Nickserv Access Lists
=====================
Version 1.2.2
Akhri mein anoovad kiya gaya sps (sps at dal.net) se tarikh 2018-02-14
Akhri mein likhwaya gaya Fredfred (Fredfred at dal.net) se tarikh
2005-11-12
Asal mein likhwaya gaya quen (quen at leafdigital.com) se tarikh
1996-02-09
Prakashit (C) 1996-2018DALnet Irc Network ki taraf se
Agar apka is document ke bare mein koi suzav ya koi mat Hoto apne
suzav hame is email par bheje (sirf ! Koi madat ki Binti nahi!) docs@dal.net. Agar apke koi aise cheeze
pe jankari chahiye jo is document mein likhwayi nahi gai hai To
kripaya Jankari is website pe dekhiye http://help.dal.net.
Parichay
--------
Yeh dastaavez aapko yeh batata hai ki kis tarah aap aur dusre
nickname ka use control mein rakh sakte hain. Jab hum "control" ki
baat karte hain toh, iska sidha sidha ishara jaata hai "access list"
ki taraf joh NickServ dwara pramanit hai. Iske alava NickServ aapko
hamesha apne nickname ko identify karne ka mauka deta hai jisse aap
apne passwrod se log in hote hain.
Agar aapne abhi tak apna nickname register nahi kiya, toh abhi
karein - sawal padein 1.2 "Nick kaise register kar sakte hain?"
Services FAQ mein se aage badne se pehle.
Akhri mein, do brief notes - jab bhi mein ek command du kuch aisa
type karne ke liye
/nickserv identify
Command kuch aisa dikhna chahiye, *except* aap required parameters
ko replace karein (here 'password') uchit information se. Udharan ke
taur par, upar agar aapka password "apple" hota toh aap asal mein
type karte
/nickserv identify apple
Jab commands shuru hote hain "/nickserv" ya "/chanserv" , alias ka
istamal hota hai message ko service ke paas securely deliver karne
ke liye. Agar aapka client command nahi samajh pata, toh fir aap yeh
karein "/quote nickserv" , ya fir "/msg nickserv@services.dal.net" .
Suchi
-----
1 * Aapko yeh jaankari rakhna kyun jaruri hai
2 * Nickname access list kya hote hain
3 * Kaise username aur hostname ki entry kar sakte hain access list
mein??
4 * Apni access list entries ko kaise change kar sakte hain?
5 * Pros aur cons kya hai address masks hone ke aapki access list mein
6 * Hostnames aur usernames ki explaination
6.1 Aapka Username
6.2 Aapka hostname
7 * Address masks ki explained
7.1 Exact
7.2 Wildcards
7.3 Kaise apne liye sahi mask chune.
7.4 Agar aapka address static hai
7.5 Agar aapka address dynamic hai
8 * Numeric hostnames
9 * Security advice aur yaad rakhne waali cheezein
10 * Summary
1 * Aapko yeh jaankari rakhna kyun jaruri hai
---------------------------------------------
DALnet aapko yeh jaankari padne ke liye kyu kehta hai:
Agar NickServ aapko baar baar password poochta hai, toh aap isko fix
kar sakte hain.
Agar aisi baat nahi hai, toh fir chances hai ki koi aapka nickname
istamal kar sakta hai *aap* agar apne nickname ka galat istamal
karein joh khamiyaza bhi bhugatna pad sakta hai.
Agar aapka access mark kaafi wide hai aur dusre users ko access deta
hai, toh yeh unko dusre channels par access bhi de sakta hain jispar
aap AOp, SOp ya founder hain.
Summary aapko yahan milegi Vibhag 10 , joh aapko sahi tarike se
bataeyga kaise "correct" access list maintain karein.
2 * Nickname access list kya hote hain
--------------------------------------
Nickname "access list" ek soochi hoti hai addresses ki jis aadhar
par aap pehchane jaate hain ek authorised user ki tarah us nickname
ke liye, bina koi password diye. Yeh exact addresses ya fir unki
range bhi ho sakte hain.
Kayi tarikein hain jisse user apne registered nickname ko istamaal
kar sakta hai.
Yeh samjhane ke liye, niche ek summary di gayi hai ki kya hota hai
jab aap log on karte ho, ya fir nickname change karte ho.
1. NickServ pehle yeh dekhta hai ki woh nickname register hai ya
nahi. Agar nahi, toh aap usse istamal kar sakte hain.
