View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0002381 | unreal | ircd | public | 2005-03-01 12:22 | 2005-03-01 12:41 |
| Reporter | infowolfe | Assigned To | |||
| Priority | normal | Severity | major | Reproducibility | always |
| Status | closed | Resolution | open | ||
| Product Version | 3.2.2 | ||||
| Summary | 0002381: Spamfilter doesn't properly parse mIRC color codes | ||||
| Description | My network was attacked by ~400 onjoin bots last night each spitting out a variation on the same theme (see attachment). With a simple regex.. where # is the mIRC unprintable color code character ^(#\d[A-Za-z]){6}.*$ should have caught all of this spam. Instead, it's worse than useless because on top of the spamfilter not doing anything, it's undocumented that the spamfilter doesn't recognize mIRC style color codes. /spamfilter add cpnN gline - - ^(#\d[A-Za-z]){6}.*$ should have stopped ALL of this before it had a chance to start. Please publicize what style REGEX is actually used in unrealircd (PCRE?) and either fix the coloration issue (figure out how the server handles non-printables and compensate for it), *or* put it in your documentation somewhere that the spamfilter is absolutely useless when the spam has *any* color whatsoever. | ||||
| Steps To Reproduce | paste the content of the logfile below into a channel in a default mIRC installation and you'll see the cute little porn message. | ||||
| Attached Files | _aysu-_.ZeroFuzion.log (445 bytes) | ||||
| 3rd party modules | |||||
|
|
First of all, calm down and be nice.. thanks :P What exactly is the problem? Spamfilter strips colors (and other codes) before processing, this is on-purpose so it's harder to evade spamfilters. I downloaded your sample and added the following spamfilter: /spamfilter add c block - - Whwdwb.vacmuckiikz.agleöns.dmas and it is now indeed blocked, www.vulnscan.org/tmp/spamsample.png > it's undocumented that the spamfilter doesn't recognize mIRC style color codes. Could you clarify a bit what you meant? What exactly is wrong with parsing of color codes here? It seems to work perfectly fine, perhaps your problem is that spamfilter DOES recognize (mirc) color codes, but that's not what you said :P |
|
|
On a sidenote you probably want something somilar to: /spamfilter add c block - - f.*r.*e.*e.*h.*a.*r.*d.*p.*o.*r.*n.*w.*w.*w.*\..*a.*m.*c.*i.*k.*\..*g.*e.*n.*\..*m.*s Still, what you actually SAID did not make any sense :P. Please drop the angry attitude next time. |
|
|
my apologies. and thanks for the line that started catching immediately |
|
|
okies. |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2005-03-01 12:22 | infowolfe | New Issue | |
| 2005-03-01 12:22 | infowolfe | File Added: _aysu-_.ZeroFuzion.log | |
| 2005-03-01 12:27 | syzop | View Status | public => private |
| 2005-03-01 12:34 | syzop | Note Added: 0009376 | |
| 2005-03-01 12:39 | syzop | Note Added: 0009377 | |
| 2005-03-01 12:41 | infowolfe | Note Added: 0009378 | |
| 2005-03-01 12:41 | syzop | View Status | private => public |
| 2005-03-01 12:41 | syzop | Status | new => closed |
| 2005-03-01 12:41 | syzop | Note Added: 0009379 |
