Proxy Banning Script

[toefraz]

I need a script to ban hosts that are IPs. They contain no letters, only numbers and decimals. I want it to perm ban them, but I also want it to be able to allow exceptions. So like, if it bans someone I actually want to allow access to my channel, it'll let them through. Anyone know of a script like this, or can make one for me? Thanks in advance.

[demond]

use ban exceptions (+e) if your server/network allows it (EFnet, DALnet, ircd-hybrid and bahamut- based networks)

[toefraz]

it doesn't.

[demond]

then maintain full host (not masked) bans only

[toefraz]

the reason i want this, is because im trying to get around spammers. They come in using different proxies with different ips, and they mostly only use ips in their hostnames. So I wanted a way to ban them automatically when they enter, so that I don't have to see any more spam.

[toefraz]

it's kinda hard to manually ban them without them spamming first. since the spam, then quit irc.

[demond]

well, I'd recommend spambuster.tcl

[user]

I need a script to ban hosts that are IPs.
I want it to perm ban them, but I also want it to be able to allow exceptions.

Code: Select all

bind join - "#yourChan *" ipchk
proc ipchk {n u h c} {
	if {![isbotnick $n]&&![validuser $h]&&[string match {*[0-9]} $u]} {
		newchanban $c *!*@[lindex [split $u @] end] ${::botnet-nick} "I love you"
	}
}

...to exempt people from being banned, add them to your bot. (if you have several regulars that should have no other privileges than being able to join without getting banned, add a single "exempt user" with multiple hosts and no flags

[toefraz]

thank you

[toefraz]

how can i make that to be with all channels?

[user]

how can i make that to be with all channels?

remove the channel name from the bind (make the mask "*")

[toefraz]

so it would be

Code: Select all

bind join - "*" ipchk 

?

[demond]

user's proc will ban ANYONE with unresolving host (who isn't recognized as a botuser) - not just alleged spammers - so beware what you wish(ed) for, for you might get it

[De Kus]

I do usually always a !seen on the host before considering a wide ban. You might get really busy exempting wished users (and some might never return, because the don't understand IRC well enough to notice you didn't ban them but their whole hostmark style ^^). Maybe you just add wideban for the proxys, there aren't too many as long your Network g-lines open Proxys (and I hope all do today, but probably they don't ^^). If your network doesn't you might contact an IRC oper to ask if it planed.

[demond]

some of the big 4 (i.e. EFnet and IRCnet) have pretty decentralized policies on this, so you might find yourself on a server that scans your hostname on connect for open proxies on well-known ports, or you may be using a server which couldn't care less - it's up to server's admin to install and use a proxy scanner

there are scripts (I've seen at least one) that scan users on join, but this is too heavy burden on eggdrop IMHO - it's far from easy to implement proper and efficient scanner in a script

besides, novadays most spammers don't use open proxies - they are spawned by trojans/viruses from infected windows boxes