2. NickServ check karta hai ki aapka username aur hostname kahi
access list ki entries ko match karta hai ya nahi. (username aur
hostname kuch is prakar hote hain - "something@somewhere.com" joh
aapke /whois ka hissa bhi hote hain.) Agar match mil jaata hai,
toh fir woh aapko valid user samajh leta hai, aur aage koi bhi
action nahi karta.
3. NickServ ek warning bheta hai yeh batate hui yeh nick registered
hai, agar yeh aapka hai toh identify karein yeh command use karke
" /nickserv identify " Jab tak aap identify nahi
karlete nickname ko, tab tak aapko koi bhi memos, channels or
operators rights nahi mil payenge.
4. Enforce Option ab by default ON setting par rakha gaya hai. Iska
matlab 60secs ke andar nickname identify karna jarrori hai warna
aap Guest ban jayenge.
5. Jab aap nickname identify kar lete hain yeh command se "
/nickserv identify " toh aapko poore rights mil jaate
hai is nick ko use karne ke.
Agar aapko yeh sab complicated lag raha hai, toh aayiye isse ek dure
nazarie se dekhein. Ek vyakti registered nickname use karta sakta
hai agar:
1. Unka address [hostname aur username] access list ki entry se
match karta ho..
2. Command manually send kiya jaata hai. " /nickserv identify
" is tarike se.
3. Enforce ki setting OFF ki gayi hai.
4. Enforce ki setting ON ki gayo hai[is samay woh sirf 60secs ke
liye use kiya ja sakta hai.]
(Case 1 aur 2 mein aadmi ek "valid owner" hota hai nickname ka,
jiske paas access ho ko memos padneka, nickname settings ko view
karneka, aur koi bhi channel privileges ho agar us nickname ke
tahet. Agar nickname chanfge kaete hain toh identify karna jaruri
hai, case 2.)
Abh aap yeh dekh sakte hain ki "access list" kaise apni convenience
ke liye istamal kar sakte hain, kab tak aap same ISP use kar rahe
hain aur aapko hamesha paasword dene ki jarurat bhi nahi padegi.
3 * Kaise username aur hostname ki entry kar sakte hain access list
mein??
--------------------------------------------------------------------------
Yeh karne ke do tarike hain:
1. App khud yeh command run karke kar sakte hain: " /nickserv access
add " (niche dekhein)
2. Jab aap nickname register karte hain, tab ussi samay woh address
jahan se aapne registeration ki thi aapki access list mein darj
hojata hai.
4 * Apni access list entries ko kaise change kar sakte hain?
------------------------------------------------------------
Yahan kuch commands hain jisse se aap apni access list ko modify kar
sakte hain. Modify karne se pehle nidharit nickname use karein aur
usse identify karna na bhulein. Aap identify kar sakte hain yeh
command use karke...( " /nickserv identify " ) jiske baad
aap ADD or DEL kar sakte hain access list enteries ko.
Iske baad NickServ aapko aapke commands ke results dikhaeyga joh
aapne chalaein hain taaki aapko pata chalta rahe ki joh aap karne ki
koshish kar rahe hain woh add ya delete hua hain.
Agar aapki koi response nahi milta, toh fir chances hain ki NickServ
lag ho raha hai, isliye dahirya banye rakhein. Agar aap aisa kuch
msg dekhte hain "nickserv - no such nick/channel" ya fir " Services
is currently down. Please wait a few moments, and then try again. "
toh fir NickServ sahi nahi chal raha, thodi der baad try karein.
/nickserv access list
Yeh command aapko apni current access list dikhata hain
/nickserv access add
Yeh command type karne ke baad - jab aap "mask" ko ek actual
"address" se replace karte hain, agli baar jab aap connect karenge
toh aap apna nickname bina identify kiye use kar sakte hain.
/nickserv access del
Agar koi bhi "address mask" unuchit hai, insecure, ya fir jarurati
nahi raha, toh aap usse samay rehte nikal sakte hain yeh command use
karke.
5 * Pros aur cons kya hai address masks hone ke aapki access list mein
----------------------------------------------------------------------
Security advantages hain access list clear karne mein, jiska matlab
hai ki aapko hamesha NickServ ko password dena padega, Agar security
important hai toh aap yehi karein.
Note karein ki agar koi aur insan *aapke* nickname ko use karta hai
aapke access list dwara, woh critical commands jaise nick drop karna
or password change karne wale commands nahi istamal kar sakte hain.
Unhe password ke saath identify karna padega yeh sab karne ke liye.
Magar, agar kisi tarah unhe access milti hai toh ve, *aapke* saare
memos pad sakte hain aur bhej bhi sakte hain, aur channels mein
access bhi paa sakte hain jahan par aap (AOPs, SOPs, etc) hain.
