mIRC Home    About    Download    Register    News    Help

Print Thread
Joined: Dec 2011
Posts: 1
D
Mostly harmless
OP Offline
Mostly harmless
D
Joined: Dec 2011
Posts: 1
An ident server is suppose to return the user ID of the user who owns an active connection. When I connect to my windows machine on port 113 from another machine and query any ports, it always returns the same response. Even if I query invalid ports like -1. e.g. the ident query is "-1,-1" and the response is "-1,-1 : USERID : UNIX : username". Is there a reason for this?

Also, many IRC servers require an ident server to be running. Supposedly this increases the identification of clients. But does this really help? mIRC's ident server can return whatever response the user desires so does what authentication does it provide?

Thanks

Joined: Dec 2002
Posts: 3,138
C
Hoopy frood
Offline
Hoopy frood
C
Joined: Dec 2002
Posts: 3,138
When IRC was developed it was expected that most users would be connecting from systems controlled by someone else and which prevented users from running their own identd servers or changing the reply. Ident responses could therefore be trusted as much as the remote system administrator could be trusted. Most people now have full control of their own systems and can run anything they like on port 113, so the identd response could no longer be trusted even if mIRC itself followed the specification, so mIRC doesn't bother.

The presence of an identd response can still be a useful indicator though, since most IRC drones and floodbots don't have them. If a channel gets attacked then it may be able to place a ban on *!~*@* and still retain most of its genuine users.

True identd is still used when IRC eggdrop/bouncer providers need to set up trusted connection agreements with IRC networks.


Link Copied to Clipboard