egghelp/eggheads community

problem with bind flud

2005-02-20T15:45:23-04:00

i maked (ca.) 2 weaks ago a bug report but no one reply me.

that was reason for asking here. i think them ignored me because i am a big noob in tcl and it was my error.

them don`t care about those problem or it will take a while until them reply me to the bug report?

Statistics: Posted by Burke — Sun Feb 20, 2005 3:45 pm

problem with bind flud

2005-02-20T15:18:05-04:00

Your last test is a exact replica of one I did six or seven years ago. I recall mentioning it to someone on the devteam but didn't make a formal bug report--it was not clear that it was a bug rather than a mere limitation of a very rudimentary detector. In any case, the issue isn't a recent one.

very very interesting, to be sure. May not be a recent issue, but it is a security problem, damn straight...
Excellent time to advertise sentinel.tcl, eh slennox

Statistics: Posted by YooHoo — Sun Feb 20, 2005 3:18 pm

problem with bind flud

2005-02-20T13:37:42-04:00

Your last test is a exact replica of one I did six or seven years ago. I recall mentioning it to someone on the devteam but didn't make a formal bug report--it was not clear that it was a bug rather than a mere limitation of a very rudimentary detector. In any case, the issue isn't a recent one.

Statistics: Posted by slennox — Sun Feb 20, 2005 1:37 pm

problem with bind flud

2005-02-20T11:36:14-04:00

your replys sounds good. it`s not the best way to detect them (because it only watch 1 user) but i should work.

for the test i changed flood-chan to 3:20 (this will be changed later, for sure).

- beginn test / demonstration

-- test with 1 flooders

[16:34:05] * g740 (GideonShav@c-24-13-186-77.client.comcast.net) has joined #ah20
[16:34:05] * x6346 (~j8989@lsanca2-ar28-4-47-249-201.lsanca2.dsl-verizon.net) has joined #ah20
[16:34:16] test
[16:34:24] test
[16:34:25] test
[16:34:26] * x6346 was kicked by [-AxF-steve-][o (flood)

- result: all ok.

- test with 3 floodbots
[16:34:39] * x6346 (~j8989@lsanca2-ar28-4-47-249-201.lsanca2.dsl-verizon.net) has joined #ah20
[16:34:46] * n9464 (~w3610@80.81.58.57) has joined #ah20
[16:34:50] test
[16:34:50] test
[16:34:50] test
[16:34:52] test
[16:34:52] test
[16:34:52] test
[16:34:57] test
[16:34:57] test
[16:34:57] test
[16:34:59] test
[16:34:59] test
[16:34:59] test
[16:35:01] test
[16:35:02] test
[16:35:02] test
[16:35:12] <@Burke^> !tcl binds flud
[16:35:14] <@[-AxF-steve-][o> OK - 0.028 ms
-- result: no one will be kicked

- test with 1 floodbots again
[16:35:32] <@Burke^> ---
[16:35:38] test
[16:35:40] test
[16:35:41] test
[16:35:42] * g740 was kicked by [-AxF-steve-][o (flood)
[16:35:52] <@Burke^> -------
- ok, the flooder will be kicked

- test with 2 floodbots
[16:35:58] test
[16:36:02] test
[16:36:02] test
[16:36:04] test
[16:36:04] test
[16:36:05] test
[16:36:06] test
[16:36:07] test
[16:36:08] test
[16:36:09] test
[16:36:10] test
[16:36:11] test
[16:36:11] test
- result: the bot will kick no one

i tested it with my own bot and 2 other bots of friends. for sure it`s eggdrop 1.6.17.

about the hosts of the flooders. - no clones, differnent hosts and diferents ip`s (-> more users).

this seems like a bug in the source of the eggdrop or is this bind just unless and not desinged for that?

Statistics: Posted by Burke — Sun Feb 20, 2005 11:36 am

problem with bind flud

2005-02-20T03:17:14-04:00

Eggdrop's flood detector seems to be intended for individual flooders--it does not detect flooding where multiple flooders alternate messages. That's why the flud bind is not very useful for flood protection scripts.

Statistics: Posted by slennox — Sun Feb 20, 2005 3:17 am

problem with bind flud

2005-02-19T23:48:25-04:00

eggdrop has no built tsunami flood detection, this is provided by sentinel.tcl. only if single users are triggering a flood your bind will be triggered.
but if you mean the bot doesnt trigger the bind if many people individually trigger a flood, this sounds like a major problem with your eggdrop core or you messed up your code totally .

Statistics: Posted by De Kus — Sat Feb 19, 2005 11:48 pm

problem with bind flud

2005-02-19T22:08:11-04:00

hi

i wanted to make my own antiflood script. it will be very useful and easy if i can use the internal flood-**** settings of the bot. them can easy set up. the detection for them is ok too.

Code:

    (30) FLUD (stackable)         bind flud            procname              Description: any floods detected through the flood control settings           (like 'flood-ctcp') are sent here before processing. If the proc           returns 1, no further action is taken on the flood; if the proc           returns 0, the bot will do its normal "punishment" for the flood.           The flood types are: pub, msg, join, or ctcp (and can be masked to           "*" for the bind); flags are ignored.         Module: server

Ok, there is no info about the size of any floods. If the proc return 0 --> no kick from the internal bot function. this will be good, because i make my own kicks.

Code:

bind flud - "*" floodtest111proc floodtest111 { nickname hostname handle type channel } { putlog "floodscript $nickname $hostname $handle $type $channel" }return 0

that`s how i start to code. if 1 user flood, it will trigger correctly and show me all needed things on the partyline. just a fine binding and easy variables.

you won`t see the rest of noob coding tcl it`s just getchanhost, mode +b, utimer 10 kick user.

my problem is. the bot will not detect bigger floods. if 1 user flood at the same time the script work just perfect as it should.

but if 2-10 users flood at the same time, the bot won`t do anything.

i tested it without any scripts (no binds flud). the internal eggdrop function works. it will only kick 1 users which is flooding but on big floods the bot do nothing. this last sentence is my question: is this a bug or is my code wrong?

Statistics: Posted by Burke — Sat Feb 19, 2005 10:08 pm