egghelp/eggheads community Discussion of eggdrop bots, shell accounts and tcl scripts. 2002-09-23T11:15:10-04:00 https://forum.eggheads.org/app.php/feed/topic/2643 2002-09-23T11:15:10-04:00 2002-09-23T11:15:10-04:00 https://forum.eggheads.org/viewtopic.php?p=11270#p11270 <![CDATA[avoid ignore on botnet]]>
First, change the value of telnet-flood to somthing high. IE, in your example, "<NB>:60" (number of bots plus 1)

Code: 

utimer 30 [list set telnet-flood 3:10]
Place that at the base of your config file, changing the 3:10 to your own figure.

This will allow for a 30 flood period at the startup, .rehash, .reload and any time the config file is re-read.

Just long enough for anything to pass, with a buffer.

It will then, reduce the threat.

Statistics: Posted by ppslim — Mon Sep 23, 2002 11:15 am

]]> 2002-09-23T10:37:03-04:00 2002-09-23T10:37:03-04:00 https://forum.eggheads.org/viewtopic.php?p=11269#p11269 <![CDATA[telnet flood]]>
but it's a big security hole: the flood limit may be to high if there are a lot of eggdrops on the same machine...

perharps may I create a small tcl to reduce this risk :)

If I do, be sure I'll transmit it

Statistics: Posted by CrazyCat — Mon Sep 23, 2002 10:37 am

]]> 2002-09-20T10:37:29-04:00 2002-09-20T10:37:29-04:00 https://forum.eggheads.org/viewtopic.php?p=11169#p11169 <![CDATA[avoid ignore on botnet]]>
If using a crontab - load one 1 bot each min.

Yes, it will take 10 mins for them all to come online, but it prevents flooding.

That or using a combination of the flood setting, and laucning the bots in smaller groups.

Statistics: Posted by ppslim — Fri Sep 20, 2002 10:37 am

]]> 2002-09-20T09:56:33-04:00 2002-09-20T09:56:33-04:00 https://forum.eggheads.org/viewtopic.php?p=11162#p11162 <![CDATA[avoid ignore on botnet]]> # Define here how many telnet connection attempts in how many seconds from
# the same host constitute a flood. The correct format is Attempts:Seconds.
set telnet-flood 5:60


might be what u are looking for..

Statistics: Posted by Papillon — Fri Sep 20, 2002 9:56 am

]]> 2002-09-20T09:48:41-04:00 2002-09-20T09:48:41-04:00 https://forum.eggheads.org/viewtopic.php?p=11161#p11161 <![CDATA[avoid ignore on botnet]]> I've a small trouble with my hub:
10 eggdrops are running on my shell, one of them is hub.
When the pc reboots, they all try to reconnect to the hub at the same time, so the hub sets an ignore on -telnet!telnet@LOCALHOST
how can I avoid this? any special flag or option in the .conf ?

thanx a lot

Statistics: Posted by CrazyCat — Fri Sep 20, 2002 9:48 am

]]>