Page 2 of 3

Re: Spamfilter for clones

Posted: Sat Feb 02, 2008 6:39 pm
by Jason
Ah. /me mangles the mangling. Stupid /who...

Spamfilter for clones

Posted: Sun Feb 03, 2008 1:01 am
by DeviL69
blablablablaZv ([email protected] - s)
blablablablaUz ([email protected] - i)
asasasasasasasaDc ([email protected] - r)

so i used this : ^(?-i)(nickhere)[A-Z][a-z]![A-Z][a-z]@[^:]+:[a-z]$
but i should put spamfilter for how many times they will change their nicks
can u better tell me how should i do if the ident is 2 letter like: Bs and real name just one small leter

(?)![A-Z][a-z]@[^:]+:[a-z]$

is that right ?

Re: Spamfilter for clones

Posted: Wed Feb 06, 2008 1:57 pm
by Jason
It will work, but won't be case sensitive, and the (?) wont do anything. (If you wanted that to be the prefix to make it case sensitive, you want (?-i) )

Re: Spamfilter for clones

Posted: Sat Sep 06, 2008 3:55 am
by HitMan69
* TMIxInrcfCBn H? ~[email protected] :1 XRefJtbDAiprTKXhIMqxCkbTyQgJKoWPuMBhmGhKhVCAKiZDH

* Sourcelx H? ~[email protected] :1 xxSWRQMIfKsEqoPyZTbIg

* dXmcl H? ~[email protected] :1 cEfIttZNmXCRUCMrjrJSgxBlpasYRhrjvhQRLdMPZYkrgFLgXk

* NACUoxVU H? ~[email protected] :1 RAgXyoVggbHAvTAIvtQYZrLQQEFKDBupEgJsmPIEZHLdyyHWt

* SourceKE H? ~[email protected] :1 olKikVfuWqPGqiowJXFGTfYJXSlQQkLGHnWaFU


can anyone give me spmafilter for those kinds os bots please?
thank you

Re: Spamfilter for clones

Posted: Thu Sep 11, 2008 4:57 am
by HitMan69
qOiyXuDfHjG was ~[email protected] * g
iAdiInZnUqB was [email protected] * g
dPwwLmUsJxO was [email protected] * j
pQdkOcClIoC was [email protected] * k
gBfuSvIfTdO was ~[email protected] * b

Re: Spamfilter for clones

Posted: Thu Sep 11, 2008 5:06 am
by Stealth
Those last 2 results are randomly generated, and there's be no spamfilter that can block them without grabbing innocent users. You should try Syzop's antirandom module, and use different conf settings until you get what you need.

Re: Spamfilter for clones

Posted: Thu Sep 11, 2008 6:27 pm
by Jobe
Stealth wrote:Those last 2 results are randomly generated, and there's be no spamfilter that can block them without grabbing innocent users. You should try Syzop's antirandom module, and use different conf settings until you get what you need.
A case sensitive spamfilter should be able to catch the last example set.

Eg:
/spamfilter add u gline - Botnet! ^(?-i)[a-z][A-Z][a-z][a-z][A-Z][a-z][A-Z][a-z][A-Z][a-z][A-Z]!~?[a-z][A-Z][a-z][a-z][A-Z][a-z][A-Z][a-z][A-Z][a-z][A-Z]@[^:]+:[a-z](?i)$

Re: Spamfilter for clones

Posted: Wed Sep 17, 2008 3:13 am
by HitMan69
* cQnsEuKeQlA Hr? ~[email protected] :0 h
* yQbbYsGgXpU Hr? ~[email protected] :0 b
* zSucAsInGwP Hr? ~[email protected] :0 i
* mOfrDcCkKyU Hr? ~[email protected] :0 b
* jIjjUhNyBxJ Hr? ~[email protected] :0 k
* fWsaYfWuKeZ Hr? ~[email protected] :0 p
* vExqUyOySbL Hr? ~[email protected] :0 q
* gAhdYtCgCjV Hr? ~[email protected] :0 f
* aJjoNdBrOjH Hr? ~[email protected] :0 m
* sIhcPlClOrV Hr? ~[email protected] :0 l
* qVhcClJnOwG Hr? ~[email protected] :0 x
* fWijDkZtHgZ Hr? ~[email protected] :0 b
* wMlrBlWfHfT Hr? ~[email protected] :0 a
* gZdoHfXnEzY Hr? ~[email protected] :0 x
* kLynGyLzLmK Hr? ~[email protected] :0 w
* zUbpXwUpDsI Hr? ~[email protected] :0 f

Re: Spamfilter for clones

Posted: Thu Sep 18, 2008 11:44 am
by Jobe
HitMan69 try:

/spamfilter add u gline - Botnet! ^(?-i)[a-z][A-Z][a-z][a-z][A-Z][a-z][A-Z][a-z][A-Z][a-z][A-Z]!~?[a-z][A-Z][a-z][a-z][A-Z][a-z][A-Z][a-z][A-Z]([a-z][A-Z])?@[^:]+:[a-z](?i)$

Re: Spamfilter for clones

Posted: Sat Oct 11, 2008 2:55 am
by HitMan69
maranello72089 was [email protected] * 6
serbia15055 was [email protected] * 2
gmc72090 was [email protected] * 6

i checked all other spamfilters but i didnt find spamfilter to block only one number on gecos

Re: Spamfilter for clones

Posted: Thu Feb 05, 2009 4:53 am
by HitMan69
FiLm75958 was [email protected] * 2
unix94082 was [email protected] * 6

Re: Spamfilter for clones

Posted: Thu Feb 05, 2009 9:03 am
by Jobe
Try something like ^[a-z]+\d{5}![a-z]+@[^:]+:\d$

Where \d means [0-9] to the regex, matching only a single numeric digit as it has no modifier to make it match more or less.

Re: Spamfilter for clones

Posted: Wed Nov 17, 2010 3:18 am
by HitMan69
Hello, i need spamfilter for bots that register their nicks with the email: [email protected]
I tried this one but it doesnt works:
spamfilter {
regex "*[email protected]*";
target private;
action gzline;
reason "Drones/Bots are banned";
};

Re: Spamfilter for clones

Posted: Wed Nov 17, 2010 11:38 am
by Syzop
It could be that the bots trying to register those nicks are using '/NS REGISTER' or '/NICKSERV REGISTER' instead of MSG'ing NickServ normally, that way spamfilter won't catch them.

Perhaps your services package has some kind of blacklist which you can use instead?

Re: Spamfilter for clones

Posted: Wed Nov 17, 2010 12:03 pm
by Syzop
I sometimes forget features which I've added myself. You can use alias::spamfilter to indicate whether an alias should go through spamfilter or not.
So, if you use for example anope: then instead of including aliases/anope.conf, you copy the contents of aliases/anope.conf to your config file and modify them, then you can have them spamfiltered.
As you can see, by default only memoserv is spamfiltered :)
PS: I don't suggest modifying aliases/anope.conf directly, as an upgrade will probably overwrite the changes.