diff options
author | Doug Freed <dwfreed@mtu.edu> | 2016-02-09 00:06:05 -0700 |
---|---|---|
committer | Doug Freed <dwfreed@mtu.edu> | 2016-02-09 00:06:05 -0700 |
commit | 6a81945a4e53319c27fa3b3e72f7ddc7c36d5d95 (patch) | |
tree | e8a2e331f6d1e9942e7ab822cec83774cbc6725f | |
parent | 60480737736e85d8e324115e29fb9a82052274bc (diff) | |
download | antispammeta-6a81945a4e53319c27fa3b3e72f7ddc7c36d5d95.tar.bz2 antispammeta-6a81945a4e53319c27fa3b3e72f7ddc7c36d5d95.tar.xz antispammeta-6a81945a4e53319c27fa3b3e72f7ddc7c36d5d95.tar.zst |
Promote some useful checks to higher levels
-rw-r--r-- | config-default/rules.xml | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/config-default/rules.xml b/config-default/rules.xml index 134726c..a8bd48c 100644 --- a/config-default/rules.xml +++ b/config-default/rules.xml @@ -51,8 +51,8 @@ <event id="nickbl_impersonate" class="nickfuzzy" reason="fuzzy matching against nick blacklist (impersonation set), see ;falsematch if in error" risk="medium" type="join,nick">2:botchlab,bremmyfag,ilbelkyr,bremsstrahlung,ishanyx</event> <event id="botnickbl" class="nickbl" reason="matches against a possible bot nick" risk="info" type="join,nick">contentisuseless</event> <event id="botpattern1" class="nuhg" reason="matches probable botnet pattern" risk="debug" type="join">DISABLED[A-Za-z]{4}\d+!~[A-Za-z]{4}@.*![A-Za-z]{4}</event> - <event id="banevade" class="banevade" reason="appears to be ban evading" risk="debug" type="join">contentisuseless</event> - <event id="joinfloodquiet" class="floodqueue2" reason="join flood (3 joins in 90 seconds) by quieted user" risk="debug" type="join">3:90</event> + <event id="banevade" class="banevade" reason="appears to be ban evading" risk="info" type="join">contentisuseless</event> + <event id="joinfloodquiet" class="floodqueue2" reason="join flood (3 joins in 90 seconds) by quieted user" risk="low" type="join">3:90</event> <event id="invite" class="invite" reason="invited to a channel" risk="debug" type="invite">blah</event> <event id="urlcrunch" class="urlcrunch" reason="URL that resolves to some place that is bad" risk="medium" type="public">^(https?:\/\/bitly.com\/a\/warning|https?://(?:i.)?imgur.com|https?://(?:www.)?hotxgirls.net)</event> <!--<event id="incredibl" class="dnsbl" reason="host $evhost is in dnsbl.incredibl.org ( $xresult )" risk="info" type="join">dnsbl.incredibl.org.</event>--> |