Away Message

These are old archives. They are kept for historic purposes only.
Syzop
UnrealIRCd head coder
Posts: 1955
Joined: Sat Mar 06, 2004 8:57 pm
Location: .nl
Contact:

Post by Syzop » Thu Jul 08, 2004 3:27 pm

I find it pretty lame to block that stuff.
I mean come on, can't you even put your own website/ircserver in your whois info? (like in realname, or in away [odd, but..])... I even think it's quite common to do that.. I mean, I know quite some friends that have their website named as realname.

Spamming to me is when someone goes advertise unwanted stuff to everyone.. so mass msg'ing privately/in-channel/whatever.

So I can definately understand codemastr's concerns here.

I was more like thinking of a worm sending 'hi' to everyone, and then [if someone msgs back you see the away reason in either status/in-window, or without replying for the people that have whois-on-query... ] they see some url in red that would exploit an IE bug and put the worm on your computer...
That sounds a tad more useful/interresting :P

codemastr
Former UnrealIRCd head coder
Posts: 811
Joined: Sat Mar 06, 2004 8:47 pm
Location: United States
Contact:

Post by codemastr » Thu Jul 08, 2004 4:15 pm

pills is pills@36205F8C.4563E9DA.108E3FAA.IP * pills
pills is connecting from *@195.x.x.x
pills is a registered nick
pills using xxx.net http://www.x.net
pills is away: irc.xxxxxxxxx.net
pills has been idle 28secs, signed on Thu Jul 08 16:36:22
pills End of /WHOIS list.
The simple fact that it talks about an IRC server doesn't make it spam. If I privmsg my friend and say, "I'll be away, but you can find me on irc.xxxxxxx.net" is that spam? No, I sent it to *one* person. For all you know the reason pills there has put that as his away reason is because he is away, and is currently active on that other server. So if someone desperately needs to contact him, they can go to that server to get him.
most of mirc script when you you say hi to user script auto /whois in active windows or some script send away massage to users /status.
This advertises are also can be colourfull. Cant we blok these ?
But the users *chose* to install those scripts. That means they *want* to see the away message. That is NOT unsolicited. Unsolicited by definition means unwanted. If it is wanted, it is not spam. And if the user requests it (which he/she did when he/she decided to install that script) then it means the user wanted to see it.
-- codemastr

aquanight
Official supporter
Posts: 862
Joined: Tue Mar 09, 2004 10:47 pm
Location: Boise, ID

Post by aquanight » Thu Jul 08, 2004 4:54 pm

katsklaw wrote:How many opers there care about anything?
Exactly :P

Stealth
Head of Support
Posts: 2086
Joined: Tue Jun 15, 2004 8:50 pm
Location: Chino Hills, CA, US
Contact:

Post by Stealth » Thu Jul 08, 2004 6:48 pm

If you don't want certain things in away messages, the simplest thing right now would be to make a bot that issues a "/who *" every so often and /whoises the people why have the away (G) flag set.

In mIRC, this can probably be done with less than 10 lines of code.

(BTW, don't ask me to code something in mIRC if you don't know how, I just wont do it for ya.)

*locked*

Syzop
UnrealIRCd head coder
Posts: 1955
Joined: Sat Mar 06, 2004 8:57 pm
Location: .nl
Contact:

Post by Syzop » Thu Jul 08, 2004 8:21 pm

Huh? *unlock* ;)

Stealth
Head of Support
Posts: 2086
Joined: Tue Jun 15, 2004 8:50 pm
Location: Chino Hills, CA, US
Contact:

Post by Stealth » Thu Jul 08, 2004 10:58 pm

*yells obscenities at Syzop* :evil:

I locked this because it is going no where and people have made it quite clear that there will be no away message spamfilter.

AngryWolf
Posts: 554
Joined: Sat Mar 06, 2004 10:53 am
Location: Hungary
Contact:

Post by AngryWolf » Thu Jul 08, 2004 11:29 pm

This is a totally unnecessary comment, but I agree with Stealth. :)

Syzop
UnrealIRCd head coder
Posts: 1955
Joined: Sat Mar 06, 2004 8:57 pm
Location: .nl
Contact:

Post by Syzop » Fri Jul 09, 2004 12:15 am

I find it a quite fundemental discussion about what a spamfilter should be able to do / where it is needed for :P.

Furthermore, if both me and codemastr are talking in a thread... I find it quite strange that suddenly a person jumps in and locks it because he decides so.

Guest

Post by Guest » Fri Jul 09, 2004 12:02 pm

The simple fact that it talks about an IRC server doesn't make it spam. If I privmsg my friend and say, "I'll be away, but you can find me on irc.xxxxxxx.net" is that spam? No, I sent it to *one* person. For all you know the reason pills there has put that as his away reason is because he is away, and is currently active on that other server. So if someone desperately needs to contact him, they can go to that server to get him.


