UnrealIRCd Forums

Spamfiltering something like this is SPAMFILTER ABUSE ! Use the badword system. Look in the docs for the proper badword block format. no man channel badword aint gonna work ppl ask question but badword gonna block them all.. i want if they use like ? ? ? ? ? ? ? ? ? ? ? useless charecter then it go...

i have a problem to adding this word on spamfilter where ever i try to add this "?" it said Error in regex '?': Regular expression is too broad... but some ppl use useless character like this in the channel like <Sam> ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ...

Banning based on ctcp replies is a really bad idea... go talk to the defender people, they should probably be able to investigate into it and give you a hand. I'd offer myself, but I'm busy with other projects at the moment. Still, drop me a line and I'll try get round to it. Banning based on ctcp ...

Why not? ban realname { mask "\*"; reason "Some kind of drone"; }; hehe thanks for show me the way :) but what i gonna do for the random :( Client exiting: jpvteb (~hywr@ip24-136-41-200.ga.at.cox.net) Client exiting: zggmof (~jfiu@pcp08388265pcs.maplln01.de.comcast.net) Client e...

w00t wrote:They must have other characteristics in common... presumably nickname or something?

yeah i find they use they fullname common but they use "*" as their full name.. for this i cant ban them from ircd

Actually i need something like that if any client wont reply version then it will mark it and kill or kline cuz most of the botnet dont reply version :$ Well you could certainly make such a module, but keep in mind it will kill innocent users too. I have my client set to not respond to version repl...

Winbots wrote:ehh... http://www.neostats.net secureserv already detects many many botnets/spam/viruses

Well i tried so but secureserv only help on for some virus (litmus, trojan) kinda not botnet

w00t wrote:http://ircdefender.org/

May be able to help, maybe not. Can do regex banning and stuff... give it a whirl.

thanks bubby

Well, maybe completely undetectable by a mere automated process such as an IRCd, but us humans are naturally much more capable of investigating such a "client"'s activities and taking the necessary action ;) . Well auanight how long u can be active and investigate.. not all time i guess.....

Every botnet is different. There is no way to detect them all, and some are completely undetectable. ok then how about when name!identd@* and fullname are same .. and mirc version not respond at in this moment it will identify them. i find some botnet use this style similer nick identd fullname in ...

i was wondering if there is another module like defizzer that identify bots(botnets) and kline it..