Why Are Canadian Sympatico Users Being Banned On EFNet?
An anonymous reader asks: "After being away from IRC for over a year, changing ISPs and moving my physical self to another apartment, tonight I tried to get back on EFnet. With a brand new IP, and a brand new computer, I discovered that all over EFnet, all channels related to Linux are banning all Canadian Sympatico users, this includes high speed customers, dial up users, and business users. In fact, the ban is quite severe and bans the entire sympatico.ca domain. I've tried to message several operators in #linux, #linuxhelp, and #slackware, but nobody is responding. What's going on?"
Somebody on Sympatico was being such an ass when a ChanOp had a bad day, managed to get a different IP, so anything from Sympatico was blocked.
Hmmm... banning subnets... where have we heard that before?
The Canadian government has been working on a bill to make open source software illegal....only commercially sold and supported software will be legal as of June 1st 2003.
This all stems from the fact that the Canadian government has been in negotiations to sell British Columbia to Microsoft since 1999.
or at least it used to be. that covers quite a few hundred thousand norwegian uses as well (adsl, isdn and modem). i also tried messaging ops to find out what was going on, and never got a response. in the end i just figured; fuck it! do i really want to be on a channel with people willing to gag half a nation (online/telenor is the biggest norwegian isp) just to shut up a few noicemakers? my advice is to find yourself a channel with less braindead operators. shouldn't be hard :-)
Acts@core.mailboks.com Acrux@core.mailboks.com Adam@core.mailboks.com Adar@core.mailboks.com Ada@core.mailboks.com
This brings up an interesting question, which is whether I can help out a friend by routing her IRC traffic or his for her/him, if I have a large server up a lot. I'm not sure I would do it open-to-the-public, but as something for a friend, why not?
2) Anyone who gets posted to slashdot and hangs out on IRC probably has enough techie friends that one of them would be willing to host such a service.
So, a better ask-slashdot might be:
How do I route around draconian ban-by-subnet IRC policies?
Philosophers ask WHY. Engineers ask HOW.
Canada is infamous for its scriptkiddies. As long as its impossible to positively ID a particular person due to IP-jumping, ident-changing and so forth, the only solution is to set an ISP-wide or country-wide ban.
Blame it on the kiddies. If it gets too noisy due to a single country/ISP, then the only logical solution is to ban that country/ISP.
In addition, EFNet#linux and other EFNet channels are infamous for beeing non-friendly and not very helpfull. You would do much better using Openprojectsnet or whatever its named right now. Much more friendly.
"Rune Kristian Viken" - http://www.nwo.no - arca
http://mind.riot.org/muh/
There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
Channel politics are flakey at the best of time, all it takes is some idiot in a country to say summat wrong to a chanop and there banned. Another widespred ban on few networks is *.aol.com, as people on technical channels dont belive that "technology wise" people could possibly use AOL. It's these generalisations that end up with domain bans due to a few users spoiling it for the rest.
As for banning ISPs, all it takes is a few "scriptkiddies" to come onto a technical channel with there MP3 scripts and l33tsp34k to annoy a few ChanOps and boom...perma-ban
For further note, i am a Chanop on various channels on the HashNet network, and yes people do get domain banned for stupid reasons. Maybe this will just give you more of a insight.
"What do you mean you have no ice? Do you expect me to drink this coffee hot?" - Random Customer, Clerks
Don't just blame draconian ops, it is more of an act of desperation. In undernet we take so much crap from kiddies that 99% of the time happen to be coming from .ro, simpatico.ca (its so bad we call them simpaticrap, go figure), .no and .mx . I have personally banned .mx and .ro temporarily a few times from #asp on undernet because once a kiddie puts his/her mind into making you miserable it will take minutes to max out the ban list. Only reason we cannot ban .no and .ca is that too many innocent people will get hit.
Pedro
----
The Insomniac Coder
I'm not a sympatico user, I'm a DALnet user and channel operator instead. While I've never set such a broad ban myself, I know of many channels which have banned sympatico. Apparrently there was an extremely major spammer on sympatico, who kept jumping IPs, simply to the point that operators were forced to ban the entire domain.
So there is a reason for it, though I do agree it is a bit severe.
*!~*1@*.*
*!~*2@*.*
*!~*3@*.*
*!~*4@*.*
*!~*5@*.*
*!~*6@*.*
*!~*7@*.*
*!~*8@*.*
*!~*9@*.*
these bans are to stop a set of what looks like some type of automated scripts finding trojan'd and wingate type machines to join the channel and spew two lines off garbage and part.
optonline.net is the only massive ban enforced in #linuxhelp due to constant trollage.
-- botsex is {grep;touch;strip;unzip;head;mount}
People might say it's not that easy, but it really is. There are several ISPs that operate EVERYWHERE that Sympatico does, and offers their services at a SUBSTANTIALLY lower cost. I switched over to iStop (http://www.istop.com) a few months ago, and I'm loving it.
I suggest you inquire in the newsgroup can.internet.highspeed about a good ISP in your area, I'm sure Bob Carrick will point you towards his excellent ISP website.
If you're wondering why iStop doesn't offer 3.5mbit residential atm, it's because Bell raised the price for all new lines, and iStop decided they'd rather stop offering the service for new customers than charge old customers way less than what they charge new customers. Ralph Doncaster, owner of iStop, has said that he fully expects Bell Nexxia to once again offer the lower prices for 3.5mbit lines, so he'll be able to offer it again in the future.
I'd imagine that if, when you called, you asked them to take stronger actions against those who do damage to the symaptico.ca name, their representative would say: "Huh? What's IRC? Have you plugged your modem in, sir?"
Yes, and if the IRCOps got a similar response, then that's why the block is in place.
