|
|
| Author |
Message |
rexun none

Joined: 05 Feb 2008 Posts: 11
|
Posted: Feb 05, 2008 3:43pm Post subject: How to prevent attacks on your NETWORK! |
|
|
#1. Get a bopm, i recommend around 2-3 with diff blacklists or custom ones
#2. use Neostats, if the bots have a specific version ban them on connect.
#3. Use anti-random module for anope, any random nicks + idents = killed/kline.
#4. Make sure your Shell provider has ddos filters, and give them permission whenever theres a huge data spike to filter out maliciouse packets
#5. Dont start shit with people, if they ddosed you once, simply leave them alone, hopefully they will do the same.
#6. Dont bother reporting it to fbi/scotland yard they dont bother with this kinda stuff unless you have huge damage ($4000usd or more).
#7. Never threaten/make fun of hackers, becouse you will always cry at the end.
#8. if the bots spam a link, add spamfilters.
#9. Defcon can help in emergencys
#10. make some type of script to shun/gline bots on join or connect, (only if your networks small, if over 150 real users dont do that, you can kill innocents.
Hope this helps, and the most important rule of all, DONT MESS WITH THEM THEY WONT MESS WITH YOU... |
|
| Back to top |
|
 |
greg27 Lurker

Joined: 07 Oct 2006 Posts: 148 Location: Australia
|
Posted: Feb 05, 2008 3:51pm Post subject: |
|
|
| irc defender is also a nice option, and if you use anope then os_notinchanlist is a must have. |
|
| Back to top |
|
 |
SasukeUchiha Lurker

Joined: 01 Dec 2007 Posts: 114 Location: California
|
Posted: Feb 05, 2008 7:21pm Post subject: |
|
|
So many choices >.> *Picks* Well I might as well get all of them!  |
|
| Back to top |
|
 |
Xaphan Newbie

Joined: 12 Feb 2007 Posts: 78
|
Posted: Feb 06, 2008 5:39am Post subject: |
|
|
Welp. I can honestly say that the lame flood attacks that happened on my network over the last week, have halted and the idiot behind them, isn't getting far.
I have installed on the servers a new(ish) auth daemon. It handles all the autorization stuff, while the IRCd is just there for chatting etc.
It's one of the useful things that comes with using an ircd that is currently in use by large networks; more benefits of their experiences. |
|
| Back to top |
|
 |
greg27 Lurker

Joined: 07 Oct 2006 Posts: 148 Location: Australia
|
Posted: Feb 06, 2008 6:32am Post subject: |
|
|
| and cue the unrealircd bashing... |
|
| Back to top |
|
 |
Xaphan Newbie

Joined: 12 Feb 2007 Posts: 78
|
Posted: Feb 06, 2008 8:00am Post subject: |
|
|
| greg27 wrote: | | and cue the unrealircd bashing... |
Not Unreal bashing tonight, sorry. Just stating a fact:)
I'm told EFNet does it as well, so there's Hybrid/ratbox etc added to the list.
When speaking to Unreal IRCd coders about it, suggesting they do something identical... I got...
(06.02) [05.53am] <@Stskeeps> Xaphan: no, doubt it - we have auth.c though where people can write whereever hell they want for auth stuff  |
|
| Back to top |
|
 |
sirkit Newbie

Joined: 27 Nov 2007 Posts: 63 Location: eth0
|
Posted: Feb 06, 2008 5:20pm Post subject: |
|
|
charybdis is based on ratbox which is based on hybrid  |
|
| Back to top |
|
 |
|