*** SpringTank_ is now known as SpringTank | 00:32 | |
BZNotify | master @ bzflag-listkeymgr: timriker pushed 1 commit (https://github.com/BZFlag-Dev/bzflag-listkeymgr/compare/ab6a0b89ca78...43808f39cc97): | 00:59 |
---|---|---|
BZNotify | master @ bzflag-listkeymgr: timriker 43808f: config is global (https://github.com/BZFlag-Dev/bzflag-listkeymgr/commit/43808f39cc973730fccb401661c0db74669f2455) | 00:59 |
BZNotify | master @ bzflag-bzfls: timriker pushed 2 commits (https://github.com/BZFlag-Dev/bzflag-bzfls/compare/fa1e19dd37ad...a2ef514fac7d): | 01:01 |
BZNotify | master @ bzflag-bzfls: timriker 23cee1: IP mismatch is a warning now (https://github.com/BZFlag-Dev/bzflag-bzfls/commit/23cee176af0db1a27309a48ec55bebd85e6a504c) | 01:01 |
BZNotify | master @ bzflag-bzfls: timriker a2ef51: not always my.bzflag.org (https://github.com/BZFlag-Dev/bzflag-bzfls/commit/a2ef514fac7d0499dcfbcb14b48f77d7f21226c0) | 01:01 |
blast007 | uh, why would that be a warning? | 01:08 |
blast007 | if it's just a warning, then someone else can delete a server that doesn't belong to them | 01:17 |
TimRiker | they can't delete it if they don't have the key, right? | 01:17 |
TimRiker | same for an add. they need to know the private key for the server domain and they should not know that. | 01:18 |
blast007 | oh, you only changed it on the ADD, so a server with a mismatched IP can't remove itself when it shuts down | 01:19 |
blast007 | The ADD code doesn't check *which* key was used. Just that *a* key was used. | 01:22 |
TimRiker | remove should also provide and check the server key. Not sure if it's currently providing it. | 01:22 |
*** Zehra <Zehra!~Yukari@user/yukari> has joined #bzflag | 01:23 | |
blast007 | is this for IPv6 support? | 01:23 |
TimRiker | ah. sure enough. the requested nameport should be checked agaist keyinfo['host'] | 01:23 |
TimRiker | eventually, yes. right now, just getting my dev lane working. | 01:24 |
blast007 | No, that's not enough. Anyone can make a key for any hostname they want. | 01:24 |
TimRiker | even if the same hostname already exists? that does not sound like a Good Thing to me. | 01:24 |
blast007 | that's why we compare the request IP to the IP of the server hostname :) | 01:25 |
TimRiker | cept that won't work with multi-homed servers. or dual stack servers. | 01:25 |
blast007 | sure it can. It's just that we're using a function that only resolves a single IPv4 address. | 01:26 |
blast007 | https://www.php.net/manual/en/function.dns-get-record.php | 01:26 |
blast007 | that one can fetch multiple records | 01:26 |
blast007 | though if you just want A and AAAA records, I think you need to make two calls to the function | 01:27 |
TimRiker | dns won't have the ipv6 mngtmpaddr address that a host might use for outgoing web requests. or, the server might be behind an out going web proxy, which would also mean it's outbound ip won't be the same as it's inbound ip. | 01:28 |
blast007 | would bzfs even make use of a web proxy? | 01:30 |
TimRiker | we could have the user set their credentials in the web server config, then get a user token before doing an add or remove. Not sure the extra step is worth it. Seems to me we just stop users from registering the same fqdn that another user already registered. If camping becomes an issue, we could do some kind of validation on add/delete. Have to think about that. | 01:31 |
