egghelp/eggheads community

Change the ban command to exempt.

2009-07-03T02:57:59-04:00

http://searchirc.com/boards/viewtopic.php?t=2499 its old, but alot of the RBL's are still active and used by alot of IRC Networks.

Statistics: Posted by TCL_no_TK — Fri Jul 03, 2009 2:57 am

Change the ban command to exempt.

2009-07-03T01:35:55-04:00

Tcl mate u have done a wonderful job,i really appreciate it thanks,its really working the way i want it to but i realise rbls are giving TOO many false kicks:< looks like i have to find for a specified RBL which is made for irc only.thanks again tho

Statistics: Posted by gamble27 — Fri Jul 03, 2009 1:35 am

Change the ban command to exempt.

2009-07-01T13:53:40-04:00

its great going,its working nicely,i was jus wondering how can we ignore scanning for certain mask like *!*@121.121.* or *!*@203.82.* can we exempt scanning for such mask?? thanks

Ok change

Code:

#don't apply to friends, voices, ops if {[isop $nick $channel] || [isvoice $nick $channel] || [matchattr $handle fov|Pfov $channel]} { return 0 }

so that its the following:

Code:

#don't apply to friends, voices, ops if {[isop $nick $channel] || [isvoice $nick $channel] || [matchattr $handle Pfov|Pfov $channel]} { return 0 }

and then just add the address's you want to exempt from being scanned, to the user "proxychk" like the following:

.+host proxychk *!*@121.121.*

or if there already a user in the bot, you can exempt them from being scanned (this will be globally, all channels) with

.chattr +P

in DCC/telnet with the eggdrop.

@sk-4 am not sure about this, could just be down to the eggdrop dns

Code:

set proxycheck_rbls [list "dnsbl.ahbl.org" "tor.ahbl.org" "cbl.abuseat.org " ]

Statistics: Posted by TCL_no_TK — Wed Jul 01, 2009 1:53 pm

Change the ban command to exempt.

2009-07-01T08:11:59-04:00

its great going,its working nicely,i was jus wondering how can we ignore scanning for certain mask like *!*@121.121.* or *!*@203.82.* can we exempt scanning for such mask?? thanks

Statistics: Posted by gamble27 — Wed Jul 01, 2009 8:11 am

Change the ban command to exempt.

2009-07-01T06:19:29-04:00

# open proxy checker for eggdrop
# (c) James Seward 2003/4
# version 1.0

# http://www.jamesoff.net/projects/eggdrop
# james@jamesoff.net

# Released under the GPL

## INSTRUCTIONS
###############################################################################

# This script will check the hosts of people joining channels against one or
# RBLs. Choose your RBLs wisely, some of them list DIALUP SPACE and that would
# be a bad thing to be matching your IRC users against
#
# Enable the 'proxycheck' flag for channels you want the script active on
# --> .chanset #somechannel +proxycheck
#
# Users who are +o, +v, or +f in your bot (local or global) won't be checked.
#
# Turn on console level d on the partyline to see some debug from the script
# --> .console +d (to enable)
# --> .console -d (to disable)

## CONFIG
###############################################################################

# space-separated list of RBLs to look in
set proxycheck_rbls { "dnsbl.ahbl.org" "tor.ahbl.org" "cbl.abuseat.org " }

# time in minutes to ban for
#set proxycheck_bantime 15

# stop editing here unless you're TCL-proof

## CODE
###############################################################################

#add our channel flag
setudef flag proxycheck

#bind our events
bind join - *!*@* proxycheck_join

#swing your pants

# catch joins
proc proxycheck_join { nick host handle channel } {
# allow 10 seconds for chanserv to op users on the channel access list
utimer 5 [list proxycheck_join_delay $nick $host $handle $channel]

}

proc proxycheck_join_delay { nick host handle channel } {
#check we're active
if {![channel get $channel proxycheck]} {
return 0
}

#don't apply to friends, voices, ops
if {[isop $nick $channel] || [isvoice $nick $channel] || [matchattr $handle fov|Pfov $channel]} {
return 0
}

