mIRC Home    About    Download    Register    News    Help

Print Thread
Joined: Mar 2004
Posts: 10
D
Pikka bird
OP Offline
Pikka bird
D
Joined: Mar 2004
Posts: 10
Hi,

Is there any ways to make own things?
Like:

if ($nick isop $chan)
if ($nick isov $chan)

..and so on, can I make liike thos "isop" things, myself?

If I can, - how can I do it?

* svynydze (~xctfpwzj@****) has joined #blah
* nqulmhed (~sljwjhgj@****) has joined #blah
* quvpaycp (~fepyneoh@****) has joined #blah
* czcxlchg (~fuujczjt@****) has joined #blah

Like here, the idents, but, it aint easy to make so it protects those "RANDOM IDENTS" ?
It would be easier if like:
on *:JOIN:#: {
if ($ident($nick) iswm $rand(a,z)) {
mode $chan +b $address($nick,2)
kick $chan $nick Possible flood attack..
}
}
Or, like "iswm", if there was a thingy, to check if it SEEMS like a 'random' ident.. :|

it aint cool with all those flood attacks, some people makes..
and, the problem is, that they MOSTLY do it throught "proxies", etc. so there is not a directly way, to show to their ISP, that it is 100% them who did it..

:'(

Anyone who can help? Thanks...

If anyone wants to do a protection script, that can block such idents as those, there seems random...

and I can be contacted in #DarkDeviL on StayNet (irc.staynet.eu.org) smile

Hope to hear from some "advanced scripters" soon smile

Joined: Aug 2003
Posts: 325
W
Fjord artisan
Offline
Fjord artisan
W
Joined: Aug 2003
Posts: 325
Problem is that how would it know that they are random or abbreviations, words, etc?

For example, if someone uses a nick of "OU812" that might appear random, but it says "Oh, you ate one too"

It's been my experience that the situation you described is usually preformed by cloners, so a clone detector may be in order. Or if you wish to have it report to you when someone has a nick with either q,x or z in it, that may work too (but only send you a notification, so that you can make the decision for yourself).

Mentioning clones, it would be nice if there was a $clone identifier. $clone(#,M,0) returns how many addresses have clones matching mask # M (same as $mask), $clone(#,M,1) returns how many nicks/clones for the first address, with properties being .mask (returns the matching mask), .op (returns $true if any of the matching masks has OP status), .hop/.voice (same as OP for HalfOP/Voice respectively) and .ban if the mask matches any of the bans smile

To get the nicks, just use $ialchan(mask,#,N) smile

I'll probably just write my own though lol

EDIT: *smacks self* duh, just occurred to me.. $ialchan is pretty much like a clone detector.. Just ignore me.
grin

Last edited by Wolfie; 21/04/04 05:37 PM.
Joined: Dec 2002
Posts: 1,922
O
Hoopy frood
Offline
Hoopy frood
O
Joined: Dec 2002
Posts: 1,922
This script locks the channel (+R) whenever 4 users with disabled identd (~username) join in a row:

On @*:join:#:{
if ~ isin $address {
if %mj [ $+ [ $cid ] $+ [ # ] ] == 3 {
mode # +R
$+(.timerMODE,$cid,#) 1 200 mode # -R
}
else inc -u2 $+(%,mj,$cid,#)
}
else unset $+(%,mj,$cid,#)
}

Joined: Aug 2003
Posts: 325
W
Fjord artisan
Offline
Fjord artisan
W
Joined: Aug 2003
Posts: 325
Dude you rule (in that you make your stuff connect/room independant, wish more scripts were designed like that)..

However, just out of sheer paranoia, wouldn't it be better to do "*!~*@* iswm $fulladdress" in case someone gets on a funky network that allows ~ in the nick or has it elsewhere in the $fulladdress?
smile
Just sayin, ya know...

Joined: Mar 2004
Posts: 10
D
Pikka bird
OP Offline
Pikka bird
D
Joined: Mar 2004
Posts: 10
A good way is as you told, to disallow idents containing "~", but the problem is, who have identd? how much people in percent have identd, or "know" what it is?

Or who have a router where identd doesnt works on?
That would be the problem, if channels are going to be big...

:: Joins :: Hey :: (~hey@is.a.newb.that.doesnt.know.identd.com) ::
:: Mode :: DarkDeviL :: +b :: *!*@*.identd.com ::
:: Kick :: DarkDeviL :: Kicked Hey :: Missing Identd ::
(I'd made this example cooler style, etc. :P)

But, this would be the way to... to say:
"I don't want people in my channel, atleast 60% of all IRC users is noobs that doesnt know how identd works, so they are not welcome in my channel"

Now I know something, about many flood scripts/addons/like, because I experimented with them..

{21:30:51} * f9001 (~x1127@staff.staynet.org) has joined #Bots
-- Flood Clone Attack: f9001 (staff.staynet.org)
{21:30:55} * o3798 (~u8078@staff.staynet.org) has joined #Bots
-- Flood Clone Attack: o3798 (staff.staynet.org)

Like this, most flood scripts, are such random things
either one or two chars like: 'x' or 'ux', and then 3-4 digits...
For those it's easy to make protection scripts, or, a little bit easier...

that script (my flood protection script, here..) didn't hit 6 out of 31 clones, when me and my friend tested it.. (throught proxies/socks, etc.)

and the problems with proxies are, that not all proxy scanners can find secure/high anonymous proxies.. and so on, that's the problem, else a proxyscanner would be the good way,

Many people thinks like:

"hmm, how do I do so they cannot see it's me?", "oh yeah, proxies!"

http://www.darkdevil.dk/flood.htm <- Bad way!
Bad way to first join the hcannel, then lets the flood clones join, then quit the cloens, and so quit self...

My many years at IRC, gave me some "tips and tricks", about how people should act, (example opers), and so on... smile

Does any one of you guys maybe know a good Proxyscanner?

(J10 / P10)
(IRCu Compatible)
and eventually a Trojanscanner, too ?

Now I'm an operator on StayNet, so... eh.. I pwnz j00! :P
heh...

K:*:"Please install an identd server!":~*

could be a good idea, but will also give a user loss... :'(

But I will stop my "long storie" now, and eventualyl wait for more replies :P

And, thanks for your replies.. smile

Much flood clones does NOT have an identd server installed, so the thing with disallowing ~, could maybe be an idea.. smile
But I dont like that, because of as I told, user loss frown


Link Copied to Clipboard