Page 1 of 1

Question about spam settings

Posted: Sun Nov 13, 2005 3:01 pm
by sharstine
I'm running Unreal3.2.3, and I have narrowed the following message down to coming from the IRCd. But this error message doesn't appear to reflect anything in spamfilter.conf. Please note that I have not touched spamfilter.conf nor any other spam setting as of now.

When a user types @find whatever into a channel, it spits out something like this:

<Hans1> #m-club Message blocked: spam

I only found one page in Google with this error message, but the link is dead. Any ideas where this "spam" block is coming from and where I could configure it?

Posted: Sun Nov 13, 2005 3:51 pm
by Dukat
There are no default spamfilters with the message "spam".

Please paste the exact error/message you get, using the debug output of your irc client (e.g. "/debug @debug" on mirc).

Also check the output of "/stats spamfilter". Look for any filters with the reason "spam" and paste them here.

Posted: Sun Nov 13, 2005 6:18 pm
by Stealth
That "error" is comming from a client connected to your server. Unreal always uses the nick IRC to send messages when it does (which it only does for 1 or 2 things). Unreal never sends spam warnings as messages either. They are always sent as a numeric or a notice.

Re: Question about spam settings

Posted: Sun Nov 13, 2005 7:46 pm
by Dukat
He said "it spits out something like this" so we can't be sure :wink:

Posted: Sun Nov 13, 2005 10:34 pm
by sharstine
Here is the output of /stats spamfilter, with "spam" entries. None of the following has happened recently. These occured a couple months back, but nobody reported them at the time:

F c block 0 13455809 0 spam Chris![email protected] Çäñé Mp3
F c block 0 14717785 0 spam Chris![email protected] Azureus
F c block 0 14807820 0 spam Chris![email protected] #x]
F c block 0 18482057 0 spam Chris![email protected] /server
F c block 0 22111652 0 spam Chris![email protected] mp³
F c block 0 22111757 0 spam Chris![email protected] MB]
F c block 0 24800436 0 spam Chris![email protected] mp3 //
F c block 0 25534970 0 spam Chris![email protected] kbps //
F c block 0 25534970 0 spam Chris![email protected] mb)
F c block 0 6049666 0 spam Chris![email protected] fotzen wohin man guckt
F p block 0 6049535 0 spam Chris![email protected] fotzen wohin man guckt
F c block 0 4310889 0 spam Chris!~[email protected] (vbr)
F c block 0 4310889 0 spam Chris!~[email protected] kbps;
F c block 0 4310889 0 spam Chris!~[email protected] mp3]
F c block 0 4310889 0 spam Chris!~[email protected] mp3] -
F c block 0 4310889 0 spam Chris!~[email protected] kbps)
F c block 0 4310889 0 spam Chris!~[email protected] ::....

Secondly, we got someone to run /debug @debug. Here are the results:

<mikey> -> eclipse.purplesurge.com PRIVMSG #m-club :!DarkAnge| Kylie Minogue - 01 - Too Far (Intimate And Live Tour) (M2V) (129 MB) 6.31#.m2v ::INFO:: 130.0MB
<mikey> -> eclipse.purplesurge.com PRIVMSG #m-club :!DarkAnge| Kylie Minogue - 02 - What Do I Have To Do (Intimate And Live Tour) (M2V) (86.7 MB) 4.21#.m2v ::INFO:: 86.7MB
<mikey> <- :eclipse.purplesurge.com 404 mikey #m-club :Message blocked: spam
<mikey> <- :eclipse.purplesurge.com 404 mikey #m-club :Message blocked: spam

A couple things that might help:
1. The users who experience this message never used to until we switched to Unreal yesterday (previously ran Ultimate).

2. At the moment I'm only able to provide logs of this happening when someone uses "!" to request a file, not "@find".

Any other suggestions where this "spam" message is coming from, and/or ways to disable it?

Posted: Sun Nov 13, 2005 11:00 pm
by Stealth
<mikey> -> eclipse.purplesurge.com PRIVMSG #m-club :!DarkAnge| Kylie Minogue - 01 - Too Far (Intimate And Live Tour) (M2V) (129 MB) 6.31#.m2v ::INFO:: 130.0MB
Matches:
F c block 0 4310889 0 spam Chris!~[email protected] ::....
And that is why the IRCd is blocking it. (The match is in RED)

Posted: Mon Nov 14, 2005 2:25 am
by sharstine
Hmm, ok. But I still don't see how to fix this. There is nothing in spamfilter.conf or the spamfiltering section of unrealircd.conf that deal with ::whatever.

Posted: Mon Nov 14, 2005 4:44 am
by w00t
Then guess what, someone's added it via /spamfilter! :p. To remove, see /helpop ?spamfilter - it's a bit tricky, so if you have a problem, paste the remove command you're trying to use.

Posted: Mon Nov 14, 2005 5:05 am
by Stealth
If the spamfilter list has a capital F at the beginning of the line, it has been added with the /spamfilter command, and not in the conf.

Posted: Mon Nov 14, 2005 6:52 am
by sharstine
Thanks for all your help. I've never worked with spamfilters, so it's nice to know about the global /spamfilter now. The unwanted filters have been removed. :)

Posted: Mon Nov 14, 2005 8:46 am
by Dukat
Don't forget to tell Chris to lern regexp :wink:

http://www.vulnscan.org/UnrealIRCd/unre ... html#regex