#get the actual host
regexp ".+@(.+)" $host matches newhost
if [regexp {[0-9]{1,3}.[0-9]{1,3}.[0-9]{1,3}.[0-9]{1,3}$} $newhost] {
#it's a numeric host, skip the lookup
proxycheck_check2 $newhost $newhost 1 $nick $newhost $channel
} else {
putloglev d * "proxycheck: doing dns lookup on $newhost to get IP"
dnslookup $newhost proxycheck_check2 $nick $newhost $channel
}
}

# first callback (runs RBL checks)
proc proxycheck_check2 { ip host status nick orighost channel } {
global proxycheck_rbls

if {$status} {
putloglev d * "proxycheck: $host resolves to $ip"

# reverse the IP
regexp {([0-9]{1,3}).([0-9]{1,3}).([0-9]{1,3}).([0-9]{1,3})} $ip matches a b c d
set newip "$d.$c.$b.$a"

# look it up in the rbls
foreach rbl $proxycheck_rbls {
putloglev d * "proxycheck: looking up $newip.$rbl"
dnslookup "$newip.$rbl" proxycheck_check3 $nick $host $channel $rbl
}
} else {
putlog "proxycheck: Couldn't resolve $host. (No further action taken.)"
}
}

# second callback (catches RBL results)
proc proxycheck_check3 { ip host status nick orighost channel rbl } {
global proxycheck_bantime

if {![validuser "proxychk"]} {
adduser "proxychk"
setuser "proxychk" COMMENT "Added to prevent multi-RBL lookups of users"
putlog "proxycheck: created new user 'proxychk' to prevent mult-RBL lookups of users"
}
if {$status} {
putlog "proxycheck:4 $nick 1 $host = ip4 $ip from RBL14 $rbl ... kicking"
putserv "KICK $channel $nick :14Possible spam/advertize/invite bot or drone 4LISTED14 in1 $rbl"
puthelp "PRIVMSG $nick :This is an automated response. You've been kicked from $channel because your host $host is listed at $rbl"
puthelp "PRIVMSG $nick :You will need to fix whatever caused you to be listed and get removed from $rbl before you're able to rejoin $channel ."
chattr proxychk +|+P $channel
setuser "proxychk" HOSTS "*!*@$orighost"
putlog "proxycheck:1Exempting4 $orighost 1for 10min to prevent4 mult-RBL lookup"
timer 10 [list delhost "proxychk" "*!*@$orighost"]
}
#if we didn't get a host, they're not in RBL
}

putlog "proxycheck 1.0 by JamesOff loaded"

TCL_no_TK i tried as u say,and it seem nothing happend..

Statistics: Posted by sk-4 — Wed Jul 01, 2009 6:19 am

Change the ban command to exempt.

2009-06-30T23:45:42-04:00

sk-4 dont mind can u please paste the exact tcl that you are using here,i dont know why the same error persist still,ill ask my shell company,also i wanna compare yours and mine.. so plz if you dont mind thanks

Statistics: Posted by gamble27 — Tue Jun 30, 2009 11:45 pm

Change the ban command to exempt.

2009-06-30T12:50:33-04:00

try

Code:

set proxycheck_rbls { "cbl.abuseat.org opm.blitzed.org dnsbl.ahbl.org tor.ahbl.org" }

Also opm.blitzed.org i dont think this RBL is active any more

[13:24] Tcl error [proxycheck_check3]: invalid command name "Â adduser"

If the error is the same/simlar to this one in referance to the "Â" char's then its down to the shell, it would be worth while uploading an other copy after removing the current one.

Statistics: Posted by TCL_no_TK — Tue Jun 30, 2009 12:50 pm

Change the ban command to exempt.

2009-06-30T10:12:23-04:00

im using this edited tcl.any it look gr8..so far np..just want to ask is this script lookup for scan from this site
set proxycheck_rbls { "cbl.abuseat.org" "opm.blitzed.org" "dnsbl.ahbl.org" "tor.ahbl.org" }
... seem im getting kick only for cbl.abuseat.org

Statistics: Posted by sk-4 — Tue Jun 30, 2009 10:12 am

Change the ban command to exempt.

2009-06-29T07:56:08-04:00

after trying on my shell countless time the same prob still persist:< what could possibly the error/ problem : <

Statistics: Posted by gamble27 — Mon Jun 29, 2009 7:56 am

Change the ban command to exempt.

2009-06-29T04:00:32-04:00

gamble27, you're the one who's supposed to check the script in your shell and not TCL_no_TK. Probably the editor you used when pasting the script added some weird characters that are causing this error.

