Page 1 of 2

stop clones . with spamfilter..

Posted: Wed Jun 18, 2008 12:18 am
by AdmiraL
how can i stop clones me spamfilter.. I have allredy 400..500 clones in the server who come in by the same nick/identd/full name te who come in by the same but i cant catch them immediately `couse they are 400...500 how can i somehow block them with..... in order not to enter anymore

Eliza was ~eliza@212.33.190.71 * Eliza
Eliza using irc.Party.Net Wed Jun 18 00:51:31 2008
Eliza was ~eliza@212.62.97.20 * Eliza
Eliza using irc.Party.Net Wed Jun 18 00:50:37 2008
End of WHOWAS
cima was ~cima@212.62.97.23 * cima
cima using irc.AlbaParty.Net Wed Jun 18 00:50:39 2008
cima was ~cima@95.231-200-80.adsl-dyn.isp.belgacom.be * .
cima using irc2.Party.Net Tue Jun 17 22:59:23 2008
End of WHOWAS
baba was ~baba@212.12.160.48 * baba
baba using irc.Party.Net Wed Jun 18 00:50:41 2008
End of WHOWAS

Re: stop clones . with spamfilter..

Posted: Wed Jun 18, 2008 1:03 am
by Stealth

Code: Select all

/spamfilter add u gline 1d Possible_clone._Please_change_ident_and_realname_to_be_different_from_your_nick. (.+)!~\1![^:]+:\1$

Re: stop clones . with spamfilter..

Posted: Wed Jun 18, 2008 1:58 am
by AdmiraL
[03:44] -irc.Party.Net- *** Spamfilter added: '(.+)!~\1![^:]+:\1$' [target: u] [action: gline] [reason: Possible clone. Please change ident and realname to be different from your nick.] on Wed Jun 18 01:44:25 2008 GMT (from Jonny!~Joni@Network-Administrator.Party.Net)

[03:44] -irc.Party.Net- *** Notice -- Client connecting on port 6669: eros (~eros@dslb-088-064-011-107.pools.arcor-ip.net) [clients]
[03:44] -irc.Party.Net- *** Notice -- Client connecting on port 6667: sjon (~sjon@5acabdb4.bb.sky.com) [clients]
[03:45] -irc.Party.Net- *** Notice -- Client connecting on port 6667: alen (~alen@host73-47-dynamic.4-87-r.retail.telecomitalia.it) [clients]

..

:roll:

Re: stop clones . with spamfilter..

Posted: Wed Aug 06, 2008 9:07 am
by SLipKnOt
Little Mistake i think

Code: Select all

/spamfilter add u gline 1d Possible_clone._Please_change_ident_and_realname_to_be_different_from_your_nick. (.+)!~\1@[^:]+:\1$

Re: stop clones . with spamfilter..

Posted: Wed Aug 06, 2008 5:03 pm
by Jobe1986
Gawd I hate "(.+)!~\1@[^:]+:\1$" :cry:

Jobe is ~Jobe@<host> : Jobe

Lol anyway, seems the best you can do for now :|

Re: stop clones . with spamfilter..

Posted: Fri Jul 17, 2009 6:08 pm
by Redwulf
Hey I just used the regex expression above (with the @, and removed the ~) for my network for people who had nickname and nickname@ip. But I'd like to learn a little of how that expression works. Can someone tell me exactly how (.+)!\1@[^:]+:\1$ does what it does? Like a step by step explanation would be nice so I can learn from it.

Re: stop clones . with spamfilter..

Posted: Fri Sep 25, 2009 9:01 pm
by frozenfire
Okay, here we go, explaining (.+)!\1@[^:]+:\1$!
We'll start with (.+)
We'll ignore the () for now.
The . means any character. The + is the repetion, one or more.
So .+ is simply one or more characters.
Next is the \1. That's simple, it just means "the same as the first one between () got us". So, if the .+ matched "nathan",then this would match nathan!nathan.
[^:] is a character class. It usually specifies ranges (A-Z, a-z, 0-9) and/or seperate characters. The ^ means"anything except", so this matches 1 or more characters that are not :
We already saw the \1 earlier, we won't repeat that.
The $ simply means "the end".

Feel free to ask any questions if you don't understand ;)

Re: stop clones . with spamfilter..

Posted: Fri Oct 05, 2012 1:51 pm
by DonTCry
Will the same spamfilter match

Blend was blend@196.202.110.61 * Blend
Blirim was blirim@202.162.198.178 * Blirim
Amat was amat@202.96.136.169 * Amat

Re: stop clones . with spamfilter..

Posted: Wed Oct 10, 2012 4:16 pm
by DonTCry
Anyone can help with with the spamfilter for the bots I mentioned in the previous post please?

Re: stop clones . with spamfilter..

Posted: Sat Oct 13, 2012 8:44 am
by DonTCry

Re: stop clones . with spamfilter..

Posted: Thu Dec 27, 2012 9:14 pm
by Crash
and for use (.+)!\1@[^:]+:\1$ with alternating case ?

