Anope IRC Services

Please login or register.

Login with username, password and session length
Advanced search  

News:

Pages: [1]   Go Down

Author Topic: flood  (Read 6582 times)

0 Members and 1 Guest are viewing this topic.

Cihan

  • Guest
flood
« on: July 10, 2006, 03:17:28 PM »

somebody enters my server with 1000bot and the bots send this message to operserv


<Global> OperServ: eachelle:  H7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7

<Global> OperServ: laurella:  B5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5 kB5
[17:00] <Global> OperServ: emily:  V6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 f
[17:00] <Global> OperServ: juana:  V6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 f
[17:00] <Global> OperServ: azuree:  V6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6 fV6
[17:00] <Global> OperServ: eugenia:  H7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7
[17:00] <Global> OperServ: eachelle:  H7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7
[17:00] <Global> OperServ: tabbatha:  H7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7 vH7
[17:00] <Global> OperServ: martha:  W3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3 lW3
[17:00] <Global> OperServ: lonnie:  F3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3 vF3


after that. services is down. how can i protect my services. i want operserv not to be flooded by a normal user.

i want operserv ignore all users without opers. how can i do it?
Logged

Jobe

  • Contributor
  • *
  • Offline Offline
  • Gender: Male
  • Posts: 1023
    • Anope IRC Services
(No subject)
« Reply #1 on: July 10, 2006, 04:06:27 PM »

If youre using UnrealIRCd you can get a spamfilter to prevent these messages. And if theyre using the alias commands such as /os or /operserv you can turn on spamfiltering for those as well.

So if youre using UnrealIRCd i would suggest taking a look at their spamfilters.

There is an option for the whole of services to ignore none IRC ops using the DefCon feature but im not sure about normal users.

[Edited on 10-7-2006 by Jobe1986]
Logged
Your IP: ()
My IRC Status:

Come along and visit http://www.anopequotes.org/

Cihan

  • Guest
(No subject)
« Reply #2 on: July 10, 2006, 04:13:26 PM »

must i add the all messages one by one?
Logged

Jobe

  • Contributor
  • *
  • Offline Offline
  • Gender: Male
  • Posts: 1023
    • Anope IRC Services
(No subject)
« Reply #3 on: July 10, 2006, 04:15:41 PM »

A spamfilter on UnrealIRCd has the advantage of being able to match a pattern instead of exact messages. Say for example you could have a spam filter to either kill or gline a bot for sending a message where a patter of characters are repeated many times.

So to answer your question they should be able to create one simple spamfilter to match all those messages.
Logged
Your IP: ()
My IRC Status:

Come along and visit http://www.anopequotes.org/

Cihan

  • Guest
(No subject)
« Reply #4 on: July 10, 2006, 04:19:50 PM »

but the message has ctrl k ctrl b and the other characters in it.
Logged

Jobe

  • Contributor
  • *
  • Offline Offline
  • Gender: Male
  • Posts: 1023
    • Anope IRC Services
(No subject)
« Reply #5 on: July 10, 2006, 04:21:26 PM »

Another nice feature of UnrealIRCd's spamfilters is they completly ignore Ctrl chracters including Ctrl+K, Ctrl+B, Ctrl+U, Ctrl+O and Ctrl+R (Eg. the formatting characters)

[Edited on 10-7-2006 by Jobe1986]
Logged
Your IP: ()
My IRC Status:

Come along and visit http://www.anopequotes.org/

Cihan

  • Guest
(No subject)
« Reply #6 on: July 10, 2006, 04:26:14 PM »

how can i do it?
Logged

Jobe

  • Contributor
  • *
  • Offline Offline
  • Gender: Male
  • Posts: 1023
    • Anope IRC Services
(No subject)
« Reply #7 on: July 10, 2006, 04:29:29 PM »

The best people to ask would be those at http://forums.unrealircd.com as i have to admit im not so good at writing spamfilters myself. They have a whole section on their forum dedicated to spamfilters which is where you could submit this and they should give you a nice /spamfilter command to do the job.
Logged
Your IP: ()
My IRC Status:

Come along and visit http://www.anopequotes.org/

Cihan

  • Guest
(No subject)
« Reply #8 on: July 10, 2006, 04:31:10 PM »

At the moment, you can't use a spamfilter to check for format codes since they are stripped from the text the regex is matched against. (IIRC).
Logged

Jobe

  • Contributor
  • *
  • Offline Offline
  • Gender: Male
  • Posts: 1023
    • Anope IRC Services
(No subject)
« Reply #9 on: July 10, 2006, 04:39:39 PM »

Thats what i just said. so you set up the spamfilter to match against the non format codes of the message. which from your examples above (not showing format codes) can be done easily.

For example in your messages above 2 characters then a space then another 2 are being repeated. Its those that would be used as the pattern. The formatting codes are put in by the bot to make it harder but since UnrealIRCd's spamfilter ignores them anyway its not a problem.

[Edited on 10-7-2006 by Jobe1986]
Logged
Your IP: ()
My IRC Status:

Come along and visit http://www.anopequotes.org/

Cihan

  • Guest
(No subject)
« Reply #10 on: July 10, 2006, 08:22:38 PM »

you don't understand me. you say an easy way. but i want my operserv not to be flooded by bots.
Logged

Jobe

  • Contributor
  • *
  • Offline Offline
  • Gender: Male
  • Posts: 1023
    • Anope IRC Services
(No subject)
« Reply #11 on: July 10, 2006, 08:32:25 PM »

Yeah. A spamfilter will do that. A spamfilter works at the IRCd that the user is connected to long before the message is passed along to OperServ meaning that the message wont even get there. Basically a message matching a spamfilter will be blocked by the IRCd that the user is connected to and then if set an action will be taken against the user. But as things are without a spamfilter the user sends the message to the IRCd then the IRCd forwards it to the services server that OperServ is on. So you see the spamfilter will block the message before it gets to OperServ.

[Edited on 10-7-2006 by Jobe1986]
Logged
Your IP: ()
My IRC Status:

Come along and visit http://www.anopequotes.org/
Pages: [1]   Go Up