work a charm, and keep porn outta my damn hub!

[BSOD2600]

SearchKick is what you are after!! http://wza.digitalbrains.com/DC/dchpp/l ... chKick.lua

You might notice that about half of the scripts that Sedulus has graciously written have been requested by me in some way... thx again sed!

[OLDoMiNiON]

lol, nice! cheers

Would like to see it as a plugin some day though.. save CPU and everything

[OLDoMiNiON]

hmm, not too keen on this approach:

-- spaces in the SearchFor table will be converted to dollar's, but they will
-- (purposely) only match if there's a space in the result later.
-- so "a b" won't match "b a" or "aXXXb"

I'd like it to match if it finds both words in any order, and also would like to give it partial words such as "masterbat" which would cover both "masterbation", and "masterbating".

[OLDoMiNiON]

If this is already possible, please could you explain the syntax? thanx!

[Sedulus]

You could type +watch <nick> and whatever they say/do, is PMed to via the Bot.

please be a bit more specific in what kind of interface you want?

a PM from the person, or from a specified botNick, or from "-"..botNick.."-"..personNick.."-" (e.g. "<-Spy-OLDoMiNiON-> PM to BSOD2600: you sux0rz!!") or both (<BotNick>-Spy-%[nick]-</BotNick> and <BotNick>-Spy-</BotNick> both possible)?

options to view _all_ commands or just chat/pm?
ops spying on ops? userlevel X spying on same userlevel?

[Sedulus]

hmm, not too keen on this approach:

I'd like it to match if it finds both words in any order, and also would like to give it partial words such as "mast[u]rbat" which would cover both "mast[u]rbation", and "mast[u]rbating".

use regexes, they won't use the only-match-"a b"-method, but exactly what you define
(note that magic characters need to be escaped using % instead of \, so backslash is \\, and " is ", but . is %.)

but you really could just add a lot of words as; which would be the correct way (add "porn", "pr0n", "XXX", "incest", "masturbat", etc.., instead of using "porn pr0n XXX incest ...", as that won't work, no)

also note that "masturbat" _will_ match foomasturbatbar and all other matches, as there are no delimiters specified.

[Sedulus]

Would like to see it as a plugin some day though.. save CPU and everything :)

would be possible, yes.. even passives could be cought then, if using a separate thread and a listening UDP socket. the problem with UDP is that it can be spoofed..

so the following scenario could occur:
A sees B logging in ($Hello B)
A knows what you search for, as he has logged in himself.
A quickly connects to B to get his IP
A sends a spoofed UDP packet to the hub's listening UDP port with all your illegal search terms using B's nick and IP
P sees illegal stuff coming in on the port, and - in the worst case - bans B

... that'd be bad ...

[Sedulus]

I just don’t think I can demand the other hubs to use 2 computers for one hub ;)

uh.. one computer suffices, as the NAT works on the same box as well ($MYIP twice.. I didn't put $MYLANIP there..)

So I hope Arne reads this ;)

it's on his list..

You already have the mp3:s you like to listen to.. If you log in on dc.. Other ppl could get there wish thou, and you would be stuck listening to shit music ;)

yes.. that argument is way better :D

but you might want to run this through the Direct Connect Protocol Extensions Group ;)

and as this takes way too long, I have added the option of "fixing" wrong IP's in Search/CTM in the NatUsers plugin on my TODO list. don't blame me if the cpu usage increases ;)