You might be right for one person who away like you thing.
But i talk about 2000 user on 1 server and 10000+ messages has been sent to users all day. And those messages are not like thing you are. Messeages ussualy and always are include sex and adult web pages addresses and spam adult contents. those url links include trojens and trojens mirc scripts. Users download those trojen and affects very badly. You thing the users select their script concuasly. But it wont. Most of users dont know what is the select "active /whois query" . So that away messages are turn unwanted. You can test those messages in our irc server which is irc.rekor.net . if you hold on just for 30 min you can see how many away massages shows in your active windows and whats those url include which address. You also can think thats not spam but we also want to learn how to blok those away messages couse we strongly thing that is high risk SPAM. So you can filter those away messages optionaly. So other admins dont use that blok if they dont thing SPAM. If teorikly not available to filter away messages we thing completely remove all away messages from our server.

Syzop
UnrealIRCd head coder
Posts: 1955
Joined: Sat Mar 06, 2004 8:57 pm
Location: .nl
Contact:

Post by Syzop » Fri Jul 09, 2004 1:58 pm

I can definitely understand what you mean now ;).
*get like 5-10 msgs-on-join*

--
[15:46:15] <iMam> SeIam nerden ?
-
iMam is Yuzuk-III@1A744310.63C7241.108E3FAA.IP * Klavye « TR » [ http://www.KlavyeScript.net ]
iMam on #istanbul #Cafe #sohbet
iMam using TurkSystems.TR.Rekor.NET http://www.turksystems.net
iMam is away: Ünlü iki Bayanýn Banyodaki Seviþmesi izledikten Sonra parmaklarinizi isiracaksiniz!! Bu ÞOK Filmi Hemen indirin ==> www.gizli.sex.tr.tc
iMam has been idle 0secs, signed on Fri Jul 09 15:45:57
iMam End of /WHOIS list.
--

Offtopic, but.. I presume it's 'selam' and not 'seiam'? Looks to me like they are trying to trick into reading a 'l' by using an uppercase i 'I'? Considering that sentence with an I is probably not often said.. could you not take action at that? :P
/spamfilter add p block - - ^SeIam nerden \?$

Anyway, back on topic...
Basically what we are saying is that admins shouldn't put enormous broad filters... Like blocking ALL urls or ALL irc server addresses... Now and then I see this and it's pretty dumb, and annoying for users. Sure, it might save you a lot of time... but keep in mind that spamfitlers should not annoy users more than the spam itself ;p. Spamfilters are ment to be very specific against a certain threat/exploit/whatever.
I can see usefulnes in an away spamfilter, eg.. if someone puts 'playing tetris on http://www.exploit.xx/tetris.html' and that page loads a worm up, then blocking that certain url makes sense (eg: '/spamfilter add a block - - www\.exploit\.xx' [no that doesn't exist yet ;p]).

Guest

Post by Guest » Tue Jul 27, 2004 12:29 pm

Away Message only Your Message

Version 3.2.1

*Removed, modifications of Unreal are not supported.

Guest

hmm

Post by Guest » Sun Aug 22, 2004 12:57 pm

Hmm just read through all the posts here and well it appears someone else may have too since the new spam method being used on IRCQnet is spamming via away msg since they have everything else on the spam filter they catch them

only way to catch them all now is to pvt each and every one so is there a way to stop this ? :P

johnny

spam leading to trojan

Post by johnny » Fri Aug 27, 2004 8:02 pm

This is the latest form of nefis team spam:
*** msn_Engin is away (Free Porn Mpeg DownLoad CLiCk here Too => http://wWw.sexfilim.tk)

Hope you Unreal guys will think of a solution

johnny

katsklaw
Official supporter
Posts: 1124
Joined: Sun Apr 18, 2004 5:06 pm
Contact:

Post by katsklaw » Sat Aug 28, 2004 2:29 am

personally I think the whole spam thing is getting silly ... next, someone will want to spamfilter nicks and block everyone that has DAL ... EF or UNDER in their nick/userhost.

OMG!!! there is a ".net" in his quit message! quick ... G:Line him!

It's one thing if a user and/or clones draw attention to themselves and something totally different if you see one little glimpse of a URL in quit/away/GECOS.

aquanight
Official supporter
Posts: 862
Joined: Tue Mar 09, 2004 10:47 pm
Location: Boise, ID

Post by aquanight » Sat Aug 28, 2004 5:39 am

It's one thing when you have a link in your gecos/quit/away. It's another if that link is an exploit.

Locked