This is the new home of the egghelp.org community forum.
All data has been migrated (including user logins/passwords) to a new phpBB version.


For more information, see this announcement post. Click the X in the top right-corner of this box to dismiss this message.

ban Ip in channel when flooder nick is online

Requests for complete scripts or modifications/fixes for scripts you didn't write. Response not guaranteed, and no thread bumping!
Post Reply
g
gamble27
Halfop
Posts: 71
Joined: Tue Aug 05, 2008 7:51 am

ban Ip in channel when flooder nick is online

Post by gamble27 »

hi guys,basically im looking for a tcl that can remember nicks that i add into them its like a notify script,when the nick comes online on irc eggdrop will auto ban the nicks IP in the specified channel i want too.basically i need this script its cause im having bad floods on my channel and flooder uses registered nicks so +M dont work to stop it on dalnet,so i want my eggdrop to even ban it before it can join the channel.i would really appreciate the help.in short i want the eggdrop to ban nicks that i add on into the eggdrop upon coming online.
User avatar
Sir_Fz
Revered One
Posts: 3794
Joined: Sun Apr 27, 2003 3:10 pm
Location: Lebanon
Contact:

Post by Sir_Fz »

When someone connects to IRC, the bot does not receive a signal that this particular nick is now online. The bot has to send an ISON request to the server to check if someone is online. So, you want the bot to send ISON requests for probably 10s of nicknames every few seconds? IMO this approach for avoiding floods is inefficient and it would speed down your bot (causing more damage to your channel's protection) instead of doing you any good.
n
nml375
Revered One
Posts: 2860
Joined: Fri Aug 04, 2006 2:09 pm

Post by nml375 »

I've had some thoughts on such a script earlier, but progress really hasn't been much further than a theoretical discussion. The problem is, as Sir_Fz stated, the only reliable means of detecting whether a flooder is online, is to use ISON queries. As for the impact of ISON queries, it's a lightweight command designed explicitly for automated checks if someone is online (rather than WHO and/or WHOIS queries). Time penalties are minimum, yet I'd suspect you would attract some attention (the bad kind) from server admins and IrcOps should you query more than maybe once a minute?

Unless the flooder jumps over a vast range of hosts, permbans would be the most effective approach, apart from contacting IrcOps.

Some networks, such as IrcNet, do provide services such as noteserv that basically notifies you when someone matching a mask you're interested in. This is not fool-proof, as this service honors the +i invisible usermode, and also has a delay to give users ample of time to set themselves +i. I have no idea whether DalNet offers such services..
NML_375
g
gamble27
Halfop
Posts: 71
Joined: Tue Aug 05, 2008 7:51 am

Post by gamble27 »

the problem that i have is flooder uses proxies,so even i ban them it dont makes a different cause he/she will have a new proxy to join.is thr any function eggdrop has like they have in on mirc NOTIFY,so basically there is no way i can stop him ?
n
nml375
Revered One
Posts: 2860
Joined: Fri Aug 04, 2006 2:09 pm

Post by nml375 »

Add all known proxy-hosts to your banlist, and your bots will ban him as soon as he joins using this or that proxy. You'll most likely have your hands full keeping the banlist up to date however. Also use restrictive flood-settings.

Finally, as he uses registered nicks, IrcOps should be able to help you unregister those, requiring a little bit more effort to avoid the +M channel-mode. Besides, they (and serveradmins) are usually very keen on banning open proxies altogether, as they only tend to bring trouble anyway.

You could moderate the channel, and have some script to voice people through some kind of validation. You'd still see the joins and parts, but your channel would not be flooded with text so easily.
NML_375
User avatar
DarkRaptor
Voice
Posts: 36
Joined: Sat Apr 15, 2006 2:39 am
Location: Trois-Rivières, Qc

Post by DarkRaptor »

I don't remember if dalnet user can use +x usermode to hide their ip/host... but if floodbots don't use it, you could use proxycheck.tcl

From author's site: proxycheck performs RBL lookups on people joining your channel and bans people who are listed. Per-channel toggle, configurable ban duration, configurable RBL usage.
DarkRaptor @ irc.undernet.org
User avatar
Sir_Fz
Revered One
Posts: 3794
Joined: Sun Apr 27, 2003 3:10 pm
Location: Lebanon
Contact:

Post by Sir_Fz »

I don't think that these flooders use proxies for loading bots, they control botnets which they use for loading flood-bots instead. Perhaps a small script which immediately sets +m if certain nick(s) join the channel would be efficient enough?
B
Bahasa
Voice
Posts: 19
Joined: Sun Jul 27, 2008 11:22 am
Contact:

Post by Bahasa »

maybe set +j 4:5 is a good idea ? and if you can remember the whole nick you can .+ban nickname!*@* flooder on your dcc bot
Post Reply