Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : IRC and DDoS

[flashwebhost]

Hi,

Have seen that many data center won't allow IRC as it attract DDoS.

But how exactly this happen ? IRC is just like any other internet service ? Even WebHostingTalk runs its own IRC channel #WHT.

Few days back i found a client running IRC script on the server. The script is available for download from

http://cgiirc.sourceforge.net/

Running this on the server will attract DDoS ?

Regards,

Yujin

[Daver]

The script above just provides access to a IRC CHannel, what gets attacked (some almost constantly) are the IRC servers themselves. Alot of kids with scripts like to hang out on IRC, botnets are controlled via IRC servers as well (well alot of botnets are) so..

[andreyka]

WHT don't calculate IRC traffick. He can flood a lot of Gb traffick.

[flashwebhost]

Thanks for the info. So running CGI IRC on the server will not attract DDoS ?

[andreyka]

CGI IRC may be used for shared liiegal kontent or sofrware. If you don't want deal with FBI you will block it.

[Steven]

Originally posted by flashwebhost
Thanks for the info. So running CGI IRC on the server will not attract DDoS ?

its not cgi irc that attracts it, its the users using them. If the user pisses off the wrong person, sure it will bring ddos.

[the--dud]

I totaly endorse the no-irc policy of webhosts and NOCs.
As mentioned earlier here, the users that use irc(through your server) might attract unwanted attacks on your server. Users acts like a moron, a wannabe hacker traces him to your server ip, and hell breaks loose.

I wouldn't feel comfortable having critical content on a server, or in a NOC, that allows irc.

[Daver]

I think you are all failing to realize what CGI-IRC is, its a CGI Based IRC CLIENT! not a server, so when the user connects to the given IRC server it will show the USERS IP not anything on what Client they are using unless he appends his website to the code, this would not Violate anyone TOS/AUP for NO IRC Servers, as it is not a server, its a web based client, like the Java IRC Clients out there today