Nickserv Access Lists

1 · Aapko yeh jaankari rakhna kyun jaruri hai

DALnet aapko yeh jaankari padne ke liye kyu kehta hai:

Agar NickServ aapko baar baar password poochta hai, toh aap isko fix kar sakte hain.

Agar aisi baat nahi hai, toh fir chances hai ki koi aapka nickname istamal kar sakta hai aap agar apne nickname ka galat istamal karein joh khamiyaza bhi bhugatna pad sakta hai.

Agar aapka access mark kaafi wide hai aur dusre users ko access deta hai, toh yeh unko dusre channels par access bhi de sakta hain jispar aap AOp, SOp ya founder hain.

Summary aapko yahan milegi Vibhag 10 , joh aapko sahi tarike se bataeyga kaise "correct" access list maintain karein.

2 · Nickname access list kya hote hain

Nickname access list ek soochi hoti hai addresses ki jis aadhar par aap pehchane jaate hain ek authorised user ki tarah us nickname ke liye, bina koi password diye. Yeh exact addresses ya fir unki range bhi ho sakte hain.

Kayi tarikein hain jisse user apne registered nickname ko istamaal kar sakta hai.

Yeh samjhane ke liye, niche ek summary di gayi hai ki kya hota hai jab aap log on karte ho, ya fir nickname change karte ho.

NickServ pehle yeh dekhta hai ki woh nickname register hai ya nahi. Agar nahi, toh aap usse istamal kar sakte hain.
NickServ check karta hai ki aapka username aur hostname kahi access list ki entries ko match karta hai ya nahi. (username aur hostname kuch is prakar hote hain - "something@somewhere.com" joh aapke /whois ka hissa bhi hote hain.) Agar match mil jaata hai, toh fir woh aapko valid user samajh leta hai, aur aage koi bhi action nahi karta.
NickServ ek warning bheta hai yeh batate hui yeh nick registered hai, agar yeh aapka hai toh identify karein yeh command use karke /nickserv identify password Jab tak aap identify nahi karlete nickname ko, tab tak aapko koi bhi memos, channels or operators rights nahi mil payenge.
Enforce Option ab by default ON setting par rakha gaya hai. Iska matlab 60secs ke andar nickname identify karna jarrori hai warna aap Guest ban jayenge.
Jab aap nickname identify kar lete hain yeh command se /nickserv identify password toh aapko poore rights mil jaate hai is nick ko use karne ke.

Agar aapko yeh sab complicated lag raha hai, toh aayiye isse ek dure nazarie se dekhein. Ek vyakti registered nickname use karta sakta hai agar:

Unka address [hostname aur username] access list ki entry se match karta ho..
Command manually send kiya jaata hai. /nickserv identify password is tarike se.
Enforce ki setting OFF ki gayi hai.
Enforce ki setting ON ki gayo hai[is samay woh sirf 60secs ke liye use kiya ja sakta hai.]

(Case 1 aur 2 mein aadmi ek "valid owner" hota hai nickname ka, jiske paas access ho ko memos padneka, nickname settings ko view karneka, aur koi bhi channel privileges ho agar us nickname ke tahet. Agar nickname chanfge kaete hain toh identify karna jaruri hai, case 2.)

Abh aap yeh dekh sakte hain ki "access list" kaise apni convenience ke liye istamal kar sakte hain, kab tak aap same ISP use kar rahe hain aur aapko hamesha paasword dene ki jarurat bhi nahi padegi.

3 · Kaise username aur hostname ki entry kar sakte hain access list mein??

Yeh karne ke do tarike hain:

App khud yeh command run karke kar sakte hain: /nickserv access add mask (niche dekhein)
Jab aap nickname register karte hain, tab ussi samay woh address jahan se aapne registeration ki thi aapki access list mein darj hojata hai.

4 · Apni access list entries ko kaise change kar sakte hain?

Yahan kuch commands hain jisse se aap apni access list ko modify kar sakte hain. Modify karne se pehle nidharit nickname use karein aur usse identify karna na bhulein. Aap identify kar sakte hain yeh command use karke...( /nickserv identify password ) jiske baad aap ADD or DEL kar sakte hain access list enteries ko.

Iske baad NickServ aapko aapke commands ke results dikhaeyga joh aapne chalaein hain taaki aapko pata chalta rahe ki joh aap karne ki koshish kar rahe hain woh add ya delete hua hain.

Agar aapki koi response nahi milta, toh fir chances hain ki NickServ lag ho raha hai, isliye dahirya banye rakhein. Agar aap aisa kuch msg dekhte hain nickserv - no such nick/channel ya fir Services is currently down. Please wait a few moments, and then try again. toh fir NickServ sahi nahi chal raha, thodi der baad try karein.

