From 4c8e9e917cde4e1455da331847defa5274d99753 Mon Sep 17 00:00:00 2001
From: William Heimbigner <william.heimbigner@gmail.com>
Date: Thu, 7 Mar 2013 14:18:25 +0000
Subject: Added tracking of the realIP in quiets/bans, added a floodqueue that
 checks the realIP against the realIP quiet list, did some improvement of IP
 conversion code

---
 config-default/rules.xml | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'config-default/rules.xml')

diff --git a/config-default/rules.xml b/config-default/rules.xml
index a9e3d6f..9b5d0c1 100644
--- a/config-default/rules.xml
+++ b/config-default/rules.xml
@@ -14,4 +14,6 @@
   <event id="phishing1" class="re" override="notice" reason="trying to steal passwords (v1)" risk="high" type="notice">identify.*/msg .* identify &lt;password&gt;</event>
   <event id="phishing2" class="re" override="notice" reason="trying to steal passwords (v2)" risk="high" type="notice">^This nickname is registered</event>
   <event id="proxylist" class="proxy" reason="IP is blacklisted" risk="info" type="join">lolz</event>
+  <event id="banevade" class="banevade" reason="appears to be ban evading" risk="debug" type="join">contentisuseless</event>
+  <event id="joinfloodquiet" class="floodqueue2" reason="join flood (3 joins in 90 seconds) by quieted user" risk="debug" type="join">5:30</event>
 </events>
-- 
cgit v1.2.3