Spamfilter for clones
Re: Spamfilter for clones
Ah. /me mangles the mangling. Stupid /who...
Why the hell can't my signature be empty?
"Your message contains too few characters."
"Your message contains too few characters."
Spamfilter for clones
blablablablaZv (Cr@87.250.108.22 - s)
blablablablaUz (Ai@210.2.46.31 - i)
asasasasasasasaDc (Dj@200.127.65.245 - r)
so i used this : ^(?-i)(nickhere)[A-Z][a-z]![A-Z][a-z]@[^:]+:[a-z]$
but i should put spamfilter for how many times they will change their nicks
can u better tell me how should i do if the ident is 2 letter like: Bs and real name just one small leter
(?)![A-Z][a-z]@[^:]+:[a-z]$
is that right ?
blablablablaUz (Ai@210.2.46.31 - i)
asasasasasasasaDc (Dj@200.127.65.245 - r)
so i used this : ^(?-i)(nickhere)[A-Z][a-z]![A-Z][a-z]@[^:]+:[a-z]$
but i should put spamfilter for how many times they will change their nicks
can u better tell me how should i do if the ident is 2 letter like: Bs and real name just one small leter
(?)![A-Z][a-z]@[^:]+:[a-z]$
is that right ?
Re: Spamfilter for clones
It will work, but won't be case sensitive, and the (?) wont do anything. (If you wanted that to be the prefix to make it case sensitive, you want (?-i) )
Why the hell can't my signature be empty?
"Your message contains too few characters."
"Your message contains too few characters."
Re: Spamfilter for clones
* TMIxInrcfCBn H? ~gclzlmvlb@997C46D.1754B818.83168410.IP :1 XRefJtbDAiprTKXhIMqxCkbTyQgJKoWPuMBhmGhKhVCAKiZDH
* Sourcelx H? ~jbclfkmqy@Disponohu.at-D9B18889.dhcp.oxfr.ma.charter.com :1 xxSWRQMIfKsEqoPyZTbIg
* dXmcl H? ~azuwkdaio@Disponohu.at-20E3E932.telebecinternet.net :1 cEfIttZNmXCRUCMrjrJSgxBlpasYRhrjvhQRLdMPZYkrgFLgXk
* NACUoxVU H? ~yvzudmgad@FF400007.1CAACB4A.43DBB67E.IP :1 RAgXyoVggbHAvTAIvtQYZrLQQEFKDBupEgJsmPIEZHLdyyHWt
* SourceKE H? ~xdddaa@Disponohu.at-AA32B1.static.rvsd.ca.charter.com :1 olKikVfuWqPGqiowJXFGTfYJXSlQQkLGHnWaFU
can anyone give me spmafilter for those kinds os bots please?
thank you
* Sourcelx H? ~jbclfkmqy@Disponohu.at-D9B18889.dhcp.oxfr.ma.charter.com :1 xxSWRQMIfKsEqoPyZTbIg
* dXmcl H? ~azuwkdaio@Disponohu.at-20E3E932.telebecinternet.net :1 cEfIttZNmXCRUCMrjrJSgxBlpasYRhrjvhQRLdMPZYkrgFLgXk
* NACUoxVU H? ~yvzudmgad@FF400007.1CAACB4A.43DBB67E.IP :1 RAgXyoVggbHAvTAIvtQYZrLQQEFKDBupEgJsmPIEZHLdyyHWt
* SourceKE H? ~xdddaa@Disponohu.at-AA32B1.static.rvsd.ca.charter.com :1 olKikVfuWqPGqiowJXFGTfYJXSlQQkLGHnWaFU
can anyone give me spmafilter for those kinds os bots please?
thank you
Re: Spamfilter for clones
qOiyXuDfHjG was ~zAqlXgZiZ@60.Red-88-4-49.staticIP.rima-tde.net * g
iAdiInZnUqB was ~dVynRpCuC@193.152.160.50 * g
dPwwLmUsJxO was ~pLrvPqAaJ@89.7.58.254 * j
pQdkOcClIoC was ~mZgkQpQjS@77.226.148.60 * k
gBfuSvIfTdO was ~aCjhQwCnE@c-71-196-122-44.hsd1.fl.comcast.net * b
iAdiInZnUqB was ~dVynRpCuC@193.152.160.50 * g
dPwwLmUsJxO was ~pLrvPqAaJ@89.7.58.254 * j
pQdkOcClIoC was ~mZgkQpQjS@77.226.148.60 * k
gBfuSvIfTdO was ~aCjhQwCnE@c-71-196-122-44.hsd1.fl.comcast.net * b
-
- Head of Support
- Posts: 2086
- Joined: Tue Jun 15, 2004 8:50 pm
- Location: Chino Hills, CA, US
- Contact:
Re: Spamfilter for clones
Those last 2 results are randomly generated, and there's be no spamfilter that can block them without grabbing innocent users. You should try Syzop's antirandom module, and use different conf settings until you get what you need.
Re: Spamfilter for clones
A case sensitive spamfilter should be able to catch the last example set.Stealth wrote:Those last 2 results are randomly generated, and there's be no spamfilter that can block them without grabbing innocent users. You should try Syzop's antirandom module, and use different conf settings until you get what you need.
Eg:
/spamfilter add u gline - Botnet! ^(?-i)[a-z][A-Z][a-z][a-z][A-Z][a-z][A-Z][a-z][A-Z][a-z][A-Z]!~?[a-z][A-Z][a-z][a-z][A-Z][a-z][A-Z][a-z][A-Z][a-z][A-Z]@[^:]+:[a-z](?i)$
Your IP: 
Your Country:

