Need help Correcting Spamfilter

These are old archives. They are kept for historic purposes only.
Post Reply
DragonRyder
Posts: 51
Joined: Tue Feb 21, 2006 5:02 am
Location: USA, OH
Contact:

Need help Correcting Spamfilter

Post by DragonRyder » Fri Apr 22, 2011 4:40 am

I have this set

Code: Select all

-----Spam/Advertising SPAMFILTERS-----
//spamfilter add cpnNPqdat block 0 Spam/Advertising *.altervista.(com|net|org|info|de|tk|eu|uk|it)*
//spamfilter add cpnNPqdat block 0 Spam/Advertising *GetItN0w.(com|net|org|info|de|tk|eu|uk|it)*
//spamfilter add cpnNPqdat block 0 Spam/Advertising *p0rnpasswords.(com|net|org|info|de|tk|eu|uk|it)*
//spamfilter add cpnNPqdat block 0 Spam/Advertising *bann3d.webng.(com|net|org|info|de|tk|eu|uk|it)*/psyBNC2.0.2.zip
//spamfilter add cpnNPqdat block 0 Spam/Advertising *maxicanne.(com|net|org|info|de|tk|eu|uk|it)**
//spamfilter add cpnNPqdat block 0 Spam/Advertising *jmoneydinero.(com|net|org|info|de|tk|eu|uk|it)*
//spamfilter add cpnNPqdat block 0 Spam/Advertising *.cjb\.(com|net|org|info|de|tk|eu|uk|it)*
//spamfilter add cpnNPqdat block 0 Spam/Advertising *unitedservers.(com|net|org|info|de|tk|eu|uk|it)*
//spamfilter add cpnNPqdat block 0 Spam/Advertising *gemster.(com|net|org|info|de|tk|eu|uk|it)*
//spamfilter add cpnNPqdat block 0 Spam/Advertising *neobux.(com|net|org|info|de|tk|eu|uk|it)*
//spamfilter add cpnNPqdat block 0 Spam/Advertising *p0rnspoofs.(com|net|org|info|de|tk|eu|uk|it)*
//spamfilter add cpnNPqdat block 0 Spam/Advertising *.zzl.(com|net|org|info|de|tk|eu|uk|it)*
//spamfilter add cpnNPqdat block 0 Spam/Advertising *.+geocities\.(com|net|org|info|de|tk|eu|uk|it)*.+
//spamfilter add cpnNPqdat block 0 Spam/Advertising *pinkselection.(com|net|org|info|de|tk|eu|uk|it)*
//spamfilter add cpnNPqdat block 0 Spam/Advertising *weonthat.(com|net|org|info|de|tk|eu|uk|it)*
//spamfilter add cpnNPqdat block 0 Spam/Advertising *1nj3ct.(com|net|org|info|de|tk|eu|uk|it)*
//spamfilter add cpnNPqdat block 0 Spam/Advertising *SuperDownloads-4-Free.(com|net|org|info|de|tk|eu|uk|it)*
//spamfilter add cpnNPqdat block 0 Spam/Advertising *supermegaspoof.(com|net|org|info|de|tk|eu|uk|it)*
//spamfilter add cpnNPqdat block 0 Spam/Advertising *IRCvision_Script.+html
//spamfilter add cpnNPqdat block 0 Spam/Advertising *imgnow.(com|net|org|info|de|tk|eu|uk|it)*
//spamfilter add cpnNPqdat block 0 Spam/Advertising *\/imggmi\.(com|net|org|info|de|tk|eu|uk|it)*\/DSC
//spamfilter add cpnNPqdat block 0 Spam/Advertising *.soundarea.(com|net|org|info|de|tk|eu|uk|it)*
//spamfilter add cpnNPqdat block 0 Spam/Advertising *irc2go.(com|net|org|info|de|tk|eu|uk|it)*
//spamfilter add cpnNPqdat block 0 Spam/Advertising *.bet-at-home.(com|net|org|info|de|tk|eu|uk|it)*
//spamfilter add cpnNPqdat block 0 Spam/Advertising *eztv.(com|net|org|info|de|tk|eu|uk|it)*
//spamfilter add cpnNPqdat block 0 Spam/Advertising *xdccbrowser.(com|net|org|info|de|tk|eu|uk|it)*
and this set

