HELP!!

These are old archives. They are kept for historic purposes only.
Post Reply
Death
Posts: 4
Joined: Thu Aug 03, 2006 1:14 am

HELP!!

Post by Death »

Well.. first i have to tell you i don't speak english very well as you can see

my VERY problem is with some guy who do some spam and the spamfilter doesn't response... for example

i have this (im not spamming!)

spamfilter {
regex "*m i p a r a n a*";
target { private; channel; private-notice; channel-notice; away; };
action gline;
reason "4Publicidad NO autorizada. Visite...";
};

and he do this: [06:10:51] <El-Juli_264> un toque vsiiten mi page (:P W W W · M I P A R A N A · T K :D)

any body can help with this? this guy use some symbol? or why the spamfilter doesn't work? read this: if i put the SAME spam with bold (exactly the same whay he do) the spamfilter gline me!

one more question, if i add spamfilters with the command (/spamfilter ad.. etc), when i restart the server, it's gone? becouse i add every spam with the conf.

i tryed everything
thanks you and sorry again for my english.
White_Magic
Posts: 267
Joined: Tue Jan 18, 2005 3:24 pm
Location: Scotland - United Kingdom

Re: HELP!!

Post by White_Magic »

Death wrote: spamfilter {
regex "*m i p a r a n a*";
target { private; channel; private-notice; channel-notice; away; };
action gline;
reason "4Publicidad NO autorizada. Visite...";
};

and he do this: [06:10:51] <El-Juli_264> un toque vsiiten mi page (:P W W W · M I P A R A N A · T K :D)
hi, let me explain some to you...

spamfilter not need bold or colours it take away this so dont use bold or colour :)
also you have bad regex in spamfilter -> regex "*m i p a r a n a*";
try --> regex "vsiiten mi page \( .+ \)";
i spend 4 hrs a day gaming and 14hrs on irc, for 5days a week, im not an addict :D
Death
Posts: 4
Joined: Thu Aug 03, 2006 1:14 am

Post by Death »

Hi, thanks for your answer.

i can't put "toque vsiiten mi page" becouse he put in the moment and he change everytime (is a guy, not a bot)....
i have to add in the spamfilter the web (and i have it)..
my question is why the spamfilter doesn't work

he said "m i p a r a n a" and i have the regex and nothing...
is he using some symbols or something? why if i copy and paste the spam the spamfilter kick me out? and don't do nothing with him?
i know the conf only work in local (it's not a problem)

Thanks you again.
Jobe
Official supporter
Posts: 1180
Joined: Wed May 03, 2006 7:09 pm
Location: United Kingdom

Post by Jobe »

Try using the regex: .*m.?i.?p.?a.?r.?a.?n.?a.*

The reason hes not getting blocked by your regex is because hes not using normal spaces but your regex is.
Death
Posts: 4
Joined: Thu Aug 03, 2006 1:14 am

Re

Post by Death »

Thanks you all!!! I relly don't know if it's working (Jobe regex's idea) but anywhy it's good idea !! and it's make easy catch up spams! I will stay arround for anything...

:)
Death
Posts: 4
Joined: Thu Aug 03, 2006 1:14 am

Hi again

Post by Death »

Im sorry for boder you again, i have this problem.

spamfilter {
regex "\.tk";
target { private; channel; private-notice; channel-notice; away; };
action shun;
reason "4Publicidad NO autorizada. Visite ";
};
spamfilter {
regex "\. t k";
target { private; channel; private-notice; channel-notice; away; };
action shun;
reason "4Publicidad NO autorizada. Visite ";
and it's continue (the forum don't let me show more spaces, but i have that way)
Let me explain to you, this guy connect to our webchat and it permit do spaces, for example: h___o___l____a ( _ are spaces )
now if i use .* or .?{1,10} it's block another things.
the big problem is dynamic ip and he reconnect and boder again.


Thanks you again.
aquanight
Official supporter
Posts: 862
Joined: Tue Mar 09, 2004 10:47 pm
Location: Boise, ID

Post by aquanight »

If he uses the same nick/user/realname, you could spamfilter on that.

Also, since this is a person, it might be worth it to do some ISP contacting :) .

Anyway, you can always use \s to catch most forms of space, but I don't know if this can cover the nonbreaking space character that appears in the upper-ASCII range (and is probably different in different codepages). If you don't use such characters a lot you could use something like: (\s|[\x80-\xFF]), but that's only suitable for 100% english networks, which seems unlikely in this case.

So for example: \.\s*t\s*k

(Btw, all backslashes must be doubled when used in the .conf file (but not at the /spamfilter cmd), so for the .conf it'd be \\.\\s*t\\s*k.)
Post Reply