Your Country:

Re: Spamfilter for clones
* cQnsEuKeQlA Hr? ~pVarMdXiH@C49AF094.A32D812E.E00AF668.IP :0 h
* yQbbYsGgXpU Hr? ~rRmjBnMgL@9D439970.5591026F.A745D76D.IP :0 b
* zSucAsInGwP Hr? ~gMzgTsEbY@114FA81B.2CE592E0.69361366.IP :0 i
* mOfrDcCkKyU Hr? ~tEmvRfEnC@114FA81B.2CE592E0.69361366.IP :0 b
* jIjjUhNyBxJ Hr? ~gLdgUqXqG@114FA81B.2CE592E0.69361366.IP :0 k
* fWsaYfWuKeZ Hr? ~kIijHrYcN@FF7EF2F1.2CE592E0.69361366.IP :0 p
* vExqUyOySbL Hr? ~gYffTuDzS@FF7EF2F1.2CE592E0.69361366.IP :0 q
* gAhdYtCgCjV Hr? ~dUeiYpIqV@FF7EF2F1.2CE592E0.69361366.IP :0 f
* aJjoNdBrOjH Hr? ~bQzsBdGaM@2EAA6B49.2CE592E0.69361366.IP :0 m
* sIhcPlClOrV Hr? ~pQekWlVkQ@2EAA6B49.2CE592E0.69361366.IP :0 l
* qVhcClJnOwG Hr? ~pWtjYxQjC@2EAA6B49.2CE592E0.69361366.IP :0 x
* fWijDkZtHgZ Hr? ~vUrgFqWtA@58EDDBEB.2CE592E0.69361366.IP :0 b
* wMlrBlWfHfT Hr? ~uIsuRyJbO@58EDDBEB.2CE592E0.69361366.IP :0 a
* gZdoHfXnEzY Hr? ~qBolSaBhB@58EDDBEB.2CE592E0.69361366.IP :0 x
* kLynGyLzLmK Hr? ~fVccNqTqQ@62F89CA.7487E1C9.36F8D075.IP :0 w
* zUbpXwUpDsI Hr? ~rRtsOjYgR@C49AF094.A32D812E.E00AF668.IP :0 f
* yQbbYsGgXpU Hr? ~rRmjBnMgL@9D439970.5591026F.A745D76D.IP :0 b
* zSucAsInGwP Hr? ~gMzgTsEbY@114FA81B.2CE592E0.69361366.IP :0 i
* mOfrDcCkKyU Hr? ~tEmvRfEnC@114FA81B.2CE592E0.69361366.IP :0 b
* jIjjUhNyBxJ Hr? ~gLdgUqXqG@114FA81B.2CE592E0.69361366.IP :0 k
* fWsaYfWuKeZ Hr? ~kIijHrYcN@FF7EF2F1.2CE592E0.69361366.IP :0 p
* vExqUyOySbL Hr? ~gYffTuDzS@FF7EF2F1.2CE592E0.69361366.IP :0 q
* gAhdYtCgCjV Hr? ~dUeiYpIqV@FF7EF2F1.2CE592E0.69361366.IP :0 f
* aJjoNdBrOjH Hr? ~bQzsBdGaM@2EAA6B49.2CE592E0.69361366.IP :0 m
* sIhcPlClOrV Hr? ~pQekWlVkQ@2EAA6B49.2CE592E0.69361366.IP :0 l
* qVhcClJnOwG Hr? ~pWtjYxQjC@2EAA6B49.2CE592E0.69361366.IP :0 x
* fWijDkZtHgZ Hr? ~vUrgFqWtA@58EDDBEB.2CE592E0.69361366.IP :0 b
* wMlrBlWfHfT Hr? ~uIsuRyJbO@58EDDBEB.2CE592E0.69361366.IP :0 a
* gZdoHfXnEzY Hr? ~qBolSaBhB@58EDDBEB.2CE592E0.69361366.IP :0 x
* kLynGyLzLmK Hr? ~fVccNqTqQ@62F89CA.7487E1C9.36F8D075.IP :0 w
* zUbpXwUpDsI Hr? ~rRtsOjYgR@C49AF094.A32D812E.E00AF668.IP :0 f
Re: Spamfilter for clones
HitMan69 try:
/spamfilter add u gline - Botnet! ^(?-i)[a-z][A-Z][a-z][a-z][A-Z][a-z][A-Z][a-z][A-Z][a-z][A-Z]!~?[a-z][A-Z][a-z][a-z][A-Z][a-z][A-Z][a-z][A-Z]([a-z][A-Z])?@[^:]+:[a-z](?i)$
/spamfilter add u gline - Botnet! ^(?-i)[a-z][A-Z][a-z][a-z][A-Z][a-z][A-Z][a-z][A-Z][a-z][A-Z]!~?[a-z][A-Z][a-z][a-z][A-Z][a-z][A-Z][a-z][A-Z]([a-z][A-Z])?@[^:]+:[a-z](?i)$
Your IP: 
Your Country:

