All pastes #884718 Raw Edit

Someone

public text v1 · immutable
#884718 ·published 2008-01-30 15:36 UTC
rendered paste body
[23:23:12] <nenolod> hi.
[23:23:22] <nenolod> Katlyn, the channel for your DNSBL is oper-only.
[23:23:50] * nenolod (~nenolod@Swift-33D968CA.ok.ok.cox.net) Quit (Quit: <mark_alec> nenolod: you are a very strange individual)
[23:23:55] * nenolod (~nenolod@Swift-A812E81.sacredspiral.co.uk) has joined #swiftirc
[23:24:18] <@Katlyn> it's still in development, nobody really knows about it at the moment
[23:24:31] <nenolod> Katlyn, people are using it.
[23:24:50] <@Katlyn> I only know of a few networks that use it :o
[23:24:52] <nenolod> Katlyn, at any rate, what i am wondering is, why have a seperate blacklist, when you could just interact with dronebl's directly.
[23:25:39] <@Katlyn> because ours doesn't necessarily work the same as dronebl :o
[23:25:49] <nenolod> oh ok.
[23:26:02] <nenolod> well, some reciprical data sharing would be nice if you want to set that up.
[23:26:03] <nenolod> :)
[23:26:33] <Rupert> :)
[23:26:44] <Slaapkamer> (:
[23:26:49] <Rupert> (:
[23:26:57] <@Katlyn> sure, although it'd probably be best to wait until things have settled down with it.. it's still really new
[23:27:10] <Slaapkamer> Rupert is a very happy person.
[23:27:11] <@Katlyn> I know Tim wants to begin setting up mirrors for it..
[23:27:25] <Marius> You also know Tim sucks
[23:27:28] <Marius> and anything he makes breaks.
[23:27:37] <Marius> or jsut doens't work at all to begin with
[23:27:49] <@Katlyn> This is true - it doesn't actually update at the moment because for some reason Tim managed to screw up rndc
[23:28:05] <nenolod> ...lol what?
[23:28:08] <@Katlyn> without even being in his country
[23:28:10] <Marius> now, I need somebody who's fast to go get me a couple'o'cans of Burn, 20-30 shoudl do...double time !
[23:28:10] <nenolod> why on earth would you use bind for a DNSBL.
[23:28:26] <@Katlyn> do you use rbldnsd or something?
[23:28:38] <Slaapkamer> We used mysql
[23:28:44] <Slaapkamer> (With DNSBL)
[23:28:58] <nenolod> ...what.
[23:29:05] <nenolod> you don't allow actions?
[23:29:07] <nenolod> geeze.
[23:29:13] <@Katlyn> lol
[23:29:14] <Marius> reduces spam
[23:29:16] <Marius> by a LOT
[23:29:28] <nenolod> i guess...
[23:29:38] <@Katlyn> generally our network has a very low IQ
[23:29:46] <Slaapkamer> Tim said first, LOL you use bind, then we moved to mysql and now he uses it himself, made me lol a bit :P
[23:29:55] <nenolod> Slaapkamer, what are you on about
[23:30:06] <nenolod> Slaapkamer, you use mysql as backend, and then dump that into an rbldnsd zone file
[23:30:13] <Slaapkamer> I can better ask, what are you on about?
[23:30:18] <nenolod> Slaapkamer, and then rsync that out to the mirrors
[23:30:24] * [DA]Gunz0 (_DA_Gunz@Swift-EE88FB7C.hsd1.fl.comcast.net) Quit (Quit: )
[23:30:30] <@Katlyn> we don't have any mirrors at the moment
[23:30:41] <nenolod> you should NEVER EVER use bind to serve dnsbl
[23:30:57] <@Katlyn> how come?
[23:30:58] <nenolod> cause the kids will fuck over your servers
[23:31:18] <Slaapkamer> In what way?
[23:31:26] * i_pk_pjers_i (~fake@Swift-D5F0FDBE.dsl.bell.ca) Quit (Quit: Speedy mIRC Client V 13.0 --- you can't get it.)
[23:31:27] <nenolod> Slaapkamer, whatever the vulnerability of the week is.
[23:31:39] <Slaapkamer> Explain how they could?