Aapke naam ke channel bhi register kar sakte hain.
Agar aap apna nickname secure karna chahte hain, yeh section aapko
batata hain ki kaise aap access list wipe kar sakte hain. Aap yeh
section skip kar sakte hain agar uyeh aapko jyada moolyavaan nahi
lagta. Iske aage waale sections yeh assume karenge ki aap access
list *use* kar rahe hain.
Apni access list wipe karne ke liye, yeh command use karein:
1. Type " /nickserv identify " (jahan "password" aapke
nickname ka password hain)
2. Type "/nickserv access wipe"
Ek baar aapne access list wipe kar di, toh aapko agli baar se
hamesha identify karne ki jarurat padegi. Yeh karne ke liye type
karein:
/nickserv identify
Auto-identify karne waali scripts na banayein. Kaafi baar aap galti
se dusre network par login kar sakte hain jahan aapki yeh script ON
reh gayi toh mushkil ho sakti hai. Isse aapka password unko mil
sakta hai, aur yeh haadsa kaafi dalnet users ke saath ho chuka hai.
Agar aap apni access list clear kar chuke hain, toh iska matlab aap
access list use karna chahte hain aur aage ka document padna aapke
liye jaroori nahi reh jaata.
6 * Hostnames aur usernames ki explaination
-------------------------------------------
Jab aap mask choose karete hain add karne le liye toh sabse pehle
whois karein apne aapko. "/whois" aapka-nickname response kuch aisa
dikhega:
YourNick is ~user@009-443.provider.com * Your Silly Message
[etc]
ya fir asia kuch:
*** YourNick is ~user@009-443.provider.com (Your Silly Message)
Jaruri hissa hain, ~user@009-443.provider.com part, joh aapko apne
irc client mein dikh jayega fir chahein aap koi bhi client use kar
rahein ho.
Shuru karne se pehle: agar aapka result aisa dikhta hai
~user@124.45.230.123 - i.e. four numbers aur koi bhi words nahi
"hostname" wale part mein - toh kripa karke Vibhag 8 is guide mein.
6.1 * Aapka Username
--------------------
The "username" ka hissa hai upar likhe address mein "~user", isse
aap do hisson mein bat sakte hain - ek toh "~" joh batata hai ki
aapke paas ident server nahi hai, aur "user" jo ki actual username
hai.
Agar aap koi Unix ya VMS computer system use karte hain kis
university mein, ya kisi service proivder ke paas, toh fir aap apna
username change kar sakte hain joh aap chahte hon. [Note: mIRC
username 'email address' ko bolta hai.]
Humne joh udharan diya hai usmein, us bande ne apna username nahi
badla hai aur default username joh program ne diya hai hai woh
istmal kiya hai. Yeh kaafi common hai, par achi takneek nahi taaki
saabka username common na rahe.
(Jab aap apna username pick karte hain, toh aapne apna username ya
account name ISP par choose karna chahoye, agar aap apna email id
secure rakhna chahte hain. Yaad rakhein ki woh single word ho
letters aur numbers se bana hua, symbols se diktat ho sakte hai.)
Agar is samay aap apna username change karte hain, toh aapko IRC se
disconnect karna hoga aur firse reconnect karna hoga. Fir yeh karein
"/whois" again.
Aapko apna "username" pata hona chahiye sahi mask user karne ke liye.
6.2 * Aapka hostname
--------------------
Upar likhe user ka "hostname" hain "009-443.provider.com". Yeh
batata hai ki unka Internet Service Provider "provider.com" hain
(yeh sirf ek udharan hain), aur woh is samay machine ya phoneline
use kar rahein hain jiska number hain 09-443.
Uska hostname yahan par "dynamic" hostname hai. Dynamic hostnames
mein ek saman number ya code hota hai shuruvat mein, joh hamesha
alag ban jata hai har time jab aap apne ISP ko connect karte hain.
Kuch hostnames (udharan ke taur pe ek company ya institution ke ho)
"static" - hote hain, aur yeh har baar exactly same hostname ke hote
hain chahe aap kitni baar bhi connection wapas ISP ko lagayein.
Kuch udharan static hostnames ke:
spelt-lib.demon.co.uk
altair.dur.ac.uk
quilt.usn.blaze.net.au
puree.ugcs.caltech.edu
Kuch udharan dynamic hostnames ke:
ppp96.sagelink.net
one-pm30.norwich.net
ip022.phx.primenet.com
pc38.bgmoess-klu.ac.at
7 * Address masks ki explained
------------------------------
Sabse pehle, ek quick note ki address mask kya *nahi* include
kartein. Woh nickname portion *! include nahi karte joh aapne
channel ban masks mein dekhe honge. Aur usernames ke start mein ~
bhi nahi hona chahiye, jo /whois ke output mein dikhta hain. Ho
sakta hai ki fir who mask aapke liye kaam na kare.
