From 6a81945a4e53319c27fa3b3e72f7ddc7c36d5d95 Mon Sep 17 00:00:00 2001
From: Doug Freed <dwfreed@mtu.edu>
Date: Tue, 9 Feb 2016 00:06:05 -0700
Subject: Promote some useful checks to higher levels

---
 config-default/rules.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'config-default')

diff --git a/config-default/rules.xml b/config-default/rules.xml
index 134726c..a8bd48c 100644
--- a/config-default/rules.xml
+++ b/config-default/rules.xml
@@ -51,8 +51,8 @@
   <event id="nickbl_impersonate" class="nickfuzzy" reason="fuzzy matching against nick blacklist (impersonation set), see ;falsematch if in error" risk="medium" type="join,nick">2:botchlab,bremmyfag,ilbelkyr,bremsstrahlung,ishanyx</event>
   <event id="botnickbl" class="nickbl" reason="matches against a possible bot nick" risk="info" type="join,nick">contentisuseless</event>
   <event id="botpattern1" class="nuhg" reason="matches probable botnet pattern" risk="debug" type="join">DISABLED[A-Za-z]{4}\d+!~[A-Za-z]{4}@.*![A-Za-z]{4}</event>
-  <event id="banevade" class="banevade" reason="appears to be ban evading" risk="debug" type="join">contentisuseless</event>
-  <event id="joinfloodquiet" class="floodqueue2" reason="join flood (3 joins in 90 seconds) by quieted user" risk="debug" type="join">3:90</event>
+  <event id="banevade" class="banevade" reason="appears to be ban evading" risk="info" type="join">contentisuseless</event>
+  <event id="joinfloodquiet" class="floodqueue2" reason="join flood (3 joins in 90 seconds) by quieted user" risk="low" type="join">3:90</event>
   <event id="invite" class="invite" reason="invited to a channel" risk="debug" type="invite">blah</event>
   <event id="urlcrunch" class="urlcrunch" reason="URL that resolves to some place that is bad" risk="medium" type="public">^(https?:\/\/bitly.com\/a\/warning|https?://(?:i.)?imgur.com|https?://(?:www.)?hotxgirls.net)</event>
   <!--<event id="incredibl" class="dnsbl" reason="host $evhost is in dnsbl.incredibl.org ( $xresult )" risk="info" type="join">dnsbl.incredibl.org.</event>-->
-- 
cgit v1.2.3