Away Message
I find it pretty lame to block that stuff.
I mean come on, can't you even put your own website/ircserver in your whois info? (like in realname, or in away [odd, but..])... I even think it's quite common to do that.. I mean, I know quite some friends that have their website named as realname.
Spamming to me is when someone goes advertise unwanted stuff to everyone.. so mass msg'ing privately/in-channel/whatever.
So I can definately understand codemastr's concerns here.
I was more like thinking of a worm sending 'hi' to everyone, and then [if someone msgs back you see the away reason in either status/in-window, or without replying for the people that have whois-on-query... ] they see some url in red that would exploit an IE bug and put the worm on your computer...
That sounds a tad more useful/interresting :P
I mean come on, can't you even put your own website/ircserver in your whois info? (like in realname, or in away [odd, but..])... I even think it's quite common to do that.. I mean, I know quite some friends that have their website named as realname.
Spamming to me is when someone goes advertise unwanted stuff to everyone.. so mass msg'ing privately/in-channel/whatever.
So I can definately understand codemastr's concerns here.
I was more like thinking of a worm sending 'hi' to everyone, and then [if someone msgs back you see the away reason in either status/in-window, or without replying for the people that have whois-on-query... ] they see some url in red that would exploit an IE bug and put the worm on your computer...
That sounds a tad more useful/interresting :P
-
- Former UnrealIRCd head coder
- Posts: 811
- Joined: Sat Mar 06, 2004 8:47 pm
- Location: United States
- Contact:
The simple fact that it talks about an IRC server doesn't make it spam. If I privmsg my friend and say, "I'll be away, but you can find me on irc.xxxxxxx.net" is that spam? No, I sent it to *one* person. For all you know the reason pills there has put that as his away reason is because he is away, and is currently active on that other server. So if someone desperately needs to contact him, they can go to that server to get him.pills is [email protected] * pills
pills is connecting from *@195.x.x.x
pills is a registered nick
pills using xxx.net http://www.x.net
pills is away: irc.xxxxxxxxx.net
pills has been idle 28secs, signed on Thu Jul 08 16:36:22
pills End of /WHOIS list.
But the users *chose* to install those scripts. That means they *want* to see the away message. That is NOT unsolicited. Unsolicited by definition means unwanted. If it is wanted, it is not spam. And if the user requests it (which he/she did when he/she decided to install that script) then it means the user wanted to see it.most of mirc script when you you say hi to user script auto /whois in active windows or some script send away massage to users /status.
This advertises are also can be colourfull. Cant we blok these ?
-- codemastr
-
- Head of Support
- Posts: 2086
- Joined: Tue Jun 15, 2004 8:50 pm
- Location: Chino Hills, CA, US
- Contact:
If you don't want certain things in away messages, the simplest thing right now would be to make a bot that issues a "/who *" every so often and /whoises the people why have the away (G) flag set.
In mIRC, this can probably be done with less than 10 lines of code.
(BTW, don't ask me to code something in mIRC if you don't know how, I just wont do it for ya.)
*locked*
In mIRC, this can probably be done with less than 10 lines of code.
(BTW, don't ask me to code something in mIRC if you don't know how, I just wont do it for ya.)
*locked*
The simple fact that it talks about an IRC server doesn't make it spam. If I privmsg my friend and say, "I'll be away, but you can find me on irc.xxxxxxx.net" is that spam? No, I sent it to *one* person. For all you know the reason pills there has put that as his away reason is because he is away, and is currently active on that other server. So if someone desperately needs to contact him, they can go to that server to get him.
You might be right for one person who away like you thing.
But i talk about 2000 user on 1 server and 10000+ messages has been sent to users all day. And those messages are not like thing you are. Messeages ussualy and always are include sex and adult web pages addresses and spam adult contents. those url links include trojens and trojens mirc scripts. Users download those trojen and affects very badly. You thing the users select their script concuasly. But it wont. Most of users dont know what is the select "active /whois query" . So that away messages are turn unwanted. You can test those messages in our irc server which is irc.rekor.net . if you hold on just for 30 min you can see how many away massages shows in your active windows and whats those url include which address. You also can think thats not spam but we also want to learn how to blok those away messages couse we strongly thing that is high risk SPAM. So you can filter those away messages optionaly. So other admins dont use that blok if they dont thing SPAM. If teorikly not available to filter away messages we thing completely remove all away messages from our server.
You might be right for one person who away like you thing.
But i talk about 2000 user on 1 server and 10000+ messages has been sent to users all day. And those messages are not like thing you are. Messeages ussualy and always are include sex and adult web pages addresses and spam adult contents. those url links include trojens and trojens mirc scripts. Users download those trojen and affects very badly. You thing the users select their script concuasly. But it wont. Most of users dont know what is the select "active /whois query" . So that away messages are turn unwanted. You can test those messages in our irc server which is irc.rekor.net . if you hold on just for 30 min you can see how many away massages shows in your active windows and whats those url include which address. You also can think thats not spam but we also want to learn how to blok those away messages couse we strongly thing that is high risk SPAM. So you can filter those away messages optionaly. So other admins dont use that blok if they dont thing SPAM. If teorikly not available to filter away messages we thing completely remove all away messages from our server.
