UnrealIRCd Forums

hi,

F kill 0 385629 86400 advertiser Fred!~[email protected] without *
F kill 0 385636 86400 advertiser Fred!~[email protected] ircd.myan


i cant remove it .. no type :<

Another problem ..

[12:03pm] *** epuwq (~[email protected]) has joined #chatzone
[12:03pm] *** epuwq (~[email protected]) has left #chatzone
[12:03pm] *** gehuuzfbpxbun (~[email protected]) has joined #chatzone
[12:03pm] *** gehuuzfbpxbun (~[email protected]) has left #chatzone
[12:03pm] *** gehuuzfbpxbun (~[email protected]) has joined #chatzone
[12:03pm] *** gehuuzfbpxbun (~[email protected]) has left IRC (Client exited)
[12:03pm] *** kszr (~[email protected]) has joined #chatzone
[12:03pm] *** kszr (~[email protected]) has left #chatzone

what is the exact syntax for spamfilter to kill them? (matching this random nickname and random ident mask.)
thanks

webmonkey wrote:hi,

F kill 0 385629 86400 advertiser Fred!~[email protected] without *
F kill 0 385636 86400 advertiser Fred!~[email protected] ircd.myan


i cant remove it .. no type :<

Another problem ..

[12:03pm] *** epuwq (~[email protected]) has joined #chatzone
[12:03pm] *** epuwq (~[email protected]) has left #chatzone
[12:03pm] *** gehuuzfbpxbun (~[email protected]) has joined #chatzone
[12:03pm] *** gehuuzfbpxbun (~[email protected]) has left #chatzone
[12:03pm] *** gehuuzfbpxbun (~[email protected]) has joined #chatzone
[12:03pm] *** gehuuzfbpxbun (~[email protected]) has left IRC (Client exited)
[12:03pm] *** kszr (~[email protected]) has joined #chatzone
[12:03pm] *** kszr (~[email protected]) has left #chatzone

what is the exact syntax for spamfilter to kill them? (matching this random nickname and random ident mask.)
thanks

the type is " F "
/spamfilter - F Kill - - without *
/spamfilter - F Kill - - ircd.myan
or
/spamfilter del F Kill - - without *
/spamfilter del F Kill - - ircd.myan

/spamfilter add u gzline - - ^.+!.+@.+464B8CD1\.BC5725C4\.IP:.+
is the filter u`ll want to try... but this maybe ban innocents, if so then
/spamfilter add u gzline - - ^.+!.+@D31D253A\.464B8CD1\.BC5725C4\.IP:.+

will ban only this IP (which he uses all the time)

If it's not a silly question if he uses the same IP all the time why not just GZline the IP straight off rather then having a spamfilter to it?

thus why i added a broader regex beforehand...

White_Magic wrote:thus why i added a broader regex beforehand...

Hello white_magic thanks you ... to help me ..
but i still cant remove it ..
the error is

09:04pm] -irc.ucsy.edu.mm- Unknown target type 'F'
[09:04pm] -irc.ucsy.edu.mm- Use: /spamfilter [add|del|remove|+|-] [type] [action] [tkltime] [tklreason] [regex]

/spamfilter add u gzline - - ^.+!.+@D31D253A\.464B8CD1\.BC5725C4\.IP:.+
this one is for ip ban right ..

Actually we cant ban that ips. .. because more than half of users use that proxies to join our network ( mean that users are behind firewall )

Can u help me out without banning IP thanks you

Most attacks happen through insecure proxies, which are open for anyone to use. If users are using an open proxy that gets banned, then they need to go find themselves a secure proxy (one that asks for a username and password).

Other than banning the open proxies, there is no way to stop such attacks without putting a massive load on your IRCd. It is a risk you take when you allow users to connect through abused open proxies.

A new question about blocking spam done through alias was here, but has been split off to a new topic: How to block spam done through /MS and /MEMOSERV

The F means that the filter is global, set through the /spamfilter command, not through the config file (f, local).

ok fair enuff, except how did they add a spamfilter with no target? thou

I have no idea. It should have thrown an error. Perhaps invalid server-server protocol. It's not checked as well as client-server.