Re: security questions

[Walter Campbell <wcampbel@xxxxxxxxxx>]

> The questions i want to ask You (i like IRCnet ircd, and I'll use it
> forever! - Because i think it is the most stable ircd) is:
> 
> 2) What is compression level between two IRC servers? I have tested but
> havent't found that (like they said) Hybrid has better compression...

The compression level depends on the data being sent.  IRCnet does not
send the name of the server in the NICK line, while Hybrid
does.  During a burst, there is more redundant data being transferred
in Hybrid, so the compression will GENERALLY be higher.  I would have
to do some testing to see the size of the compressed data that is
being transferred, but I don't see that it is too different.

On a net your size, I don't see that it would be signifigant.
(I have visited before)

> 
> 3) Can someone sniff connection between servers/clients and see what people
> talk (can someone in that way see private conversations) ?

If someone can sniff somewhere in the route between servers and other
servers, or servers and clients, then more than just conversations can
be intercepted.

> 4) Is there services available for IRCnet ircd? (MemoServ, OperServ, i am
> not interested in NickServ and ChanServ)

There is a NoteServ (Connects as a services (S: line in
ircd.conf)) available at http://irc.fu-berlin.de/noteserv/ (This may
require some tweaking in order to work)

There is a patch to IRC Services at
http://ender.shadowfire.org/ircservices/listarchive/msg00505.html 
I have not tried this so it may or may not work.  It is a full
services pack, so you may not wish to use it if you do not want a
nickserv or chanserv.

It wouldn't take too much effort for a programmer to write a simple
OperServ that links in as a pseudoserver.

I am also currently modifying a Hybrid StatServ that I wrote to
support IRCnet 2.10.x.  It's still in testing but appears to be
functional.  (It links in as a server, not a service)