Statistics: Posted by Sir_Fz — Mon Jun 29, 2009 4:00 am

Change the ban command to exempt.

2009-06-28T06:01:31-04:00

sure mate,plz let me know the result.. if this tcl works it will be VERY useful thanks again

Statistics: Posted by gamble27 — Sun Jun 28, 2009 6:01 am

Change the ban command to exempt.

2009-06-28T05:01:43-04:00

[13:24] Tcl error [proxycheck_check3]: invalid command name "Â adduser"

adduser is a valid eggdrop tcl command. Think this has something to do with the way its uploaded/pasted to your shell, i'd double check the script on the shell.

Statistics: Posted by TCL_no_TK — Sun Jun 28, 2009 5:01 am

Change the ban command to exempt.

2009-06-28T01:28:04-04:00

thanks again for assisting i did what u told me to and changed what ever was there to be changed and i receive the following error after loading the tcl

[13:21] [13:24] proxycheck: 219.94.71.157 resolves to 219.94.71.157
[13:21] [13:24] proxycheck: looking up 157.71.94.219.dnsbl-3.uceprotect.net
[13:21] [13:24] DNS resolve failed for 157.71.94.219.dnsbl-3.uceprotect.net
[13:21] [13:24] Tcl error [proxycheck_check3]: invalid command name "Â adduser"

The one in bold is the error,the rest lines are normal but in the bold is the error.the eggdrop didnt kick even after detecting RBL.

Thank u again.

Statistics: Posted by gamble27 — Sun Jun 28, 2009 1:28 am

Change the ban command to exempt.

2009-06-27T18:08:59-04:00

Ok, thank you that helps. Its not really tested but you can try using the following:

Change

Code:

#don't apply to friends, voices, ops if {[matchattr $handle fov|fov $channel]} {  return 0 }

Code:

#don't apply to friends, voices, ops if {[matchattr $handle fov|Pfov $channel]} {  return 0 }

and change

Code:

if {$status} { putlog "proxycheck: got host $host = ip $ip from RBL $rbl ... banning" newchanban $channel "*@$orighost" "proxychk" "SPAM." $proxycheck_bantime } #if we didn't get a host, they're not in RBL }

Code:

if {![validuser "proxychk"]} { adduser "proxychk" setuser "proxychk" COMMENT "Added to prevent multi-RBL lookups of users" putlog "proxycheck: created new user 'proxychk' to prevent mult-RBL lookups of users"}if {$status} {putlog "proxycheck: got host $host = ip $ip from RBL $rbl ... kicking" putserv "KICK $channel $nick :Possible spam/advertize/invite bot or drone."chattr proxychk +|+P $channelsetuser "proxychk" HOSTS "*!*@$orighost"putlog "proxycheck: exempting $orighost for 10min to prevent mult-RBL lookup"timer 10 [list delhost "proxychk" "*!*@$orighost"]}#if we didn't get a host, they're not in RBL }

This will creat the user "proxychk" in eggdrop's userfile, and add the host of the user that was scanned to prevent them being re-scanned. This will last for 10mins before eggdrop will remove the host, allowing them to be rescanned again. After 10mins is up. It uses the +P channel flag (custom flag *) Also, it will as before prevent the bot from banning the user, it will only issue a kick for them. its rough, like i said and untested. any problems let me know

P.S This should also allow u to exempt your own users, from being scanned when they join serton channels. Without them having to be ops, halfops or voice's in eggdrop userfile. Just give them the +P flag for the channel you dont want them to RBL checked.

Statistics: Posted by TCL_no_TK — Sat Jun 27, 2009 6:08 pm

Change the ban command to exempt.

2009-06-27T01:10:54-04:00

thank you for assisting,but reason why i want it to exempt the user after it being kicked is i don want to create any kick flood,imagine if a real user gets kicked he/she will rejoin the channel and eggdrop will kick it again and he/she will rejoin again,and same will follow and it create kick flood.so that is why its very important to exempt a user for certain period of time in order to allow a genuine user to join the channel after he/she being kicked.Hope to hear from u all soon,this tcl will be very useful for anyone who are fighting spam in their channels

Statistics: Posted by gamble27 — Sat Jun 27, 2009 1:10 am