UnrealIRCd Forums

its not specialy for use with the unrealircd filter more for use with an perl script

Hi everyone

can anybody build a regex for the output of /userip

if the nick is Talustus
it would look like

/userip Talustus

Talustus*[email protected]

thx Jason it works nice thanks again but there is a second thing i need

how to block nicks like ^1907^ or ^1891^

is that rigth to gline users are using some addreses

like irc.bla.com or irc.blub.org

but not to gline some like irc.nameofnetwork.de

/spamfilter add cpnNqt gline +0 NetworkSpam irc\..+\com
/spamfilter add cpnNqt gline +0 NetworkSpam irc\..+\org
/spamfilter add cpnNqt gline +0 NetworkSpam irc ...

?
You should probably reconfigure ircdefender to add bans longer than 30 minutes...

how can i do this i have changed the modul killchan.pm from ircDefender where the following code wAS


my $killed = 0;

my %killchans;

my $gline_time = 30;

sub handle_mode {}

sub handle_topic
{
}


sub ...

@Dukat
thx fpr fast reply
i have uploaded a txt with a few /whowas and connect infos of them you can find it here

yes they say anything, they flood in PM and in channel, but always turkish things, and not the same things,

to 1: ok we will zline the ips on all servers,
to 2: yes we are running ...

hi :) we have some problem with an BotNet since 4 days every day a BotNet with many Bots is connecting to our Irc Network, they are joinig same channels somtime so i have added the channels to the killchanlist in ircdefender, but it not realy kill all Bots only a few, we have glined all the ips but ...

i have gzlined the ip Ranges and i will see and wait the next days to see what happens if we get attacked i will write an allow block

thx for your fast answer i have written an abuse mail to ATT Abuse but isnt there an opertunity to block mass connects with same IP ranges like 12.190.84.* or limit them for example only 50 Connections from one IP range (12.190.84.0-12.190.84.255) an modul or so ?

today therer are an mass connect on my Network over 1000 Floodbots are connecting in short time. i havent see them join any channels or flood
[Di 05.12.2006|15:38:03] *** Notice -- Client connecting on port 6667: abbore ([email protected]) [clients]
[Di 05.12.2006|15:38:03] *** Notice -- Client ...