summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLibravatarDoug Freed <dwfreed@mtu.edu>2016-02-09 00:06:05 -0700
committerLibravatarDoug Freed <dwfreed@mtu.edu>2016-02-09 00:06:05 -0700
commit6a81945a4e53319c27fa3b3e72f7ddc7c36d5d95 (patch)
treee8a2e331f6d1e9942e7ab822cec83774cbc6725f
parent60480737736e85d8e324115e29fb9a82052274bc (diff)
downloadantispammeta-6a81945a4e53319c27fa3b3e72f7ddc7c36d5d95.tar.bz2
antispammeta-6a81945a4e53319c27fa3b3e72f7ddc7c36d5d95.tar.xz
antispammeta-6a81945a4e53319c27fa3b3e72f7ddc7c36d5d95.tar.zst
Promote some useful checks to higher levels
-rw-r--r--config-default/rules.xml4
1 files changed, 2 insertions, 2 deletions
diff --git a/config-default/rules.xml b/config-default/rules.xml
index 134726c..a8bd48c 100644
--- a/config-default/rules.xml
+++ b/config-default/rules.xml
@@ -51,8 +51,8 @@
<event id="nickbl_impersonate" class="nickfuzzy" reason="fuzzy matching against nick blacklist (impersonation set), see ;falsematch if in error" risk="medium" type="join,nick">2:botchlab,bremmyfag,ilbelkyr,bremsstrahlung,ishanyx</event>
<event id="botnickbl" class="nickbl" reason="matches against a possible bot nick" risk="info" type="join,nick">contentisuseless</event>
<event id="botpattern1" class="nuhg" reason="matches probable botnet pattern" risk="debug" type="join">DISABLED[A-Za-z]{4}\d+!~[A-Za-z]{4}@.*![A-Za-z]{4}</event>
- <event id="banevade" class="banevade" reason="appears to be ban evading" risk="debug" type="join">contentisuseless</event>
- <event id="joinfloodquiet" class="floodqueue2" reason="join flood (3 joins in 90 seconds) by quieted user" risk="debug" type="join">3:90</event>
+ <event id="banevade" class="banevade" reason="appears to be ban evading" risk="info" type="join">contentisuseless</event>
+ <event id="joinfloodquiet" class="floodqueue2" reason="join flood (3 joins in 90 seconds) by quieted user" risk="low" type="join">3:90</event>
<event id="invite" class="invite" reason="invited to a channel" risk="debug" type="invite">blah</event>
<event id="urlcrunch" class="urlcrunch" reason="URL that resolves to some place that is bad" risk="medium" type="public">^(https?:\/\/bitly.com\/a\/warning|https?://(?:i.)?imgur.com|https?://(?:www.)?hotxgirls.net)</event>
<!--<event id="incredibl" class="dnsbl" reason="host $evhost is in dnsbl.incredibl.org ( $xresult )" risk="info" type="join">dnsbl.incredibl.org.</event>-->