[23:31:55] <nenolod> Slaapkamer, well, malformed queries to run remote code is a great thing bind has a reputation for
[23:32:16] * Mil|Idle (~Boom@Swift-70971B7D.dynamic.dsl.as9105.com) Quit (Connection reset by peer)
[23:32:23] <Biggy> Shower > sleep, night.. i mean morning.. i mean im going 2 sleep :~)
[23:32:53] <nenolod> Slaapkamer, bind is also very inefficient in handling large amounts of entries in a zone due to having a two level b+tree layout in the zone record mapping subsystem
[23:33:17] <nenolod> for efficiently hosting dnsbl, you need something which builds a radix trie
[23:33:29] * Rupert (rupert@got.the.internet.goin.nutz) Quit (Input/output error)
[23:33:30] <nenolod> otherwise some kid with 1000 bots can fuck over your list due to lookups being too slow
[23:33:46] * Rupert (rupert@got.the.internet.goin.nutz) has joined #swiftirc
[23:34:03] <Slaapkamer> To bad the max bots a skiddie has here is around 100-200
[23:34:24] * David (~ssh12dad9@Swift-20CFAE94.ipt.aol.com) has joined #swiftirc
[23:34:25] <nenolod> Slaapkamer, don't worry, if you operate a public blacklist, scarier kiddies will come.
[23:34:32] <David> wherez?
[23:34:43] <nenolod> Slaapkamer, i mean, i'm only talking from experience of having ran one of the most successful drone blacklists in the history of IRC
[23:34:49] <nenolod> Slaapkamer, these things get ddosed
[23:34:55] * jerrcs (jeremy@Swift-ADACCBB2.lerstenen.t3.se) has joined #swiftirc
[23:34:55] <nenolod> Slaapkamer, and it's not pretty if you use bind
[23:35:02] <Spencer> »GLØßÅL« (16:29:58) ! +Anon slaps Victoria| with a crusty penis <--- WTF :OOOOOOOOOOOOOOOOOO
[23:35:08] <jerrcs> hmm, what about bind?
[23:35:34] <Slaapkamer> And what was the name of the 'most succesfull dronebl' ?
[23:35:41] <@Katlyn> (dronebl)
[23:36:04] <Rupert> jerrcs
[23:36:09] <Rupert> kingskrown just cloned nitrousirc :(
[23:36:16] <nenolod> Slaapkamer, also you should keep in mind that script kids can team up
[23:36:23] <@Sephiroth> Is Tim still generating multi-megabyte zone files to load into bind?
[23:36:24] <Slaapkamer> I didn't ask that
[23:36:44] <@Katlyn> it comes to about 8mb
[23:36:45] <Slaapkamer> I know enough about those bastards, so other subject
[23:37:19] <@Sephiroth> Using an actual DNS server seems like overkill for dnsbl to me
[23:37:20] <nenolod> with rbldns it'd probably be about 2mb
[23:37:23] <nenolod> :)
[23:37:32] <nenolod> Sephiroth, it's not overkill, it's wrong.
[23:37:44] <nenolod> Sephiroth, as i pointed out above, bind is not properly designed to handle dnsbl
[23:37:48] <jerrcs> Rupert: wtf? really..
[23:37:56] <Rupert> yea jerrcs
[23:38:04] <nenolod> hi runedude^Wjerrcs.
[23:38:06] <jerrcs> Rupert: he botted kyles ircds awhile ago.
[23:38:11] <Rupert> Airsofter78 and some Lil_Goldfish guy was there too
[23:38:13] <jerrcs> hi nenolod. how are you doing?
[23:38:16] <Rupert> I banned all the bots with os_trace...
[23:38:41] <@Katlyn> yay for srvx
[23:38:59] <Marius> Katlyn, I'm getting tired =(
[23:39:01] <David> i lol'd at that Katlyn
[23:39:09] <Marius> Katlyn, I need more energy drinks if you intend for me to make this work
[23:39:10] <David> the way i read it..
[23:39:12] <@Katlyn> keep at it Marius
[23:39:14] <David> god i'm a nerd =[
[23:39:28] <nenolod> at any rate
[23:39:28] <jerrcs> funny I ran into you nenolod, i've convinced a network i'm oper on to switch to charybdis.. we had issues with inspircd and our current ircd, solid-ircd
[23:39:52] <nenolod> jerrcs, that's strange; i run inspircd on indymedia's private irc network fine.
[23:40:19] * David (~ssh12dad9@Swift-20CFAE94.ipt.aol.com) has left #swiftirc
[23:40:24] <jerrcs> well, the box one of our admins tried it on.... is very old
[23:40:30] <nenolod> ah.
[23:40:30] <jerrcs> from 2005
[23:40:32] <jerrcs> I think.
[23:40:37] <nenolod> our irc servers are run debian etch. :)
[23:40:39] <Marius> oh yes
[23:40:41] <Marius> "very" old
[23:41:02] * ImmortalGhost is now known as SpiderPenguin
[23:41:04] <nenolod> actually, one of them still runs sarge.