I can definitely understand what you mean now ;).
*get like 5-10 msgs-on-join*
--
[15:46:15] <iMam> SeIam nerden ?
-
iMam is [email protected] * Klavye « TR » [ http://www.KlavyeScript.net ]
iMam on #istanbul #Cafe #sohbet
iMam using TurkSystems.TR.Rekor.NET http://www.turksystems.net
iMam is away: Ünlü iki Bayanýn Banyodaki Seviþmesi izledikten Sonra parmaklarinizi isiracaksiniz!! Bu ÞOK Filmi Hemen indirin ==> www.gizli.sex.tr.tc
iMam has been idle 0secs, signed on Fri Jul 09 15:45:57
iMam End of /WHOIS list.
--
Offtopic, but.. I presume it's 'selam' and not 'seiam'? Looks to me like they are trying to trick into reading a 'l' by using an uppercase i 'I'? Considering that sentence with an I is probably not often said.. could you not take action at that? :P
/spamfilter add p block - - ^SeIam nerden \?$
Anyway, back on topic...
Basically what we are saying is that admins shouldn't put enormous broad filters... Like blocking ALL urls or ALL irc server addresses... Now and then I see this and it's pretty dumb, and annoying for users. Sure, it might save you a lot of time... but keep in mind that spamfitlers should not annoy users more than the spam itself ;p. Spamfilters are ment to be very specific against a certain threat/exploit/whatever.
I can see usefulnes in an away spamfilter, eg.. if someone puts 'playing tetris on http://www.exploit.xx/tetris.html' and that page loads a worm up, then blocking that certain url makes sense (eg: '/spamfilter add a block - - www\.exploit\.xx' [no that doesn't exist yet ;p]).
*get like 5-10 msgs-on-join*
--
[15:46:15] <iMam> SeIam nerden ?
-
iMam is [email protected] * Klavye « TR » [ http://www.KlavyeScript.net ]
iMam on #istanbul #Cafe #sohbet
iMam using TurkSystems.TR.Rekor.NET http://www.turksystems.net
iMam is away: Ünlü iki Bayanýn Banyodaki Seviþmesi izledikten Sonra parmaklarinizi isiracaksiniz!! Bu ÞOK Filmi Hemen indirin ==> www.gizli.sex.tr.tc
iMam has been idle 0secs, signed on Fri Jul 09 15:45:57
iMam End of /WHOIS list.
--
Offtopic, but.. I presume it's 'selam' and not 'seiam'? Looks to me like they are trying to trick into reading a 'l' by using an uppercase i 'I'? Considering that sentence with an I is probably not often said.. could you not take action at that? :P
/spamfilter add p block - - ^SeIam nerden \?$
Anyway, back on topic...
Basically what we are saying is that admins shouldn't put enormous broad filters... Like blocking ALL urls or ALL irc server addresses... Now and then I see this and it's pretty dumb, and annoying for users. Sure, it might save you a lot of time... but keep in mind that spamfitlers should not annoy users more than the spam itself ;p. Spamfilters are ment to be very specific against a certain threat/exploit/whatever.
I can see usefulnes in an away spamfilter, eg.. if someone puts 'playing tetris on http://www.exploit.xx/tetris.html' and that page loads a worm up, then blocking that certain url makes sense (eg: '/spamfilter add a block - - www\.exploit\.xx' [no that doesn't exist yet ;p]).
hmm
Hmm just read through all the posts here and well it appears someone else may have too since the new spam method being used on IRCQnet is spamming via away msg since they have everything else on the spam filter they catch them
only way to catch them all now is to pvt each and every one so is there a way to stop this ?
only way to catch them all now is to pvt each and every one so is there a way to stop this ?
spam leading to trojan
This is the latest form of nefis team spam:
*** msn_Engin is away (Free Porn Mpeg DownLoad CLiCk here Too => http://wWw.sexfilim.tk)
Hope you Unreal guys will think of a solution
johnny
*** msn_Engin is away (Free Porn Mpeg DownLoad CLiCk here Too => http://wWw.sexfilim.tk)
Hope you Unreal guys will think of a solution
johnny
personally I think the whole spam thing is getting silly ... next, someone will want to spamfilter nicks and block everyone that has DAL ... EF or UNDER in their nick/userhost.
OMG!!! there is a ".net" in his quit message! quick ... G:Line him!
It's one thing if a user and/or clones draw attention to themselves and something totally different if you see one little glimpse of a URL in quit/away/GECOS.
OMG!!! there is a ".net" in his quit message! quick ... G:Line him!
It's one thing if a user and/or clones draw attention to themselves and something totally different if you see one little glimpse of a URL in quit/away/GECOS.
Configuration - https://www.unrealircd.org/docs/Configuration
FAQ - https://www.unrealircd.org/docs/FAQ
FAQ - https://www.unrealircd.org/docs/FAQ