Entry

Why does IRCPLUS (for Windows) tells my IRC client: port open (you are K-lined)

Dec 3rd, 2001 15:39
Gabriel Hernan Abre,

I have recently bought an ADSL run from a Red Hat Linux Box. I have been
chatting at www.laplatavive.com (OS: NT, irc server:IRCPLUS) with a
dialup connection. 
Upon the installation of the DSL modem I setup a site with Apache
1.3.19-5. The first time I wanted to connect through the DSL and Apache
machine I got the message:

Open port detected (you are K-lined)

from the server and I had to connect with my provider's proxy servers.

Support people at www.ircplus.com said that it was a bus in the
implementation of the Apache, but they never release much information.
After some mails with support people at ircplus, administrators of the
irc, some laggy proxy nights and some document reading and log
examination I got to the point.

Everytime someone tries to connect to and ircplus server the server
opens a connection to port 80 of the person that wants to chat but
instead of sending a GET file HTTP/1.0, it sends a:
CONNECT ircserverip:6667 HTTP/1.0
and if the Apache server does not answer 403 forbidden, that machine is
not able to connect.

My solution was to edit httpd at the second part (Server Setup) in the
part of the Root Directory and put:

<Directory />
  <Limit CONNECT>
    order deny,allow
    deny from all
  </Limit>
  Options FollowSymLinks
  AllowOverride None
</Directory>   

instead of

<Directory />
  Options FollowSymLinks
  AllowOverride None
</Directory>   
What we are doing is to deny everyone the http proxy CONNECT directive.
Be carefull if you are using Apache as a proxy for your network.

Hope it helps anyone outside in the world!! : )

mail me at: ghabre@frlp.utn.edu.ar