To create new wiki account, please join us on #znc at freenode and ask admins to create a wiki account for you. You can say thanks to spambots for this inconvenience.

Difference between revisions of "Using ident spoofs with identserver and iptables"

From ZNC
Jump to: navigation, search
(Created page with "{{Languages}} If you don't want to install oidentd, but still want proper idents - username@host instead of ~username@host, this is what you can try. =...")
 
m (Point to new identserver.cpp)
Line 9: Line 9:
 
== How it's done ==
 
== How it's done ==
  
1. Download the identserver module from [http://znc-msvc.googlecode.com/svn/trunk/main/znc-msvc/modules/extra_win32/identserver.cpp here].
+
1. Download the identserver module from [https://raw.github.com/KiNgMaR/znc/msvc/win32/extra_modules/identserver.cpp here].
  
2. Open it with a text editor, remove this line:
+
2. Open it with a text editor and replace
  #include "stdafx.hpp"
 
and replace
 
 
   m_serverPort = 113;
 
   m_serverPort = 113;
 
with
 
with

Revision as of 00:25, 7 February 2014

If you don't want to install oidentd, but still want proper idents - username@host instead of ~username@host, this is what you can try.

What you need

  • You need root access.
  • You need iptables.(iptables --version shouldn't say "command not found")
  • You need a compiler.

How it's done

1. Download the identserver module from here.

2. Open it with a text editor and replace

 m_serverPort = 113;

with

 m_serverPort = 11300;

3. Save the cpp file.

4. compile this module and copy the .so file to your modules folder.

5. Load the module into ZNC. It's a global module.

6. Add this iptables rule:

 iptables -t nat -A PREROUTING -p tcp -d 1.2.3.4 --dport 113 -j DNAT --to 1.2.3.4:11300

Replace both instances of 1.2.3.4 with your server's IP. If you have multiple "vhosts", you need to issue this command once for each IP.

7. That's it. If you did everything correctly, ZNC can now send ident replies without oidentd.

iptables info

The rule from above will not stick across restarts. On Gentoo, you can use

 /etc/init.d/iptables save

to make it stick.

To delete/remove the rule, use the same command as above, but insert -D instead of -A:

 iptables -t nat -D PREROUTING -p tcp -d 1.2.3.4 --dport 113 -j DNAT --to 1.2.3.4:11300

Enjoy!