|
|
| Author |
Message |
LegendLady Newbie

Joined: 12 Apr 2005 Posts: 54 Location: IRC
|
Posted: Jan 04, 2006 7:01am Post subject: Any good Security addons/services? |
|
|
Last nite we got hit by a small botnet, random identds no version responce.
Luckily we had some IRCops alive
Any idea how we can block bots like those?
Thanks.
We currently run NeoStats and Anope.
we tried defender, but that actually does nothing but gline "One Word Version Replies" :/ |
|
| Back to top |
|
 |
braindigitalis Idler

Joined: 22 Sep 2003 Posts: 443 Location: IRC
|
Posted: Jan 04, 2006 8:47am Post subject: Re: Any good Security addons/services? |
|
|
| LegendLady wrote: | We currently run NeoStats and Anope.
we tried defender, but that actually does nothing but gline "One Word Version Replies" :/ |
Thats because you havent configured defender. You do actually need to configure it and add regexps, its not going to configure itself you know (and by that i dont just mean editing the config file) |
|
| Back to top |
|
 |
fgeek none

Joined: 25 Feb 2005 Posts: 11
|
Posted: Jan 04, 2006 11:33am Post subject: |
|
|
| Also there is SecureServ what you can use with NeoStats. You can find it from NeoStats webpage, install it and then configure and use. It is so simple. |
|
| Back to top |
|
 |
Hal9000 none

Joined: 23 Jun 2006 Posts: 4
|
Posted: Jul 04, 2006 9:54am Post subject: |
|
|
I moved from NeoStats/SecureServ to IRC Defender and find it so much better! Just read the documentation on how to configure it, it is really not difficult at all... and it runs like a charm!
Also, I suggest you use a proxy scanner such as BOPM.
hal |
|
| Back to top |
|
 |
mouselike Idler

Joined: 09 Dec 2003 Posts: 261
|
Posted: Jul 04, 2006 11:40am Post subject: |
|
|
| what good is bopm if its black/block list has shut down? |
|
| Back to top |
|
 |
FBI Guru

Joined: 19 Aug 2005 Posts: 1494 Location: Federation Of Bored IRC'ers
|
Posted: Jul 04, 2006 12:14pm Post subject: |
|
|
| mouselike wrote: | | what good is bopm if its black/block list has shut down? |
well neostats opsb and blsb only supports a few ircds.....  |
|
| Back to top |
|
 |
SebasMiles none

Joined: 22 Nov 2005 Posts: 30
|
Posted: Jul 04, 2006 12:42pm Post subject: |
|
|
| Most of the time you really cant do anything other than react. Using proxy scanner, spamfiltering(if you have unreal) common spam messages(Some go blingbling etc), or if you dont have anyone around, just get a script to change the defcon level during floods when no one is around. really its all up to the kind of flood, it is common now to only use joinpartquit floods which are annoying to filter out, but with the newest unreal you can use the mode +j, read up the unreal docs and the last couple of patchnotes for how it works now. |
|
| Back to top |
|
 |
|