Page 1 of 1
Spam bots, regex idiot
Posted: Thu Jan 19, 2006 8:27 pm
by Nettworkz
I've been setting up several spam filters for a ton of bots that have invaded our lil IRC network. Been fairly successful really.
Unfortunately today they've changed their message, and I'm too stupid to figure out the proper REGEX for it (yes, I have the regex docs, and will be studying it diligently). But is there anyone with more experience that can tell me how to block..
0Ã
Re: Spam bots, regex idiot
Posted: Thu Jan 19, 2006 10:10 pm
by Jason
[quote="Nettworkz"]
0Ã
Posted: Thu Jan 19, 2006 10:18 pm
by Syzop
hint: spamfilter strips color and control codes :P. So you need to match against the "plaintext".
Re: Spam bots, regex idiot
Posted: Thu Jan 19, 2006 11:26 pm
by Nettworkz
Jason wrote:Nettworkz wrote:
Code: Select all
/spamfilter + cpnN gzline 14d Spam Y( *\x03[0-9]{1,2}(,[0-9]{1,2})? *x03[0-9]{1,2}(,[0-9]{1,2})?.*)S\1Y\1A\1N\1i\1M\1(.\1)?\1C\1O\1M
Hmm, tried this one, doesn't seem to have worked. Note the first character isn't a Y it's actually a Ã
Posted: Fri Jan 20, 2006 12:16 am
by Syzop
Just matching on the plaintext would be sufficient.
Below is a regex that matches on "Ã
Posted: Fri Jan 20, 2006 3:27 am
by Guest
[quote="Syzop"]Just matching on the plaintext would be sufficient.
Below is a regex that matches on "Ã
Posted: Fri Jan 20, 2006 5:35 am
by Jason
Damn. Wish I would have known that when I concocted that mess of a spamfilter.
Anyhow, just because im a obsessive little freak: the [] around the space is not strictly nessecary.
Posted: Fri Jan 20, 2006 1:34 pm
by Syzop
True.
Posted: Sat Jan 21, 2006 4:18 pm
by Cavendish
hi
on my network running this rulez fine
.*Ã
Posted: Sun Jan 22, 2006 9:39 am
by McTerry
To bad I'm so stupid that I find REGEX soooooooooo hard to learn.
Posted: Sun Jan 22, 2006 6:27 pm
by aquanight
Posted: Thu Feb 02, 2006 3:29 am
by chasingsol
I got a different message from apparently the same type of bot.
Code: Select all
[MuMy] *w*V*w*.i*s*y*a*n*i*m*.Ç0m *C**A*N*L*Ã