egghelp.org community

TRaSH · Posted: Thu Aug 17, 2006 6:46 pm Post subject:

but that means a voiced user can flood/caps/whatever the channel,
and i only want to exempt them for cloning.

Alchera · Posted: Thu Aug 17, 2006 7:01 pm Post subject:

You do not want them exempted from every other single channel abuse bar one?

Either use exempt mode 2 (Half-Ops) and turn off clone detection or use mode 3 and leave clone detection on.

As near as I can tell there is no way to achieve what you have requested.

PS: With this script only users that you wish to give party line access to need be added to the bot.
_________________
Add [SOLVED] to the thread title if your issue has been.
Search | FAQ | RTM

Domin · Halfop Joined: 10 Jun 2006 Posts: 72

excempts in the clone scanner can be addet manualy if you edit the script, i did it and it works fine, it does however mean that you have to add each and everyone of the users you wish to exempt from the clone scanner manualy.

Search for this line in the config file:

Zircon · Op Joined: 21 Aug 2006 Posts: 191 Location: Montreal

Hello all

This is my first time here. I have a channel registred on Undernet with X, and i recently installed an eggdrop v1.6.17 to protect my channel against mass join/part flood. I use AllProtection 4.5. Yesterday, my channel was victim of join/flood part, and my bot didn't react as he was supposed to do. All the values of AP variable were at defaults except few ones that i changed :
ap:repeatc: 50
ap:limit: 0
ap:revdoor: 1
ap:clones: 4

By saying the bot didn't react good, i mean, the revdoor/brevdoor protection didn't work, the partmsg flood protection didnt work, and even when the bot attempted to put a ban, it didn't work. So i ended to have 53 join/part flood, ( 53 join and 53 part) from 17 hosts Sad

here are some examples :

Example 1 : after the first 4 revdoor, the bot said : "AP: Locked #culture due to botnet part msg flood.", but it took no action against it.

Example 2 : after the first 10 revdoor, and the 3rd revdoor from this same host, the bot said : "JOIN flood from @67-51-34-154.nrp4feld.roc.ny.frontiernet.net! Banning", but it took no action against it.

[15:34] gpghpxy (~jfakhngk@67-51-34-154.nrp4feld.roc.ny.frontiernet.net) joined #culture.
[15:34] gpghpxy (jfakhngk@67-51-34-154.nrp4feld.roc.ny.frontiernet.net) left #culture (Jh0N-T`(!)`Gr0uP`'.`.''EaStErN`(!)`RuLeZ`'.`.''Jh0N-T`(!)`gR0uP`'.`.''EaStErN`(!)`RuLeZ`'.`.''Jh0n-T`(!)`Gr0uP`'.`.''EaStErN`(!)`RuLeZ`'.`.''Jh0N-T`(!)`gRouP'.`.'eAsTeRn`(!)`ruLeZ`'.`.''Jh0N-T`(!)`Gr0uP`'.`.''EaStErN`(!)`Set

[15:34] JOIN flood from @67-51-34-154.nrp4feld.roc.ny.frontiernet.net! Banning.

[15:34] muiqtier (~gewilzy@67-51-34-154.nrp4feld.roc.ny.frontiernet.net) joined #culture.
[15:34] muiqtier (gewilzy@67-51-34-154.nrp4feld.roc.ny.frontiernet.net) left #culture (Jh0N-T`(!)`Gr0uP`'.`.''EaStErN`(!)`RuLeZ`'.`.''Jh0N-T`(!)`gR0uP`'.`.''EaStErN`(!)`RuLeZ`'.`.''Jh0n-T`(!)`Gr0uP`'.`.''EaStErN`(!)`RuLeZ`'.`.''Jh0N-T`(!)`gRouP'.`.'eAsTeRn`(!)`ruLeZ`'.`.''Jh0N-T`(!)`Gr0uP`'.`.''EaStErN`(!)`Set By XDiablesse)

also if u remarked, the part msg have 250 caracters, but the bot didnt ban, he was supposed to do coz the limit is 180.

Another thing weird, is when i did the command ".bans all" after the end of that attack, the bot says that it puts the some of the bans, which is completely false, a friend of mine was there and he did. The bot tried to make the ban it didnt suceed. Here is an example :

mode change '+b *!*@67-51-34-154.nrp4feld.roc.ny.frontiernet.net' by B|GWAVE

and .bans all give :
[ 7] *!*@67-51-34-154.nrp4feld.roc.ny.frontiernet.net (expires at 18:34) Zircona: join flood Created 15:34

so these following bans werent made by the bot even if it says so, actually the bot said "Join Flood @host.domain Banning", but it didnt put the ban, my friend B|GWAVE does :

[ 1] *!*@adsl-216-147.tricom.net (expires at 18:34) Zircona: join flood Created 15:34
[ 2] *!*@222.174.218.106 (expires at 18:34) Zircona: join flood Created 15:34
[ 3] *!*@ip68-97-13-195.ok.ok.cox.net (expires at 18:34) Zircona: join flood Created 15:34
[ 4] *!*@221.160.159.25 (expires at 18:34) Zircona: join flood Created 15:34
[ 5] *!*@193.95.91.84 (expires at 18:34) Zircona: join flood Created 15:34
[ 6] *!*@c-69-254-111-229.hsd1.tn.comcast.net (expires at 18:34) Zircona: join flood Created 15:34
[ 7] *!*@67-51-34-154.nrp4feld.roc.ny.frontiernet.net (expires at 18:34)Zircona: join flood Created 15:34

