Page 1 of 1

Spamfilter against botnet

Posted: Thu Jun 22, 2006 8:51 am
by JanisB
Hi, our network got alot of botnet bots (sounds cool ^^), and maybe someone even don't know, that it's server is used by this bots too.
So, bots are like e.t.c.
I have stopped them by

Code: Select all

/spamfilter add u kline 0 Open_proxy. mt-[0-9]*!.*@.*
Maybe for someone it will be usable information ;)

Posted: Fri Jun 23, 2006 3:52 pm
by aquanight
^mt-\d+!

would be a slightly better regex (less .* to slow stuff down)