/nickserv access list

Yeh command aapko apni current access list dikhata hain

/nickserv access add mask

Yeh command type karne ke baad - jab aap "mask" ko ek actual "address" se replace karte hain, agli baar jab aap connect karenge toh aap apna nickname bina identify kiye use kar sakte hain.

/nickserv access del mask

Agar koi bhi "address mask" unuchit hai, insecure, ya fir jarurati nahi raha, toh aap usse samay rehte nikal sakte hain yeh command use karke.

5 · Pros aur cons kya hai address masks hone ke aapki access list mein

Security advantages hain access list clear karne mein, jiska matlab hai ki aapko hamesha NickServ ko password dena padega, Agar security important hai toh aap yehi karein.

Note karein ki agar koi aur insan aapke nickname ko use karta hai aapke access list dwara, woh critical commands jaise nick drop karna or password change karne wale commands nahi istamal kar sakte hain. Unhe password ke saath identify karna padega yeh sab karne ke liye.

Magar, agar kisi tarah unhe access milti hai toh ve, aapke saare memos pad sakte hain aur bhej bhi sakte hain, aur channels mein access bhi paa sakte hain jahan par aap (AOPs, SOPs, etc) hain. Aapke naam ke channel bhi register kar sakte hain.

Agar aap apna nickname secure karna chahte hain, yeh section aapko batata hain ki kaise aap access list wipe kar sakte hain. Aap yeh section skip kar sakte hain agar uyeh aapko jyada moolyavaan nahi lagta. Iske aage waale sections yeh assume karenge ki aap access list *use* kar rahe hain.

Apni access list wipe karne ke liye, yeh command use karein:

Type /nickserv identify password (jahan "password" aapke nickname ka password hain)
Type /nickserv access wipe

Ek baar aapne access list wipe kar di, toh aapko agli baar se hamesha identify karne ki jarurat padegi. Yeh karne ke liye type karein:

/nickserv identify password

Auto-identify karne waali scripts na banayein. Kaafi baar aap galti se dusre network par login kar sakte hain jahan aapki yeh script ON reh gayi toh mushkil ho sakti hai. Isse aapka password unko mil sakta hai, aur yeh haadsa kaafi dalnet users ke saath ho chuka hai.

Agar aap apni access list clear kar chuke hain, toh iska matlab aap access list use karna chahte hain aur aage ka document padna aapke liye jaroori nahi reh jaata.

6 · Hostnames aur usernames ki explaination

Jab aap mask choose karete hain add karne le liye toh sabse pehle whois karein apne aapko. /whois aapka-nickname response kuch aisa dikhega:

YourNick is ~user@009-443.provider.com * Your Silly Message
[etc]

ya fir asia kuch:

*** YourNick is ~user@009-443.provider.com (Your Silly Message)

Jaruri hissa hain, ~user@009-443.provider.com part, joh aapko apne irc client mein dikh jayega fir chahein aap koi bhi client use kar rahein ho.

Shuru karne se pehle: agar aapka result aisa dikhta hai ~user@124.45.230.123 - i.e. four numbers aur koi bhi words nahi "hostname" wale part mein - toh kripa karke Vibhag 8 is guide mein.

6.1 Aapka Username

The username ka hissa hai upar likhe address mein "~user", isse aap do hisson mein bat sakte hain - ek toh "~" joh batata hai ki aapke paas ident server nahi hai, aur "user" jo ki actual username hai.

Agar aap koi Unix ya VMS computer system use karte hain kis university mein, ya kisi service proivder ke paas, toh fir aap apna username change kar sakte hain joh aap chahte hon. [Note: mIRC username 'email address' ko bolta hai.]

Humne joh udharan diya hai usmein, us bande ne apna username nahi badla hai aur default username joh program ne diya hai hai woh istmal kiya hai. Yeh kaafi common hai, par achi takneek nahi taaki saabka username common na rahe.

(Jab aap apna username pick karte hain, toh aapne apna username ya account name ISP par choose karna chahoye, agar aap apna email id secure rakhna chahte hain. Yaad rakhein ki woh single word ho letters aur numbers se bana hua, symbols se diktat ho sakte hai.)

Agar is samay aap apna username change karte hain, toh aapko IRC se disconnect karna hoga aur firse reconnect karna hoga. Fir yeh karein /whois again.

Aapko apna "username" pata hona chahiye sahi mask user karne ke liye.

6.2 Aapka hostname

Upar likhe user ka hostname hain "009-443.provider.com". Yeh batata hai ki unka Internet Service Provider "provider.com" hain (yeh sirf ek udharan hain), aur woh is samay machine ya phoneline use kar rahein hain jiska number hain 09-443.