Address masks do prakar ke hote hain.
7.1 * Exact
-----------
Udharan ke taur par, address mask ho sakta hain:
peter@orion.dur.ac.uk
Yeh mask un logon ko hi kaam mein aayega jinka mask exactly
"orion.dur.ac.uk" hoga, aur jinka username "peter" hoga, tab unko
identify karne ki avashakta nahi hogi.
7.2 * Wildcards
---------------
Wildcards hote hain * symbols joh aap address masks mein pa sakte
hain. Ek * symbol koi number ya alphabet se mel kha sakta hai ya fir
bilkul hi nahi..
Udharan ke liye:
"for*"
match karega "forest", "fortune", "for" - teeno se joh "for" se
shuru hote hain.
"*st"
match karega "forest", "best", "Bucharest" - un sabhi se joh
letters "st" se khatam hoga.
"f*st"
match karega "forest", "frost", "fst", "fast" - un sabhi se joh
"f" se shuru hoga aur "st" se khatam.
"f*s*t"
match karega "forest", "foresight", "frost" - un sabhi se joh "f"
se shuru hoga, aur "t" se khatam, evam "s" kahi beechmein paya
jayega.
Agar yeh sab aapko nahi samajh aaye, chinta na karein, itne complex
wildcards generally kam istamal use hote hain specific access masks
ke liye hi.
7.3 * Kaise apne liye sahi mask chune.
--------------------------------------
Abh, aapko pata hai ki aapka username aur password kya hai, aur
address static hai ya dynamic; toh abh kya?
Agar aapka hostname numeric hai - set hai 4 numbers ka, "words" ke
bajaye - aap dekhein Vibhag 8 , joh samjhata hai kaise isse niptein
- yeh hostnames alag tarike se kaam karte hain.
7.4 * Agar aapka address static hai
-----------------------------------
Correct access mask aapke liye is case mein hoga
username@hostname
Udharan ke taur par, aisa kuch dikhega:
user@009-443.provider.com
7.5 * Agar aapka address dynamic hai
------------------------------------
Aapka hostname agar dynamic hai aur badalta rehta hai toh aapko apne
hostname ka kuch hissa * se replace karna hoga kuch is tarah:
username@*.part-of-hostname-that-doesn't-change
Udharan ke taur par, aisa kuch...:
user@*.provider.com
Agar 009 hi hamesha hota hai toh kuch is tarah hoga fir:
user@009-*.provider.com
8 * Numeric hostnames
---------------------
Kabhi kabhi aapka hostname ka hisse mein koi naamke bajeye numeric
values hon:
username@A56.myprovider.com
but as a set of 4 numbers:
username@154.43.68.56
Set numbers ka - jise hum "IP address" - kehte hain woh actually
"real" host address hota hai. Normally aap joh "name" dekhte hain
woh jya aasan hota hai numbering karne ka.
Kabhi aapka hostname number format mein dikhta hai, joh lag ke karan
hota hai aapke ISP aur IRC server ke beech kisse aap connect kar
rahe hain. Is samay "name" lookup sahi nahi chalta aur number pe aa
girta hain badle mein.
Assume karte hain ki aapko generally name milta hain number ke
bajaye, toh simple solution yeh hai ki aap server change karlein aur
dusre IRC server ko connect karein. Ya fir *same* server to
re-connect karke dekheiun. Agar aap koi server ko connect karte hain
joh geographically aapke nazdeek hai, toh generally aapko "name" hi
milega naa ki "number". Aapne "number" nahi add karna chahiye access
list mein agar aapko number mil raha hai, yeh sahi tarika nahi mana
jaata.
Agar aapka hostname hamesha ya jyada karke numbers mein aata hai,
toh fir usse access list mein add kar sakte hain. Unhe deal karna
jyada aasan hota hai access mask ke dauran.
Generally "name" type ke joh hostnames hote hain, unmein se aapko
nidharit karna hota hai ki woh static ya dynamic hain; agar aap yeh
karna jaantein hai toh "numeric" ke samay aap assani se pehchaan
lenge static aur dynamic ko.
Agar aapka hostname dynamic hai toh yeh karein:
/nickserv access add
jahan par aapka username aur pehle teen number aapke /whois ka hissa
hain, aur * replace karta hai last number ko.
