UnrealIRCd Forums

Posted: **Mon Jul 10, 2006 5:06 am**

just got this spam:

^- A|ienware, B0XX and 0verdrive systems (Dual P4 and AMD, 1TB hard drives, 4GB RAM, 1024mb n|Vidia, Dual 24+ inch LCD displays, etc.) and 60-inch plasma TVs from 4 600 dollars: 12nobrainer.8k.com All brand new. Email me!

whyatt was [email protected] * Wyatt Twirp
Dns resolving sexy.he-is.info
Resolved: 208.98.23.210

i reported the IP to FBI - now here is my thing - i coulda swore i set this spamfilter up correctly:

Code: Select all

spamfilter {
	regex "http://.+\..+/.8m\..+\.com"; 
	target private;
	action gzline;
	reason "[autobanned]: You are spamming our users with an ONJOIN ad/msg.
};

am i doing this wrong?

the addy spammed always contains 8k.com

Posted: **Mon Jul 10, 2006 9:55 am**

DragonRyder wrote:

Code: Select all

spamfilter {
	regex "http://.+\..+/.8m\..+\.com"; 
	target private;
	action gzline;
	reason "[autobanned]: You are spamming our users with an ONJOIN ad/msg.
};

am i doing this wrong?

Code: Select all

spamfilter {
	regex "http://.+\..+/.8k\..+\.com"; 
	target private;
	action gzline;
	reason "[autobanned]: You are spamming our users with an ONJOIN ad/msg.
};

/spamfilter add pnc gzline 7d You_are_spamming_our_users_with_an_ONJOIN_ad/msg 8k\.com

Posted: **Mon Jul 10, 2006 3:26 pm**

lol - thanks - i just realized i set it for 8m instead of 8k - and thanks for the command - that helped

Posted: **Wed Jul 12, 2006 9:16 am**

/spamfilter add pNna gline +0 Spam *.??.?.*A.?.??ienware.?.*B0XX.*and.*0verdrive.*systems.*.??Dual.*P4.*and.*AMD.?.*1TB.*hard.*drives.?.*4GB.*RAM.?.*1024mb.*n.?.??Vidia.?.*Dual.*24.?.??.*inch.*LCD.*displays.?.*etc.?.??.*and.*60.?inch.*plasma.*TVs.*from.*600.*dollars.?.*nobrainer.?8k.?com.*All.*brand.*new.?.*Em.*

Posted: **Wed Jul 12, 2006 12:03 pm**

Git can i just say in most cases including this one there is absolutly no need to add the entire message as the spamfilter or to try and match the entire message.

You should usually be able to match a small portion of the message and therefore match more occurances of the message.

Posted: **Wed Jul 12, 2006 3:26 pm**

especially when the messages are usually a bit different - and the only thing that is constant in all msg's sent is 8k.com

again - thanks Jobe1986 for your assistance

UnrealIRCd Forums

8k.com

8k.com

Re: 8k.com