eggdrop icon indicating copy to clipboard operation
eggdrop copied to clipboard

telnet flood protection doesnt cover multiple hosts

Open michaelortmann opened this issue 4 years ago • 0 comments

dcc.c:detect_telnet_flood() only matches last seen host. A telnet flood from user A is not detected, if in the meantime, user B telnets the bot. In other words, someone with control over at least 2 hosts can circumvent the telnet flood protection.

Fixing this requires switching from last seen host logic to a bigger data structure. This issue would make for a good first time PR for a new eggdrop coder.

michaelortmann avatar Jan 24 '21 12:01 michaelortmann