Re: stop clones . with spamfilter..

Posted: Sun Feb 24, 2013 6:28 pm
by DonTCry
[22:40] <@ConnectServ> SIGNOFF user: Mjl2n (mjl2n@c-69-245-222-63.hsd1.in.comcast.net Mjl2n)
[22:40] <@ConnectServ> SIGNOFF user: Meitin (meitin@cpe-24-162-131-142.hot.res.rr.com Meitin)
[22:40] <@ConnectServ> SIGNOFF user: Miror (miror@cpe-24-162-131-142.hot.res.rr.com Miror)
[22:40] <@ConnectServ> SIGNOFF user: Bilid (bilid@cpe-69-204-206-92.stny.res.rr.com Bilid)
[22:40] <@ConnectServ> SIGNOFF user: B1l2n (b1l2n@cpe-69-204-206-92.stny.res.rr.com B1l2n)
[22:40] <@ConnectServ> SIGNOFF user: Emir (emir@spftor5e1.privacyfoundation.ch Emir)
[22:40] <@ConnectServ> SIGNOFF user: Erlul (erlul@cpe-184-153-188-134.maine.res.rr.com Erlul)
[22:40] <@ConnectServ> SIGNOFF user: Elb1n (elb1n@67-207-148-45.static.cloud-ips.com Elb1n)

Can anyone give me regex for those bots please?

Re: stop clones . with spamfilter..

Posted: Sun Feb 24, 2013 6:53 pm
by Stealth
DonTCry wrote:[22:40] <@ConnectServ> SIGNOFF user: Mjl2n (mjl2n@c-69-245-222-63.hsd1.in.comcast.net Mjl2n)
[22:40] <@ConnectServ> SIGNOFF user: Meitin (meitin@cpe-24-162-131-142.hot.res.rr.com Meitin)
[22:40] <@ConnectServ> SIGNOFF user: Miror (miror@cpe-24-162-131-142.hot.res.rr.com Miror)
[22:40] <@ConnectServ> SIGNOFF user: Bilid (bilid@cpe-69-204-206-92.stny.res.rr.com Bilid)
[22:40] <@ConnectServ> SIGNOFF user: B1l2n (b1l2n@cpe-69-204-206-92.stny.res.rr.com B1l2n)
[22:40] <@ConnectServ> SIGNOFF user: Emir (emir@spftor5e1.privacyfoundation.ch Emir)
[22:40] <@ConnectServ> SIGNOFF user: Erlul (erlul@cpe-184-153-188-134.maine.res.rr.com Erlul)
[22:40] <@ConnectServ> SIGNOFF user: Elb1n (elb1n@67-207-148-45.static.cloud-ips.com Elb1n)

Can anyone give me regex for those bots please?
Please read the full thread before making new posts. Your answer was here:
SLipKnOt wrote:Little Mistake i think

Code: Select all

/spamfilter add u gline 1d Possible_clone._Please_change_ident_and_realname_to_be_different_from_your_nick. (.+)!~\1@[^:]+:\1$
and here:
Redwulf wrote:Hey I just used the regex expression above (with the @, and removed the ~) for my network for people who had nickname and nickname@ip. But I'd like to learn a little of how that expression works. Can someone tell me exactly how (.+)!\1@[^:]+:\1$ does what it does? Like a step by step explanation would be nice so I can learn from it.
and here:
frozenfire wrote:Okay, here we go, explaining (.+)!\1@[^:]+:\1$!
We'll start with (.+)
We'll ignore the () for now.
The . means any character. The + is the repetion, one or more.
So .+ is simply one or more characters.
Next is the \1. That's simple, it just means "the same as the first one between () got us". So, if the .+ matched "nathan",then this would match nathan!nathan.
[^:] is a character class. It usually specifies ranges (A-Z, a-z, 0-9) and/or seperate characters. The ^ means"anything except", so this matches 1 or more characters that are not :
We already saw the \1 earlier, we won't repeat that.
The $ simply means "the end".

Feel free to ask any questions if you don't understand ;)
and this one applies too:
Crash wrote:and for use (.+)!\1@[^:]+:\1$ with alternating case ?

Re: stop clones . with spamfilter..

Posted: Sun Feb 24, 2013 8:29 pm
by DonTCry
Okay, here we go, explaining (.+)!\1@[^:]+:\1$!
We'll start with (.+)
We'll ignore the () for now.
The . means any character. The + is the repetion, one or more.
So .+ is simply one or more characters.
Next is the \1. That's simple, it just means "the same as the first one between
In my case the nickname and full name start with capital letter and the ident is all with small letters
that regex works with bots like these: baba was ~baba@212.12.160.48 * baba
and I have problem with bots like these: Elb1n (elb1n@67-207-148-45.static.cloud-ips.com Elb1n)

Re: stop clones . with spamfilter..

Posted: Mon Feb 25, 2013 1:15 pm
by Stealth
Spamfilters are not case sensitive and ignore colors, bold, and underline.