Uska hostname yahan par dynamic hostname hai. Dynamic hostnames mein ek saman number ya code hota hai shuruvat mein, joh hamesha alag ban jata hai har time jab aap apne ISP ko connect karte hain.

Kuch hostnames (udharan ke taur pe ek company ya institution ke ho) static - hote hain, aur yeh har baar exactly same hostname ke hote hain chahe aap kitni baar bhi connection wapas ISP ko lagayein.

Kuch udharan static hostnames ke:

spelt-lib.demon.co.uk

altair.dur.ac.uk

quilt.usn.blaze.net.au

puree.ugcs.caltech.edu

Kuch udharan dynamic hostnames ke:

ppp96.sagelink.net

one-pm30.norwich.net

ip022.phx.primenet.com

pc38.bgmoess-klu.ac.at

7 · Address masks ki explained

Sabse pehle, ek quick note ki address mask kya nahi include kartein. Woh nickname portion *! include nahi karte joh aapne channel ban masks mein dekhe honge. Aur usernames ke start mein ~ bhi nahi hona chahiye, jo /whois ke output mein dikhta hain. Ho sakta hai ki fir who mask aapke liye kaam na kare.

Address masks do prakar ke hote hain.

7.1 Exact

Udharan ke taur par, address mask ho sakta hain:

peter@orion.dur.ac.uk

Yeh mask un logon ko hi kaam mein aayega jinka mask exactly "orion.dur.ac.uk" hoga, aur jinka username "peter" hoga, tab unko identify karne ki avashakta nahi hogi.

7.2 Wildcards

Wildcards hote hain * symbols joh aap address masks mein pa sakte hain. Ek * symbol koi number ya alphabet se mel kha sakta hai ya fir bilkul hi nahi..

Udharan ke liye:

"for*": match karega "forest", "fortune", "for" - teeno se joh "for" se shuru hote hain.
"*st": match karega "forest", "best", "Bucharest" - un sabhi se joh letters "st" se khatam hoga.
"f*st": match karega "forest", "frost", "fst", "fast" - un sabhi se joh "f" se shuru hoga aur "st" se khatam.
"f*s*t": match karega "forest", "foresight", "frost" - un sabhi se joh "f" se shuru hoga, aur "t" se khatam, evam "s" kahi beechmein paya jayega.

Agar yeh sab aapko nahi samajh aaye, chinta na karein, itne complex wildcards generally kam istamal use hote hain specific access masks ke liye hi.

7.3 Kaise apne liye sahi mask chune.

Abh, aapko pata hai ki aapka username aur password kya hai, aur address static hai ya dynamic; toh abh kya?

Agar aapka hostname numeric hai - set hai 4 numbers ka, "words" ke bajaye - aap dekhein Vibhag 8 , joh samjhata hai kaise isse niptein - yeh hostnames alag tarike se kaam karte hain.

7.4 Agar aapka address static hai

Correct access mask aapke liye is case mein hoga

username@hostname

Udharan ke taur par, aisa kuch dikhega:

user@009-443.provider.com

7.5 Agar aapka address dynamic hai

Aapka hostname agar dynamic hai aur badalta rehta hai toh aapko apne hostname ka kuch hissa * se replace karna hoga kuch is tarah:

username@*.part-of-hostname-that-doesn't-change

Udharan ke taur par, aisa kuch...:

user@*.provider.com

Agar 009 hi hamesha hota hai toh kuch is tarah hoga fir:

user@009-*.provider.com

8 · Numeric hostnames

Kabhi kabhi aapka hostname ka hisse mein koi naamke bajeye numeric values hon:

username@A56.myprovider.com

but as a set of 4 numbers:

username@154.43.68.56

Set numbers ka - jise hum IP address - kehte hain woh actually "real" host address hota hai. Normally aap joh "name" dekhte hain woh jya aasan hota hai numbering karne ka.

Kabhi aapka hostname number format mein dikhta hai, joh lag ke karan hota hai aapke ISP aur IRC server ke beech kisse aap connect kar rahe hain. Is samay "name" lookup sahi nahi chalta aur number pe aa girta hain badle mein.

Assume karte hain ki aapko generally name milta hain number ke bajaye, toh simple solution yeh hai ki aap server change karlein aur dusre IRC server ko connect karein. Ya fir same server to re-connect karke dekheiun. Agar aap koi server ko connect karte hain joh geographically aapke nazdeek hai, toh generally aapko "name" hi milega naa ki "number". Aapne "number" nahi add karna chahiye access list mein agar aapko number mil raha hai, yeh sahi tarika nahi mana jaata.

Agar aapka hostname hamesha ya jyada karke numbers mein aata hai, toh fir usse access list mein add kar sakte hain. Unhe deal karna jyada aasan hota hai access mask ke dauran.

