Channel Takeover Recovery Manual

Those pesky channel takeovers….

<Gibblets> first off

<Gibblets> if theres no proof that a crime was done, noone can be convicted and it will continue to happen

<Gibblets> all ops in the channel should keep channel logging on at ALL times

<Gibblets> even if you're away you never know what you might catch in your log

<Gibblets> A channel takeover can happen one of a few ways...

<Gibblets> someone could op someone, and that person then kick/bans everyone and takes the chan over

<Gibblets> make SURE you know who you're opping

<Gibblets> another method of takeover is by riding a netsplit

<Gibblets> this means..

<Gibblets> in ChatNet's network of servers

<Gibblets> sometimes the connection between servers breaks off

<Gibblets> thus they don't communicate with eachother

<Gibblets> say a server splits off

<Gibblets> the takeover person jumps onto that split server

<Gibblets> on that server, your channel may not exist

<Gibblets> so the user joins the channel and has ops

<Gibblets> once the servers link together again

<Gibblets> that user is still an op

<Gibblets> now current IRC Server programs running *supposedly* prevent that

<Gibblets> but people find ways to get around everything

<Gibblets> all ChatNet servers run the most up to date IRCD (server program) around

<Gibblets> but nothing is flawless

<Gibblets> if you see a user join the channel, and a server ops them

<Gibblets> that's when they rode in on a netsplit

<Gibblets> if this user is new to you, not recognizable at all

<Gibblets> then IMMEDEATLY deop

<Gibblets> without ops the person has to resort to channel flooding

<Gibblets> alright....

<Gibblets> IF k9 is in the channel, a takeover isn't possible

<Gibblets> the user CAN kick/ban everyone and mode the channel so you can't get in, but you can ALWAYS use K9 to reverse this

<Gibblets> a simple procedure with K9 for anyone with 400 access or above is as follows

<Gibblets> ./msg k9 ban #channel *!*@*

<Gibblets> ./msg k9 part #channel

<Gibblets> ./msg k9 join #channel

<Gibblets> once K9 bans everyone

<Gibblets> he kicks everyone out

<Gibblets> once K9 parts the channel

<Gibblets> all of the channel settings are erased

<Gibblets> and when he joins again, the settings are back to normal operations

<Gibblets> all bans are undone

<Gibblets> all mode changes are undone

<Gibblets> remember

<Gibblets> dont go into shock after this ;)

<Gibblets> the culprit is still there and waiting to be caught

<Gibblets> IMMEDEATLY /whois the user

<Gibblets> gather ALL of the information you can, ctcp version, whois info, anything

<Gibblets> and paste all of this information into a file.

<Gibblets> your logs and that file combined

<Gibblets> can gline that user for a long time

<Gibblets> and have the isp notified, good chance the users account will be pulled

<Gibblets> no isp likes to be glined from a good irc network

<Gibblets> if you DONT have 450 access to K9, go to #nuthouse for help

Thats all she wrote………