At the end of the attack, the bot made the following bans even if there is : *, means "not placed by bot" :

* [ 8] *!*@ool-43536ac2.dyn.optonline.net (Zircona) (active 04:32)
* [ 13] *!*@85.11.166.88 (Zircona) (active 04:11)
* [ 17] *!*@c3eea481a.cable.wanadoo.nl (Zircona) (active 03:39)
* [ 18] *!*@201.242.211.92 (Zircona) (active 02:39)
* [ 19] *!*@cpq4784.student.iastate.edu (Zircona) (active 02:22)

Hope u have all the informations u need to have a clear idea.

i sent the details of this attack to sir_Fz. Can some1 help me with this and tell me why it didnt work ? or what wrong thing i did maybe. Is it a bug ?

Hope this is the place to post such things.

Thanks in advance.

Alchera · Posted: Mon Aug 21, 2006 7:10 pm Post subject:

You have the settings wrong.

Zircon · Op Joined: 21 Aug 2006 Posts: 191 Location: Montreal

Hello Alchera

Thanks for the answer. But as i said, i use allprotection 4.5, not 4.6, so i guess i have the right settings with 4.5, almost all of them are set to defaults, except the ones i mentionned.. I ll use 4.6 when it will be fully tested and added to www.eggdrop.com/tcl.htm

Alchera · Posted: Mon Aug 21, 2006 8:17 pm Post subject:

You'd be wise to upgrade to the latest script. The only "bugs" so far appear to be those users that do not read the configuration information.

Sir_Fz will be unavailable until further notice due to the current security problems in the Middle East. So do not expect support for 4.5 any time soon.

dhp1080 · Voice Joined: 14 Aug 2006 Posts: 8

I'm having an issue with botnet protection. I don't know what exactly is wrong (hoping for maybe a way to set a higher log level).

I have a pseudo-botnet (about 30 users) for testing out my spamserv. I have them all join the channel, joining all within about 2 seconds. My services nicely react to this problem, but the script doesn't play it's role in setting channel modes and informing that the channel has been locked.

This might be some configuration issue, but I figure it'd be beneficial to ask some people who might know more than I do.

Zircon · Op Joined: 21 Aug 2006 Posts: 191 Location: Montreal

Hello Alchera

i should say "i m sure the settings are right" instead of "i guess settings are right". I read carefully every line of the configuration information within the script. I m the kind of person that read the manual before switching on a new tv.....The settings are perfect.

Alchera · Posted: Tue Aug 22, 2006 6:59 pm Post subject:

@ Zircon:

Would I be correct in assuming you managed to contact Opposing on IRC and that he suggested an upgrade of your eggdrop (1.6.1 Cool

and the script?

If so, I suggest you do as (as Opposing already stated) there are no major "bugs" reported to date.

I use the script extensively and have so far only found two minor "quirks" (as posted) which are of no consequence as neither disrupts the correct functioning of the script (v4.6b5).

I reiterate what I have previously posted in that a full channel ban list will prevent any ban being set (by anyone) although every indication is that a ban has been correctly set by the user.
_________________
Add [SOLVED] to the thread title if your issue has been.
Search | FAQ | RTM

Zircon · Op Joined: 21 Aug 2006 Posts: 191 Location: Montreal

Hello Alchera

That s right, i contacted Opposing yesterday, on IRC. He suggested me to upgrade to 4.6, althought he said nothing about upgrading the eggdrop, but i think he wasn't knowing that my bot is v1.6.17

Concerning the size of the banlist, the setting in the channel is +dynamicbans, and the banlist was totally empty before the attack.

Is there a major change between 1.6.17 and 1.6.18 ?

Alchera · Posted: Tue Aug 22, 2006 10:47 pm Post subject:

Domin · Halfop Joined: 10 Jun 2006 Posts: 72

I wouldt also suggest upgrading to .18 since i remember Opposing writing in this tread that the script runs best on that version, and in case of any problems try upgrading before reporting bugs Wink

_________________
Regards
Domin @ efnet

Zircon · Op Joined: 21 Aug 2006 Posts: 191 Location: Montreal

Hello Alchera, Domin

Thanks for ur advices, i ll try to follow ur suggestions, and upgrade. I ll try to make some tests, and i ll give u a feedback whenever it's done.

Thanks

dhp1080 · Voice Joined: 14 Aug 2006 Posts: 8

I've been using this script for awhile now, and it functions nearly flawlessly for what it's designed to do. I was only wondering about 2 things.

1) Why is the ban for the user set after the kick? I'm sure that having the user not know the banned mask is great, but banning first stops the user from sending messages faster.

2) Is there any simple way to completely stop the script from limiting the rate at which it sends commands? My bot is opered and was compiled to have a 0 wait time in sending messages (per another forum thread).

Any help is appreciated as always.