If an ISP isn't willing to take action to curb malicious use by it's customers, it deserves to be blocked.
Disclaimer: I work for a small ISP in Canada, and have dealt with this sort of thing before (although with email, not IRC.)
This isn't just a problem in IRC channels, on messageboards you'll often get a few trolls hell bent on crap flooding the forums (wait... this is Slashdot why am I saying something that's gotta be freaking obvious. Achem)
.rbl.openproxy-rbl.org or whatever on the end of the IP and sees if there's a response. If there is it drops the connection like it's carrying the plague (or Code Red as the case might be). Simple, and easy to cache seeing as you can just have a local BIND running to cache results for hosts who commonly connect.
Anyways, what I certainly think might be nice is to have an RBL-like system somewhere that scans for open proxies and automatically blacklists them. When your server recieves a connection, it just sticks
First, nothing begins if not opening
As an operator in #linux on EFNet I feel I should chime in. We do not have a ban on *sympatico.ca, the only ban we have related to sympatico is Kitchener-HSE-ppp*.sympatico.ca. It is far more likely that you attempted to join on a system account or do not have identd working. A quick search on google will find our homepage with channel rules and howto's, including why we require identd and resources on installing it. And lets not forget that #linux is not a bunch of operators who are power happy. We volunteer our time to help people with linux. We help hundreds of people every day, and our "draconian" rules are what keep the channel flowing. It is not easy to work in a channel with 125 people doing whatever they want to do, so make sure that people follow some basic rules. If we see repeated abuse from an ISP our policy is to contact that ISP and work towards a resolution that does not require the banning of a large group of people. If we cannot work something out we will ban that ISP, however, usually a few weeks of getting banned from the channel on join will discourage the most pissed off kiddie, and when that ban is no longer in use it is removed. I would also like to state that most of the people I have heard complain about our policies are those that join the channel for a bit of handholding. If you join please remember that we are not paid to help you, and demands are not appreciated. We take special care not to ban out of hand, so if you are banned you did something wrong. http://www.efnetlinux.net/rules.html
If your using mIRC 6, you can go through a proxy to change your IP address, I know of a few proxys that Efnet, Dalnet and Quakenet don't detect. I'm not sure if Efnet and Dalnet allow it,Q uakenet doesn't allow it, but you can still do it. Here is one that Quakenet can detect, i'll give another one out to you if you email me, but if I gave it out publicly I doubt it'd be fast anymore. fll-vodsl61-cust204.mpowercom.net and use port 3128
that beeing said, your signature (below) sums up my feelings about these wide bans quite nicely.
Acts@core.mailboks.com Acrux@core.mailboks.com Adam@core.mailboks.com Adar@core.mailboks.com Ada@core.mailboks.com
Baning an entire domain is the lazy way out.
A lazy but otherwise good Op is almost as bad as a regular bad Op.
Dark Nexus
"Sanity is calming, but madness is more interesting."
I think that the rise in 24 hour connected broadband access by the masses has given rise to 24 hour connected relays that script kiddies from other countries may utilize.
Judging by the large number of formmail.pl attempts that my servers get, QWest (aka USWest) gets my vote for most (infectiously) deployed proxy servers out there. .cn domains (of course they might not be remote controlled) come next, then South America, and finally Canada.
I have noticed that the spammers are trying harder to stay under the radar more lately. A few months ago, the hosts they infected with their relay software would spam thousands of targets a day. Now they seem to distriute the load a bit more, returning after a few days to a week to try to not look so obviously infected.
I was stunned when I read the real technical reason why abusers can't just be banned -- twenty five bans per channel is all you get? Something needs to change on the technical side, then, not on the "whiny lamers who complain that they can't get onto channel #xyz because a few people from their domain/country pissed us off once" side.
I completely recognize the challenges faced by the average IRC channel. IRC is, by design, a public interface, so keeping out someone who's determined to get in is difficult. I understand that banning thousands or tens of thousands of users/IPs/whatevers can be cumbersome for the humans involved and painful for the machines who have to parse the lists whenever someone wants in, but please, 25 bans and you're done?
Why can't the EFnet IRC daemons automatically ban just the IP address where massive floods come from (massive meaning more than a few hundred lines -- you shouldn't be punished for accidentally pasting the output from "select * from user;" apart from the brutal tongue lashings from your fellowes :)? Or even a subnet? More importantly, even if nothing else could be changed about EFnet's software, why oh why can't people be "whitelisted" back in?
This kind of thing probably wouldn't annoy people so much if they'd at least get a response from a channel operator or an explanation from the server itself. To simply ignore someone from a specific domain, specifically inquiring (in a polite fashion) about gaining access to your channel, is rude and infuriating. I know, for every ten "polite inquiries" you receive, nine of them are probably from l33t skript kiddi3z trying to smooch their way back in to make your life hell, but such is the way of the IRC channel operator's life.
I've dealt with my share of nuisances, but then again I've never run into a cap on the number of bans I can apply either (admittedly, I don't use EFnet, so it could just be a difference in IRC daemon software or something). It's a bitch, but that's what I get for donning the cap of a channel op.
I don't mean to insult or offend, here; I'm just seriously trying to offer insight into why people get so damned angry about stuff like this. I probably wouldn't get too irritated if I were suddenly banned as the result of a mass-ban. I'd probably try to get in contact with somebody who might be able/willing to help, engage them in conversation if they're willing to talk, and go away if they're not. I know it's hard for both sides -- hell, I bet the abusive ones are annoyed too (*grin*) -- but the whole IRC thing would probably work a bit more smoothly if people weren't always so eager to switch into Complete and Utter Bastard(tm) mode.
Read my stuff.