I instantly noticed his regex was really bad (I think I have helped him with regex before)... But anyway, the block should be:chaz's paste wrote:spamfilter {
regex "http://*:*/*\.exe";
target { private; channel; };
action gline;
reason "You are infected";
ban-time 6h;
};
Trying to block lines such as;
[19:48:38] ‹ bwghm › http://83.177.222.179:63891/q.exe
[23:08:35] ‹ kx-yd › http://192.168.0.100:18934/qhithjq.exe
[10:39:03] ‹ gudnk › http://81.77.200.207:37994/vjkadnrmb-.exe
Code: Select all
spamfilter {
regex "http://(\d+\.){3}\d+:\d+/.+\.exe";
target { private; channel; };
action gline;
reason "You are infected";
ban-time 6h;
};
(If someone can give it a better name, please do so)