Code: Select all

-----Network Spam/Advertising SPAMFILTERS-----
//spamfilter add cpnNPqdat block 0 Network/Spam_Advertising *irc.esylum.(com|net|org|info|de|tk|eu|uk)*
//spamfilter add cpnNPqdat block 0 Network/Spam_Advertising *irc.omgirc.(com|net|org|info|de|tk|eu|uk)*
//spamfilter add cpnNPqdat block 0 Network/Spam_Advertising *irc.m0arirc.(com|net|org|info|de|tk|eu|uk)*
//spamfilter add cpnNPqdat block 0 Network/Spam_Advertising *irc.101-freedom.(com|net|org|info|de|tk|eu|uk)*
//spamfilter add cpnNPqdat block 0 Network/Spam_Advertising *irc.Europechat.(com|net|org|info|de|tk|eu|uk)*
//spamfilter add cpnNPqdat block 0 Network/Spam_Advertising *irc.slacknet.(com|net|org|info|de|tk|eu|uk)*
//spamfilter add cpnNPqdat block 0 Network/Spam_Advertising *irc.gamesurge.(com|net|org|info|de|tk|eu|uk)*
//spamfilter add cpnNPqdat block 0 Network/Spam_Advertising *irc.b-warez.(com|net|org|info|de|tk|eu|uk)*
//spamfilter add cpnNPqdat block 0 Network/Spam_Advertising *irc.mp3q8.(com|net|org|info|de|tk|eu|uk)*
//spamfilter add cpnNPqdat block 0 Network/Spam_Advertising *irc.ircvision.(com|net|org|info|de|tk|eu|uk)*
//spamfilter add cpnNPqdat block 0 Network/Spam_Advertising *irc.sexnet.(com|net|org|info|de|tk|eu|uk)*
//spamfilter add cpnNPqdat block 0 Network/Spam_Advertising *irc.ftw-irc.(com|net|org|info|de|tk|eu|uk)*
//spamfilter add cpnNPqdat block 0 Network/Spam_Advertising *irc.convictedirc.(com|net|org|info|de|tk|eu|uk)*
//spamfilter add cpnNPqdat block 0 Network/Spam_Advertising *@cliffordmapp.co.uk
//spamfilter add cpnNPqdat block 0 Network/Spam_Advertising *.zapto.(com|net|org|info|de|tk|eu|uk)*
i know they are wrong - cause its blocking my friends talking about music CDs and other stuff.

Example:
(Spamfilter On XeroMem) User: Zen Matches Filter & Reason: '*.zzl.(com|net|org|info|de|tk|eu|uk|it)*': [PRIVMSG #DragonsDen: just got this game Safecracker - The Ultimate Puzzle Challenge [Spam/Advertising]
can someone help me please?

Jobe1986
Official supporter
Posts: 1177
Joined: Wed May 03, 2006 7:09 pm
Location: United Kingdom

Re: Need help Correcting Spamfilter

Post by Jobe1986 » Fri Apr 22, 2011 11:57 am

Regex and glob matching is not the same so the * at the start of your masks means nothing without something in front of it. Typically for a * to have the same meaning as a * in a glob pattern it needs a "." for example ".*"

And the problem with the false positives is the *'s you have on the end of your regex's. For example the regex you have as '*.zzl.(com|net|org|info|de|tk|eu|uk|it)*' matches "<anysinglecharacter>zzl<anysinglecharacter><zeroormoreof(com|net|org|info|de|tk|eu|uk|it)>"

The reason for this is the * on the end modifies the () to say match this block zero of more times. Also a "." will match ANY character, not just a literal ".", for it to match ONLY a "." you need to use "\."

All of this is covered in appendix A of the UnrealIRCd documentation at http://www.unrealircd.com/files/docs/un ... html#regex

DragonRyder
Posts: 51
Joined: Tue Feb 21, 2006 5:02 am
Location: USA, OH
Contact:

Re: Need help Correcting Spamfilter

Post by DragonRyder » Sun Apr 24, 2011 4:04 pm

so instead of this:

Code: Select all

//spamfilter add cpnNPqdat block 0 Spam/Advertising *.zzl.(com|net|org|info|de|tk|eu|uk|it)*
i would do this:

Code: Select all

//spamfilter add cpnNPqdat block 0 Spam/Advertising .\.zzl\.(com|net|org|info|de|tk|eu|uk|it)
Or after reading everything am i still wrong?

DragonRyder
Posts: 51
Joined: Tue Feb 21, 2006 5:02 am
Location: USA, OH
Contact:

Re: Need help Correcting Spamfilter

Post by DragonRyder » Mon Apr 25, 2011 2:18 am

ok even with reading - i still am unsure if i am setting the two lines right:

Code: Select all

.\.IRCvision_Script.+html
.\.bann3d\.webng\.(com|net|org|info|de|tk|eu|uk|it)/psyBNC2.0.2.zip

Post Reply