Page 1 of 1

Anti-ClonesX sf ??

Posted: Fri Sep 23, 2005 9:13 am
by cl0ud
Hi all,

I need help on this one and hopefully can someone guide me how to block these clones, probably with spamfilter?

* Joins: [`aZ^^ (~[email protected])
* Joins: ]^]`a^ (~[email protected])
* Joins: [a][\] (~[email protected])
* Joins: [`^^`a (~[email protected])
* Joins: z^]]]a (~[email protected])
* Joins: ^Z]a[` (~[email protected])
* Joins: ^Z`\Z^ (~[email protected])
* Joins: [\Za`_ (~[email protected])
* Joins: ^Z]a[` (~[email protected])
* Joins: [a][\] (~[email protected])
* Joins: [[\a]a (~[email protected])

Their quit msgs show me "ClonesX v1.501b". They are with 6 chars in the nickname & realname, different identds & same IP. But they came from a public IP which is being used by many chatters on our network. So all i can do is channel ban like ??????!*@IP and channel flood protection settings. But i want to block them from connecting.

Any idea? Thanks.

Posted: Fri Sep 23, 2005 9:48 am
by w00t
Try using syzop's antirandom module, or using ircdefender.

Posted: Fri Sep 23, 2005 3:30 pm
by Jason
/spamfilter + u kill - ClonesX_v1.501b_bot ^[\[`aZz\\\]^]{6}!~[az_]+@

Will catch all the examples you gave me.