Agar aapka address static hai, toh charon number ko replace karein
sirf na ki last mein * ko. Udharan ke taur par:
/nickserv access add
9 * Security advice aur yaad rakhne waali cheezein
--------------------------------------------------
Agar aap chahte hain ki aap ka nickname puri tarah surakhsit rahe toh
apne access mask se saare addresses delte kardein, aur hamesha
istamal karein
/nickserv identify
command. (Dekhein Vibhag 5 is guide mein.)
Agar aapka address static hai toh
Aap apne aap ko lucky maan sakte hain, aur aap apni list mein
static address kuch is tarah daal sakenge - username@hostname .
Yeh mask ke saath koi bhi wildcards nahi hone chahiye ( * symbols)
aur hubahu aapka address waisa hi dikhna chahiye.
Delete kardein baaki masks ko apni access list se.
Kyunki aapka address static hai, yeh bilkul secure hojata hai
kyunki abh kisi aur ke paas yeh static address nahi hoga. aur koi
aapka nickname misuse nahi kar payega.
Agar aapka address dynamic hai toh
Jyada karke hum sab dynamic addresses ke shikhar hain. Iska ek
tarika yeh hai ki aap basic mask apni access list mein daalein
jisse kam se kam hani hone ke chance hon.
Agar aap apna ISP change karte hain.
Is case mein aapko naye sire se masks ya fir address add karne
poadenge. Na bhule purane waale delte karna jaruri hai warna
misuse ho sakte hain.
Ek se jyada Internet account ho to kya karein
Is case mein aapko anek masks ya addresses add karne padenge taaki
aap har account se DALnet access kar sakein.
Kripa kar ke "wide" access masks apni list mein na shaamil karein.
Yeh aapki surakhse ke liye hain.
Kabhi bhi *@* apni access list mein na dalein, ya fir access masks
jaise *@*.net, *@*.com, *@*.uk, etc, jo bahut badi taadat ke logon
ko aapke nick access karne ki anumati de denge.
Koshish karein kam se kam access masks hon
Ek access mask prati account IRC ke liye kaafi hona chahiye.
Agar aapko dikkat aati haio logon se joh aapka nickname churane ki
koshish kar rahe hain
Agar koi aapka password churane ki bharpoor koshish mein hai, toh
warnings add karein CSops ke liye jisse unhe pata ho ki yeh
jaankari kise uplabh ho sakti hain.
Haalaki yeh aaj itna mulyavaan nahi raha kyunki aaj CSops
passwords email per bhejte hain joh nickname ke saath jude hain.
Warning ke kuch udharan niche hain:
ATTENTION@dont.give.out.my.pass.to.anyone
or
ATTENTION@only.send.my.password.by.email
Aisa "fake" mask add karein, jisse CSop's ko pata rahein kya
chahtein hain.
Agar aap add kaerte hain, ki mere is email par hi password bhejein
toh sahi email ko set karna na bhulein. Set kaise karna hai, (yeh
command dekhein "/nickserv help set email" adhik jaankari ke liye.)
10 * Summary
------------
Yeh sahi tarike hain aapke access list ko "correctly" dekhne ke.
1. Type karein "/nickserv access list"
2. Type karein "/nickserv access wipe"
3. Agar aap chahte hain poori security, toh access list use karna
band kardein. Iske baad se aapko hamesha " /nickserv identify
" command chalana hoga jabhi aap DALnet pe log on
karna chahte hon. (Note: Iska ek short form bhi hai, " /identify
" , joh aapko laabdayak lage.)
4. Type "/whois YourNick" (replace karein apna nickname YourNick ke
badle. Result hoga kuch is tarike se:
YourNick is youruser@stupidnumber.hostname * Your silly message
5. Agar aap koi niumber dekhte hain hostname mein @ symbol ke baad
toh woh jyada kar dynamic address ho sakta hain. Usse add karne
ke liye use karein: " /nickserv access add
" (replace karein "youruser" aue "hostname" actual values ke
saath joh /whois command se dikhte hain.)
Agar aap koi number nahi dekh paate toh woh usse static address
bana deta hai. Fir /whois ka result kuch is taran hoga:
YourNick is youruser@hostname
Is case mein, type karein " /nickserv access add
" (replace karein "youruser" aur "hostname"
ko actual values ke saath)
6. Bus itna hi, shukriya!
----------------------------------------------------------------------
IRC: /server irc.dal.net 7000 (also port 6667)
The Web: http://www.dal.net/
DALnet Help: http://help.dal.net/
IRC FTP: ftp://ftp.dal.net/
Network! Email: help at dal.net (help), docs at dal.net (help documents),
suggest at dal.net (suggestions and comments)