Generally "name" type ke joh hostnames hote hain, unmein se aapko nidharit karna hota hai ki woh static ya dynamic hain; agar aap yeh karna jaantein hai toh "numeric" ke samay aap assani se pehchaan lenge static aur dynamic ko.

Agar aapka hostname dynamic hai toh yeh karein:

/nickserv access add username@154.43.68.*

jahan par aapka username aur pehle teen number aapke /whois ka hissa hain, aur * replace karta hai last number ko.

Agar aapka address static hai, toh charon number ko replace karein sirf na ki last mein * ko. Udharan ke taur par:

/nickserv access add username@154.43.68.56

9 · Security advice aur yaad rakhne waali cheezein

Agar aap chahte hain ki aap ka nickname puri tarah surakhsit rahe toh

apne access mask se saare addresses delte kardein, aur hamesha istamal karein

/nickserv identify password

command. (Dekhein Vibhag 5 is guide mein.)

Agar aapka address static hai toh

Aap apne aap ko lucky maan sakte hain, aur aap apni list mein static address kuch is tarah daal sakenge - username@hostname . Yeh mask ke saath koi bhi wildcards nahi hone chahiye ( * symbols) aur hubahu aapka address waisa hi dikhna chahiye.

Delete kardein baaki masks ko apni access list se.

Kyunki aapka address static hai, yeh bilkul secure hojata hai kyunki abh kisi aur ke paas yeh static address nahi hoga. aur koi aapka nickname misuse nahi kar payega.

Agar aapka address dynamic hai toh

Jyada karke hum sab dynamic addresses ke shikhar hain. Iska ek tarika yeh hai ki aap basic mask apni access list mein daalein jisse kam se kam hani hone ke chance hon.

Agar aap apna ISP change karte hain.

Is case mein aapko naye sire se masks ya fir address add karne poadenge. Na bhule purane waale delte karna jaruri hai warna misuse ho sakte hain.

Ek se jyada Internet account ho to kya karein

Is case mein aapko anek masks ya addresses add karne padenge taaki aap har account se DALnet access kar sakein.

Kripa kar ke wide access masks apni list mein na shaamil karein. Yeh aapki surakhse ke liye hain.

Kabhi bhi *@* apni access list mein na dalein, ya fir access masks jaise *@*.net, *@*.com, *@*.uk, etc, jo bahut badi taadat ke logon ko aapke nick access karne ki anumati de denge.

Koshish karein kam se kam access masks hon

Ek access mask prati account IRC ke liye kaafi hona chahiye.

Agar aapko dikkat aati haio logon se joh aapka nickname churane ki koshish kar rahe hain

Agar koi aapka password churane ki bharpoor koshish mein hai, toh warnings add karein CSops ke liye jisse unhe pata ho ki yeh jaankari kise uplabh ho sakti hain.

Haalaki yeh aaj itna mulyavaan nahi raha kyunki aaj CSops passwords email per bhejte hain joh nickname ke saath jude hain. Warning ke kuch udharan niche hain:

ATTENTION@dont.give.out.my.pass.to.anyone

or

ATTENTION@only.send.my.password.by.email

Aisa "fake" mask add karein, jisse CSop's ko pata rahein kya chahtein hain.

Agar aap add kaerte hain, ki mere is email par hi password bhejein toh sahi email ko set karna na bhulein. Set kaise karna hai, (yeh command dekhein /nickserv help set email adhik jaankari ke liye.)

10 · Summary

Yeh sahi tarike hain aapke access list ko "correctly" dekhne ke.

Type karein /nickserv access list
Type karein /nickserv access wipe
Agar aap chahte hain poori security, toh access list use karna band kardein. Iske baad se aapko hamesha /nickserv identify password command chalana hoga jabhi aap DALnet pe log on karna chahte hon. (Note: Iska ek short form bhi hai, /identify password , joh aapko laabdayak lage.)
Type /whois YourNick (replace karein apna nickname YourNick ke badle. Result hoga kuch is tarike se:

YourNick is youruser@stupidnumber.hostname * Your silly message
Agar aap koi niumber dekhte hain hostname mein @ symbol ke baad toh woh jyada kar dynamic address ho sakta hain. Usse add karne ke liye use karein: /nickserv access add youruser@*.hostname (replace karein "youruser" aue "hostname" actual values ke saath joh /whois command se dikhte hain.)

Agar aap koi number nahi dekh paate toh woh usse static address bana deta hai. Fir /whois ka result kuch is taran hoga:

YourNick is youruser@hostname

Is case mein, type karein /nickserv access add youruser@hostname (replace karein "youruser" aur "hostname" ko actual values ke saath)
Bus itna hi, shukriya!