Norm Tallant | 25 Mar 2010 04:34
Picon

Hello, I'm a newbie!

I thought I'd give ratbox a go, and it's actually a bit overwhelming...
cool! :)

Is there any documentation on setting up the icrd.conf file or any
tutorials out there?  I've run into what's most likely a dumb n00b
conundrum, and I wanna rtfm before asking questions... ;)

All the best,
-norm

Rob Weissenburger | 25 Mar 2010 05:15
Favicon

Re: Hello, I'm a newbie!

On 3/24/2010 10:34 PM, Norm Tallant wrote:
> I thought I'd give ratbox a go, and it's actually a bit overwhelming...
> cool! :)
>
> Is there any documentation on setting up the icrd.conf file or any
> tutorials out there?  I've run into what's most likely a dumb n00b
> conundrum, and I wanna rtfm before asking questions... ;)
>
> All the best,
> -norm
>
> _______________________________________________
> ircd-ratbox mailing list
> ircd-ratbox <at> lists.ratbox.org
> http://lists.ratbox.org/cgi-bin/mailman/listinfo/ircd-ratbox
>
>
>    
The ircd.conf.example gives a good example of what each item is in it. 
If you have specific questions on any item, I think anybody would be 
willing to help.
Norm Tallant | 25 Mar 2010 15:00
Picon

Re: Hello, I'm a newbie!

> > I thought I'd give ratbox a go, and it's actually a bit
overwhelming...
> > cool! :)
> >
> > Is there any documentation on setting up the icrd.conf file or any
> > tutorials out there?  I've run into what's most likely a dumb n00b
> > conundrum, and I wanna rtfm before asking questions... ;)
> >
> > All the best,
> > -norm
> >

> The ircd.conf.example gives a good example of what each item is in it.
> If you have specific questions on any item, I think anybody would be
> willing to help.

Thanks for the reply, I appreciate it!

Though I've idled in plenty of channels in my day, I've previously only
set up one ircd and it was a simple unreal server running on Windows.
I'm trying ratbox because the ratbox-services sound interesting.  

In the case of my ratbox server I've decided to try ircd-ratbox-3.0.6
with ratbox-services-1.2.3 running on a Fedora 12 vm under esxi.  The
Fedora firewall is disabled and the port forwarding on my hardware
router/firewall is working.  My goal is to have a working ircd I with
ssl enforced when connecting.  The error I get when trying to connect is
this:

* Connecting to my.server.external.dns.name (my.exter.nal.ip) port
(Continue reading)

Norm Tallant | 25 Mar 2010 15:20
Picon

Re: Hello, I'm a newbie!

 > You are trying to connect via SSL on a non-ssl port, try 11101.

 I thought that as well, but when I try that:

 /server my.server.external.dns.name +11101
 * Connecting my.server.external.dns.name (my.exter.nal.ip) port
 11101...
 * Connection failed. Error: Connection refused

 I have the port forwarding in my router/firewall set to forward 11001
as
 well as 11101 to 192.16.1.15.

 All the best,
 -norm

Narf | 25 Mar 2010 15:32
Picon

Re: Hello, I'm a newbie!

Well, then it probably binds the ssl port on your ipv6 address, try this:

listen {
         aftype = ipv4;
         port = 11001;
         host = "192.168.1.15";
         sslport = 11101;

         aftype = ipv6;
         host = "3ffe:1234:a:b:c::d";
         port = 11001;
};

Quoting Norm Tallant <abnorm <at> wiretap.be>:

>  > You are trying to connect via SSL on a non-ssl port, try 11101.
>
>  I thought that as well, but when I try that:
>
>  /server my.server.external.dns.name +11101
>  * Connecting my.server.external.dns.name (my.exter.nal.ip) port
>  11101...
>  * Connection failed. Error: Connection refused
>
>  I have the port forwarding in my router/firewall set to forward 11001
> as
>  well as 11101 to 192.16.1.15.
>
>  All the best,
>  -norm
(Continue reading)

Norm Tallant | 25 Mar 2010 16:08
Picon

Re: Hello, I'm a newbie!

> Connection refused indicates otherwise.

Yup, I've thought the same thing.  I've quadruple-checked the port
forwarding, recreated it into one big range, rebooted everything.... all
to no effect.  It occurs to me that I'll get a 'connection refused' when
I try to connect when the ircd service isn't running; is it possible
that ssl needs a daemon?  I've never heard of such a thing, but you
never know ;)

All the best,
-Norm

Norm Tallant | 26 Mar 2010 23:54
Picon

Re: Hello, I'm a newbie!

Just to give a follow up:

To rule out that it was some incompatibility with Fedora, I tried this
on a fresh Debian install with no software firewall.  Unfortunately, I
get the same errors.  I'm really stuck! :(

I really, truly, honestly believe that this isn't a firewall issue, and
it is instead a configuration issue.  I get the same errors trying to
connect from localhost, and if I connect to my server without ssl I do
get scolded for not having ssl and get the spoof text from ircd.conf.

Is there any way to turn on extended logging?

All the best,
-Norm

	  

Norm Tallant | 27 Mar 2010 00:05
Picon

Re: Hello, I'm a newbie!

Also, could my woes stem from how I created the key?

These are the commands I followed to create the key files:

openssl genrsa -des3 -out rhel.key 1024
openssl req -new -key rhel.key -out rhel.csr
cp rhel.key rhel.key.org
openssl rsa -in rhel.key.org -out rhel.key
openssl x509 -req -days 7300 -in rhel.csr -signkey rhel.key -out
rhel.cert
openssl dhparam -out rhel.pem 1024

All the best,
-norm

mog | 27 Mar 2010 00:07

Re: Hello, I'm a newbie!

Can you connect to it okay without using SSL?

On 26/03/2010 22:54, Norm Tallant wrote:
> Just to give a follow up:
>
> To rule out that it was some incompatibility with Fedora, I tried this
> on a fresh Debian install with no software firewall.  Unfortunately, I
> get the same errors.  I'm really stuck! :(
>
> I really, truly, honestly believe that this isn't a firewall issue, and
> it is instead a configuration issue.  I get the same errors trying to
> connect from localhost, and if I connect to my server without ssl I do
> get scolded for not having ssl and get the spoof text from ircd.conf.
>
> Is there any way to turn on extended logging?
>
> All the best,
> -Norm
>
> 	
>
> _______________________________________________
> ircd-ratbox mailing list
> ircd-ratbox <at> lists.ratbox.org
> http://lists.ratbox.org/cgi-bin/mailman/listinfo/ircd-ratbox
>    
mog | 27 Mar 2010 00:07

Re: Hello, I'm a newbie!

A keygen script is included in the ratbox distribution, it might be 
worth trying to use that first.

On 26/03/2010 23:05, Norm Tallant wrote:
> Also, could my woes stem from how I created the key?
>
> These are the commands I followed to create the key files:
>
> openssl genrsa -des3 -out rhel.key 1024
> openssl req -new -key rhel.key -out rhel.csr
> cp rhel.key rhel.key.org
> openssl rsa -in rhel.key.org -out rhel.key
> openssl x509 -req -days 7300 -in rhel.csr -signkey rhel.key -out
> rhel.cert
> openssl dhparam -out rhel.pem 1024
>
> All the best,
> -norm
>
> _______________________________________________
> ircd-ratbox mailing list
> ircd-ratbox <at> lists.ratbox.org
> http://lists.ratbox.org/cgi-bin/mailman/listinfo/ircd-ratbox
>    

Gmane