Page 1 of 1

trojan bot...

Posted: Tue Aug 03, 2004 4:26 pm
by jancatxx
what can I do defend litmus ? This bots attack my server and reg nicks and my db will greater than normal db... do floods etc... What can I do for it ?

Posted: Tue Aug 03, 2004 5:24 pm
by Syzop
While I don't know litmus, don't you have email confirmation for registering nicks? If not, then I really suggest to enable that ;).

Posted: Mon Aug 09, 2004 9:58 pm
by Guest
I enable it but they are flooding to my channels...

Posted: Mon Aug 09, 2004 10:06 pm
by Jason
Do you have anope?

Set the default defcon level to 4

Define defcon level 4 as whatever number means set channel modes

set the channel modes to +M or +R (you decide)



That way only registered nicks can join your channels, or only registered nicks can talk.

Of course this will only work if you enable email confirmation as Syzop suggests

Do they use a standard nick pattern? qline it

Posted: Mon Aug 09, 2004 10:06 pm
by Guest
I enable it but they are flooding to my channels... and I must clear them... on connect I must akill these bots... Please help...

Posted: Mon Aug 09, 2004 10:07 pm
by Jason
Also: Would a BAN VERSION or BAN REALNAME help? Look up those config directives in the docs

BTW: If you could paste a sample of what they flood with I could write you a spamfilter to gline them. Do they always say the same thing? If not, as many unique samples as possible would be extremely helpful