[Sussex] ident protocol

[Andy Smith]

On Fri, Feb 02, 2007 at 04:58:55PM +0000, Nic James Ferrier wrote:
> I never really understood IRC. I understand ident protocol even less.
> 
> I want to talk to irc.freenode.net but it now requires ident
> authentication.

I am on freenode right now without working ident.  Are you sure you
aren't confusing this with identification to your nickname as
registered with them?

> The client I want to connect from is behind a NAT router. ident
> requires that it connect to the host as discovered by a PTR lookup?

No, ident (auth) runs on port 113/tcp and they will try to connect
to the IP that you connect to them from.  So your NAT router's
address most likely.

> What's the right approach for this? Anyone know?

If you want ident to work then you need to run an identd on the NAT
router or else port forward it somewhere.  In a NAT environment
you'll probably need one of the newer identds that let you specify
the answer or just return a random/munged one.

But personally I wouldn't bother (I generally set 113/tcp to REJECT
so that remote sites give up quickly).

Cheers,
Andy

-- 
http://bitfolk.com/ -- No-nonsense VPS hosting
Encrypted mail welcome - keyid 0x604DE5DB
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://mailman.lug.org.uk/pipermail/sussex/attachments/20070202/c6a3bd7c/attachment.pgp