Page 1 of 1

Clones Spamfilter Bots

Posted: Mon May 25, 2020 5:20 pm
by Killer
Hello, i have a problem whit the bots, i have this type.

supremoHg[supremo@host] realname [a-z] this is variable example ircap, test, etc...
CracFD[Crack@host]
LoadEF[Load@host]

Hoe i can block this bots whit the spamfilter?

Re: Clones Spamfilter Bots

Posted: Mon May 25, 2020 5:38 pm
by Lord255
are their hosts the same?

Re: Clones Spamfilter Bots

Posted: Mon May 25, 2020 5:52 pm
by Killer
Hello Lord are differents host example supremoHg[supremo@Clk-D1434EF8.se.biz.rr.com]
CrackFD[Crack@4AA127E17.BA5B1D88.7A63506.IP]

Re: Clones Spamfilter Bots

Posted: Mon May 25, 2020 5:59 pm
by Killer

Re: Clones Spamfilter Bots

Posted: Tue May 26, 2020 2:53 pm
by Killer
Hey, something can help whits this, or this forum is death?

Re: Clones Spamfilter Bots

Posted: Wed May 27, 2020 3:35 pm
by Syzop
Just a general solution (not really an answer to your question). Are you using blacklist blocks ?
See https://www.unrealircd.org/docs/Blacklist_block under Examples. Add those to your unrealircd.conf and REHASH.
Of course, chances are high that you are already using them :)

Re: Clones Spamfilter Bots

Posted: Wed May 27, 2020 3:44 pm
by Syzop
As for spamfilter, the nick minus the last two character comes back in the ident/username, that should be something one can write a spamfilter for. Try this:

Code: Select all

/SPAMFILTER add -regex u kill 0 spambot_detected ^([a-z]+)[a-z]{2}!\1@.*

Re: Clones Spamfilter Bots

Posted: Wed May 27, 2020 9:00 pm
by Killer
Hey Syzop , thanks!!! this filter work to me!!!
And yes im using blacklists, other question:
can i post a code to stop proxies, eggdrop, etc? I would like to help the community too and tell them about my experience, where can I publish my work?

Re: Clones Spamfilter Bots

Posted: Thu May 28, 2020 6:52 am
by Syzop
Great :)
can i post a code to stop proxies, eggdrop, etc? I would like to help the community too and tell them about my experience, where can I publish my work?
You mean tips and spamfilters and configuration settings right? Yes, that is exactly what this forum is for. Just post it in this forum "Spam, drones and proxies".