Repeat akill evasion

ed · Posted: Feb 16, 2005 3:23pm Post subject:

That's when you call up his ISP, and whine until they do something.

Pepper-Tech · none Joined: 30 Aug 2004 Posts: 10

Already did, even mentioned him attacking my server, they never did anything.

Ashen · Idler Joined: 05 Jan 2004 Posts: 285

Pepper-Tech · none Joined: 30 Aug 2004 Posts: 10

The great thing with his ISP they put the city in the mask, unlike AOL where if you ban *@*.*.aol.com you knock out most of their network if not all of it (which may be handy for those who hate the millions of ping timeouts they also cause). Razz

Xander · none Joined: 18 Feb 2005 Posts: 41

get yourself a scan bot to auto akill every person on a proxy. no many people use proxys unless you havnt got the +x mode available. then just simple block him. only way around that is restarting his internet connection if he can.

Travers · none Joined: 19 Feb 2005 Posts: 7

On my network with the services i created/coded the oper service has a nice little flag on our netban command

-gh which stands for 'g'line 'h'ost

so if you /msg Turbo netban add *!tom@* -gh Go away

anyone connecting with identd tom will be banned *!*@theirfullip .. without -gh it will simply ban ident@* which yes could be easily evaded but is good for banning viruses which only use the one identd anyway. Also we can use -gh on nicks i.e: ??????*!*@* ..

Because our network is quite large we have to be careful if we do domain bans on evaders. So we always check client history to see what kind of stats is on the certain domain weather it be something like *!*@*ozemail.com.au so see how many clients are going to be banned.

Other than these suggestions ... people will always evade theres no stopping them. It comes down to dealing with them in other ways instead of banning them, which is what they want you to do because they know it annoys you..

Travers

ArqNet irc network - irc.arqnet.org
Network Officer
PublicRelations Consultant
sebastian@arqnet.org

Pepper-Tech · none Joined: 30 Aug 2004 Posts: 10

I've got logs going back to November 2003, only 2 people from the ISP/city and both are trouble so blocking the whole city isn't a huge loss to our tiny 30-50 member network.

Travers · none Joined: 19 Feb 2005 Posts: 7

That will not stop them using proxies though (if they have access to proxies - wait, what kind of question is that ;p)

Pepper-Tech · none Joined: 30 Aug 2004 Posts: 10

I know. This is one tough turkey to hunt. Even with Blitzed Open Proxy Monitor, there's still several options.

v3|0c17y · Eleet Joined: 28 Jan 2005 Posts: 650

Rye Seronie Oh · none Joined: 14 Mar 2005 Posts: 1

Muahaha. It's amazing what a google for "pepper-tech" will reveal. You know, Jonnifer, I quit coming to your network. It sucks. Go on, bitch to SBC. How do you stop someone who gets free DSL because a family member works there?

If I wanted to ruin you, I would have done it when I had the chance. You're not worth my time. Razz

(I don't think I really tried to get around it though. I gave up quick. Matter of fact, I've yet to see one single message saying I'm banned. I must be good.)