After server list is cycled through without having any valid certificates, disconnect #422

New Issue

2026-10-05T04:19:58+02:00

adam commented

2026-10-05 04:19:58 +02:00

I got disconnected from one network which doesn't have valid certificate at 3:47:23+0200 and now it's 07:33+0200 and I am at computer and can accept the certificate.

This network has 4 servers specified and scrollback looks like ZNC has been cycling between these 4 servers for hours.

I got disconnected from one network which doesn't have valid certificate at 3:47:23+0200 and now it's 07:33+0200 and I am at computer and can accept the certificate. This network has 4 servers specified and scrollback looks like ZNC has been cycling between these 4 servers for hours.

adam closed this issue

2026-10-05 04:19:58 +02:00

adam commented

2026-10-05 04:19:59 +02:00

oh and I am on ZNC - 1.5.0-git-414-3201146 - http://znc.in
IPv6: yes, SSL: yes, DNS: threads, charset: no

oh and I am on ZNC - 1.5.0-git-414-3201146 - http://znc.in IPv6: yes, SSL: yes, DNS: threads, charset: no

adam commented

2026-10-05 04:19:59 +02:00

In case of MitM, it could be a temporary problem. When attacker stopped attacking, the same server would connect fine. Do you want every one-second attack to make ZNC just stop attempts to connect to the right server?
Check that ServerThrottle setting is > 0. That way it won't hammer server with failed connects.

1. In case of MitM, it could be a temporary problem. When attacker stopped attacking, the same server would connect fine. Do you want every one-second attack to make ZNC just stop attempts to connect to the right server? 2. Check that ServerThrottle setting is > 0. That way it won't hammer server with failed connects.

adam commented

2026-10-05 04:20:00 +02:00

In case of MitM, it could be a temporary problem. When attacker stopped attacking, the same server would connect fine. Do you want every one-second attack to make ZNC just stop attempts to connect to the right server?

I said that there are four servers specified and ZNC cycled between them all for hours until I attached to it and noticed the issue. Of course one-second attack might not make sense, but if it continues for longer period of time like some hours stopping connection attempts would make sense.

Check that ServerThrottle setting is > 0. That way it won't hammer server with failed connects.

10

> 1. In case of MitM, it could be a temporary problem. When attacker stopped attacking, the same server would connect fine. Do you want every one-second attack to make ZNC just stop attempts to connect to the right server? I said that there are four servers specified and ZNC cycled between them all for hours until I attached to it and noticed the issue. Of course one-second attack might not make sense, but if it continues for longer period of time like some hours stopping connection attempts would make sense. > 1. Check that ServerThrottle setting is > 0. That way it won't hammer server with failed connects. 10

adam commented

2026-10-05 04:20:01 +02:00

If attack stopped after 1 hour, 3 more hours it won't connect, until you come to computer?
Exponential backoff in case of connection errors would help.

If attack stopped after 1 hour, 3 more hours it won't connect, until you come to computer? Exponential backoff in case of connection errors would help.

adam commented

2026-10-05 04:20:02 +02:00

I think better solution for this which would work for everyone would be fixing https://github.com/znc/znc/issues/67.

I think better solution for this which would work for everyone would be fixing https://github.com/znc/znc/issues/67.

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: adam/znc#422