we're being flooded- how to stop it? - mIRC Discussion Forums

[11:47] * HMZYQHUPAJ (HMZYQHUPAJ@337889F8.C4CF0D50.762C5DB2.IP) has joined #ffshrine
[11:47] * ZGYOGELMAD (ZGYOGELMAD@337889F8.C4CF0D50.762C5DB2.IP) has joined #ffshrine
[11:47] <Sarah> Channel peak reached. Top users ever online in #ffshrine: 185
[11:47] * UDDXNYSTOC (UDDXNYSTOC@346C154C.997675E4.6E15F8E9.IP) has joined #ffshrine
[11:47] <Sarah> Channel peak reached. Top users ever online in #ffshrine: 186
[11:47] * MPYCNXBOAW (MPYCNXBOAW@firc-11DAD825.pool62211.interbusiness.it) has joined #ffshrine
[11:47] <Sarah> Channel peak reached. Top users ever online in #ffshrine: 187
[11:47] * AWLYZFFBEI (AWLYZFFBEI@firc-1CCEE510.ss.shawcable.net) has joined #ffshrine
[11:47] <Sarah> Channel peak reached. Top users ever online in #ffshrine: 188
[11:47] * ORGJWWJUJV (ORGJWWJUJV@firc-3577CF2F.adsl.zonnet.nl) has joined #ffshrine
[11:47] <Sarah> Channel peak reached. Top users ever online in #ffshrine: 189
[11:47] * QSWYXMNRZM (QSWYXMNRZM@firc-1CCEE510.ss.shawcable.net) has joined #ffshrine
[11:47] <Sarah> Channel peak reached. Top users ever online in #ffshrine: 190
[11:47] * LOFWQNMNTM (LOFWQNMNTM@firc-3577CF2F.adsl.zonnet.nl) has joined #ffshrine
[11:47] <Sarah> Channel peak reached. Top users ever online in #ffshrine: 191
[11:47] * ZLAYIACADQ (ZLAYIACADQ@firc-3EA005A3.netvigator.com) has joined #ffshrine
[11:47] <Sarah> Channel peak reached. Top users ever online in #ffshrine: 192
[11:48] * LYHLKQSDHL (LYHLKQSDHL@3EAF6242.DBCB9B0F.5B83A0D.IP) has joined #ffshrine
[11:48] <Sarah> Channel peak reached. Top users ever online in #ffshrine: 193
[11:48] * UUFEXJZCHU (UUFEXJZCHU@firc-3EA005A3.netvigator.com) has joined #ffshrine
[11:48] <Sarah> Channel peak reached. Top users ever online in #ffshrine: 194
[11:48] * MWVQWDDTFD (MWVQWDDTFD@3EAF6242.DBCB9B0F.5B83A0D.IP) has joined #ffshrine
[11:48] <Sarah> Channel peak reached. Top users ever online in #ffshrine: 195
[11:48] * RGZMGJPWTB (RGZMGJPWTB@13F0D1F6.CA795CD.497C6CDD.IP) has joined #ffshrine
[11:48] <Sarah> Channel peak reached. Top users ever online in #ffshrine: 196

they mostly just join and part, but sometimes they message our users and message the channel.

could someone write a quick script for us that checks to see if

1) on join, their nick is all caps
2) their ident is the same as their nick
3) will akill them by host

I'd really appreciate it- or any other suggestions you might have. thanks

Code:

on *!:join:#:{
  if ($regex($nick,/[A-Z]/g) == $len($nick)) &amp;&amp; ($gettok($gettok($fulladdress,2,33),1,64) === $nick) { &lt;stuff to akill here&gt; }
}

Change <stuff to akill here> to your akill command.
$address($nick,2) is the address of the person in *!*@host format.

thank you

what should I use for the address for an akill? the problem is (I think anyway) that that the address I have won't be the fill address.. part of it is masked, and I only get the full host when I do a /whois

You want to ban the full address?
eg: [email]HMZYQHUPAJ@337889F8.C4CF0D50.762C5DB2.IP?[/email]

If so, use $fulladdress as the banmask.

no, here's the problem:

*!*@firc-120309DD.pns.bellsouth.net is what I get with $address

adsl-0-128-192.pns.bellsouth.net is the actual address

it's masked- I can see through it- but only if I do a whois

You can catch the raw reply for the whois and ban the address in the reply then.

Type /debug @debug then whois someone, and you will see which raw you need in the @debug window.

-> valkyrie.freedomirc.net WHOIS TCK
<- :valkyrie.freedomirc.net 311 Sarah TCK fat3_14 firc-3325E5BF.dsl.pipex.com * :Chris Robinson
<- :valkyrie.freedomirc.net 379 Sarah TCK :is using modes +wrxG
<- :valkyrie.freedomirc.net 378 Sarah TCK :is connecting from *@81-86-208-175.dsl.pipex.com
<- :valkyrie.freedomirc.net 307 Sarah TCK :is a registered nick
<- :valkyrie.freedomirc.net 319 Sarah TCK :#ffshrine ?#archetype-gaming
<- :valkyrie.freedomirc.net 312 Sarah TCK valkyrie.freedomirc.net :Leaf Server - Springfield, VA, USA
<- :valkyrie.freedomirc.net 317 Sarah TCK 30 1096563459 :seconds idle, signon time
<- :valkyrie.freedomirc.net 318 Sarah TCK :End of /WHOIS list.

sorry, not really sure what to do from there ;-\

you need RAW 378. Specificlly $8

Code:

on *!:join:#:{
  if ($regex($nick,/[A-Z]/g) == $len($nick)) &amp;&amp; ($gettok($gettok($fulladdress,2,33),1,64) === $nick) { 
    inc %akill.whois
    whois $nick
  }
}
raw 378:*:{ 
  if (%akill.whois) {
    &lt;akill command&gt; $8
    unset %akill.whois
  } 
}

thanks again for your help

but unless I'm misunderstanding the script... if 50 of them join at once, it wouldn't be able to "keep up," right? it'd just get one of them?

Other things you could do (if your network supports the modes):

1) limit the channel on a rolling timer so that it reset the limit every so often..... (example: //timerLIMIT 0 180 //mode #channel +l $!calc($nick(#channel,0,a) + 5) <-- I BELIEVE that would evaluate on the timer fire and NOT the timer SET)
2) set a join limit so that X nicknames in Y seconds can join
3) make the channel invite only
4) make the channel only registered nicknames can join

Those are some other ideas IF YOUR NETWORK supports those modes

If it was me I'd be using a script like the one tidy trax wrote but making it work from server notices to prevent the room from flooding in the first instance. If you are able to set k:lines then you'll have access to server notices.

You may wish to run a quick check to see if your server allows you to specify a nick in akill (and have the server substitute said nick with their real *@host).

Hope that helps

A ban like ??????????!??????????@* may help you..