MantisBT - Zandronum
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0001553Zandronum[All Projects] Suggestionpublic2013-10-21 01:272014-10-10 15:58
ReporterAlexMax 
Assigned To 
PrioritynormalSeverityminorReproducibilityN/A
StatusnewResolutionopen 
PlatformOSOS Version
Product Version1.2 
Target VersionFixed in Version 
Summary0001553: Open proxy detector
DescriptionSome IRC servers, as a matter of policy, do a quick port scan of every connecting IP address. I think that Zandronum should have something similar.

Upon connecting to the server, if a variable is set `sv_allowopenproxies`, every incoming connection would be scrutinized to see if the connector has any of the following TCP ports open - 23, 80, 1080, 3128, 8080. 23 is Telnet, 1080 is the standard port for SOCKS proxies, 3128 is the standard port for Squid proxies, 80 and 8080 are popular alternative ports for proxies. If port either 80 or 8080 are open, an HTTP request should be sent to check if it's a webserver or a proxy.

It would be impolite to port scan someone without them knowing about it. To that end, a special flag could be sent along with a query response that would cause Doomseeker to display a warning when connecting to a server that does such scanning. Such a warning could be clicked through (go ahead), clicked out of (abandon the connection attempt), or hidden forever.

A better explanation can be found here:'http://www.technerd.net/proxy.html [^]'

Also, such scans are legal under U.S. law:'http://www.law.cornell.edu/uscode/text/18/2701#c [^]'
Steps To Reproduce
Additional Information
TagsNo tags attached.
Relationships
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2013-10-21 01:27AlexMaxNew Issue

There are no notes attached to this issue.