Skip site navigation (1)Skip section navigation (2)
Date:      26 Feb 2002 19:49:09 -0700
From:      Scott long <scott_long@btc.adaptec.com>
To:        Kris Kennaway <kris@obsecurity.org>
Cc:        Julian Elischer <julian@elischer.org>, Jordan Hubbard <jkh@winston.freebsd.org>, Matthew Dillon <dillon@apollo.backplane.com>, core@freebsd.org, "M. Warner Losh" <imp@village.org>, jake@locore.ca, cvs-committers@freebsd.org, cvs-all@freebsd.org
Subject:   Re: cvs commit: src/sys/i386/i386 exception.s genassym.c machdep. c...
Message-ID:  <1014778149.2140.70.camel@hollin.btc.adaptec.com>
In-Reply-To: <20020226183946.B78262@xor.obsecurity.org>
References:  <20020226183946.B78262@xor.obsecurity.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 2002-02-26 at 19:39, Kris Kennaway wrote:
> On Tue, Feb 26, 2002 at 03:59:18PM -0800, Julian Elischer wrote:
> > I can never get on IRC because I'm always behind some firewall or
> another
> > (something about "ident") and Im not alone..
> 
> identd is a service which is builtin to FreeBSD's inetd; you can
> enable it by uncommenting the following line in inetd.conf:
> 
> # Provide internally a real "ident" service which provides ~/.fakeid
> support,
> # provides ~/.noident support, reports UNKNOWN as the operating system
> type
> # and times out after 30 seconds.
> #
> #auth   stream  tcp     nowait  root    internal        auth -r -f -n -o
> UNKNOWN -t 30
> 
> services querying identd make incoming connections to your machine on
> the auth port (113) so your firewall needs to allow that (possibly via
> a port forwarding if you're using NAT)
> 
> Kris

I already responded to Julian privately about this, but I guess others
may benefit as well.  Yes, ident is provided via inetd as you describe,
but I believe that Julian's situation is that he's behind a firewall
that he doesn't control, and that firewall doesn't allow incoming
connections on port 113.  Thus, enabling ident has no effect on the
problem.  I've found that certain efnet servers are less picky than
others about requiring ident.  I'm not sure if it's appropriate to
publish those server names in public, but I found them by going through
the default efnet list in XChat.  Also, many years ago there used to be
an irc.freebsd.org that wasn't associated with any network but itself. 
Maybe that could be revived (Yahoo? USW?), along with some sort of
authentication system that keeps out the warez kiddies.

Scott

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1014778149.2140.70.camel>