TimRiker | on some networks I've been on, yes. the outbound proxy is automatic on the network. | 01:31 |
blast007 | the ADD action adds or *updates* a server | 01:31 |
TimRiker | right. | 01:31 |
TimRiker | it's more of a NOTIFY than an add. :) | 01:32 |
*** Cobra_Fast_ is now away: vacant | 01:33 | |
*** Cobra_Fast_ is back | 01:33 | |
TimRiker | Here on IRC, my IP from hexchat is NOT the same IP that incoming requests would use, for example. | 01:34 |
TimRiker | It appears that Ubuntu by default, does allow incoming ssh to that temp address. That's not recommended process. | 01:37 |
TimRiker | I suppose I could change the Listen in sshd_config to get that behavior. | 01:38 |
*** Cobra_Fast_ is now away: vacant | 02:06 | |
*** Cobra_Fast_ is back | 02:06 | |
*** Zehra <Zehra!~Yukari@user/yukari> has quit IRC (Ping timeout: 260 seconds) | 02:39 | |
*** Yukari <Yukari!~Yukari@user/yukari> has joined #bzflag | 02:48 | |
*** Yukari <Yukari!~Yukari@user/yukari> has quit IRC (Ping timeout: 255 seconds) | 02:52 | |
*** Yukari <Yukari!~Yukari@user/yukari> has joined #bzflag | 02:53 | |
*** Flash <Flash!~Flash@user/flash> has quit IRC (Read error: Connection timed out) | 03:06 | |
*** Flash <Flash!~Flash@user/flash> has joined #bzflag | 03:07 | |
*** Yukari <Yukari!~Yukari@user/yukari> has quit IRC (Ping timeout: 260 seconds) | 03:12 | |
*** _I_Died_Once <_I_Died_Once!~I_Died_On@73.184.170.223> has quit IRC (Ping timeout: 252 seconds) | 04:39 | |
*** Sgeo <Sgeo!~Sgeo@user/sgeo> has quit IRC (Read error: Connection reset by peer) | 08:03 | |
*** FastLizard4 is back | 08:23 | |
*** cods <cods!~fred@82-65-232-44.subs.proxad.net> has quit IRC (Ping timeout: 252 seconds) | 08:49 | |
*** cods <cods!~fred@82-65-232-44.subs.proxad.net> has joined #bzflag | 08:51 | |
*** FastLizard4 is now away: AWAY from keyboard | 09:07 | |
*** FastLizard4 is now away: GONE - Screen Detached and Disconnected from IRC (I'm probably asleep, at work, or doing something in real life) | 09:23 | |
BZNotify | master @ bzflag: blast007 pushed 38 commits (https://github.com/BZFlag-Dev/bzflag/compare/a408a1473fe3...f69a433493bf): | 11:51 |
BZNotify | master @ bzflag: blast007 f69a43: Merge origin/2.4 into master (using imerge) (https://github.com/BZFlag-Dev/bzflag/commit/f69a433493bf29fa7c13d90e144921fd33ae5b26) | 11:51 |
*** I_Died_Once <I_Died_Once!~I_Died_On@c-73-184-170-223.hsd1.ga.comcast.net> has joined #bzflag | 11:52 | |
*** _I_Died_Once <_I_Died_Once!~I_Died_On@73.184.170.223> has joined #bzflag | 13:28 | |
*** I_Died_Once <I_Died_Once!~I_Died_On@c-73-184-170-223.hsd1.ga.comcast.net> has quit IRC (Ping timeout: 255 seconds) | 13:30 | |
*** Sgeo <Sgeo!~Sgeo@user/sgeo> has joined #bzflag | 15:39 | |
*** Sgeo_ <Sgeo_!~Sgeo@user/sgeo> has joined #bzflag | 17:21 | |
*** Sgeo <Sgeo!~Sgeo@user/sgeo> has quit IRC (Ping timeout: 260 seconds) | 17:25 | |
*** FastLizard4 is back | 19:29 | |
*** FastLizard4 is now away: AWAY from keyboard | 20:57 | |
*** Optic_Delusion <Optic_Delusion!~Optic_Del@pool-173-75-132-196.pitbpa.fios.verizon.net> has joined #bzflag | 23:32 | |
*** Optic_Delusion_ <Optic_Delusion_!~Optic_Del@2600:4041:19d:2d00:6433:e1fe:450d:c399> has quit IRC (Ping timeout: 248 seconds) | 23:32 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!