Your Country:

Re: Spamfilter for clones
maranello72089 was ~hall@80.80.170.161 * 6
serbia15055 was ~totti@81.172.117.33 * 2
gmc72090 was team@83.142.245.240 * 6
i checked all other spamfilters but i didnt find spamfilter to block only one number on gecos
serbia15055 was ~totti@81.172.117.33 * 2
gmc72090 was team@83.142.245.240 * 6
i checked all other spamfilters but i didnt find spamfilter to block only one number on gecos
Re: Spamfilter for clones
FiLm75958 was ~michael@195.8.11.99 * 2
unix94082 was ~Mo@84.255.134.51 * 6
unix94082 was ~Mo@84.255.134.51 * 6
Re: Spamfilter for clones
Try something like ^[a-z]+\d{5}![a-z]+@[^:]+:\d$
Where \d means [0-9] to the regex, matching only a single numeric digit as it has no modifier to make it match more or less.
Where \d means [0-9] to the regex, matching only a single numeric digit as it has no modifier to make it match more or less.
Your IP: 
Your Country:

Your Country:

Re: Spamfilter for clones
Hello, i need spamfilter for bots that register their nicks with the email: aha@live.com
I tried this one but it doesnt works:
spamfilter {
regex "*aha@live.com*";
target private;
action gzline;
reason "Drones/Bots are banned";
};
I tried this one but it doesnt works:
spamfilter {
regex "*aha@live.com*";
target private;
action gzline;
reason "Drones/Bots are banned";
};
Re: Spamfilter for clones
It could be that the bots trying to register those nicks are using '/NS REGISTER' or '/NICKSERV REGISTER' instead of MSG'ing NickServ normally, that way spamfilter won't catch them.
Perhaps your services package has some kind of blacklist which you can use instead?
Perhaps your services package has some kind of blacklist which you can use instead?
Re: Spamfilter for clones
I sometimes forget features which I've added myself. You can use alias::spamfilter to indicate whether an alias should go through spamfilter or not.
So, if you use for example anope: then instead of including aliases/anope.conf, you copy the contents of aliases/anope.conf to your config file and modify them, then you can have them spamfiltered.
As you can see, by default only memoserv is spamfiltered
PS: I don't suggest modifying aliases/anope.conf directly, as an upgrade will probably overwrite the changes.
So, if you use for example anope: then instead of including aliases/anope.conf, you copy the contents of aliases/anope.conf to your config file and modify them, then you can have them spamfiltered.
As you can see, by default only memoserv is spamfiltered

PS: I don't suggest modifying aliases/anope.conf directly, as an upgrade will probably overwrite the changes.