Home | Networks | Community | Need Help? 

 
 Quick search

 
 
 RegisterRegister   Log inLog in 

How to prevent attacks on your NETWORK!

 
Post new topic   Reply to topic    SearchIRC Forum Index -> IRC Abuse
Author Message
rexun
none
none


Joined: 05 Feb 2008
Posts: 11

PostPosted: Feb 05, 2008 3:43pm    Post subject: How to prevent attacks on your NETWORK! Reply with quote

#1. Get a bopm, i recommend around 2-3 with diff blacklists or custom ones
#2. use Neostats, if the bots have a specific version ban them on connect.
#3. Use anti-random module for anope, any random nicks + idents = killed/kline.
#4. Make sure your Shell provider has ddos filters, and give them permission whenever theres a huge data spike to filter out maliciouse packets
#5. Dont start shit with people, if they ddosed you once, simply leave them alone, hopefully they will do the same.
#6. Dont bother reporting it to fbi/scotland yard they dont bother with this kinda stuff unless you have huge damage ($4000usd or more).
#7. Never threaten/make fun of hackers, becouse you will always cry at the end.
#8. if the bots spam a link, add spamfilters.
#9. Defcon can help in emergencys
#10. make some type of script to shun/gline bots on join or connect, (only if your networks small, if over 150 real users dont do that, you can kill innocents.

Hope this helps, and the most important rule of all, DONT MESS WITH THEM THEY WONT MESS WITH YOU...
Back to top
greg27
Idler
Idler


Joined: 07 Oct 2006
Posts: 255
Location: Australia

PostPosted: Feb 05, 2008 3:51pm    Post subject: Reply with quote

irc defender is also a nice option, and if you use anope then os_notinchanlist is a must have.
Back to top
SasukeUchiha
Lurker
Lurker


Joined: 01 Dec 2007
Posts: 123
Location: California

PostPosted: Feb 05, 2008 7:21pm    Post subject: Reply with quote

So many choices >.> *Picks* Well I might as well get all of them! Very Happy
Back to top
Xaphan
Newbie
Newbie


Joined: 12 Feb 2007
Posts: 78

PostPosted: Feb 06, 2008 5:39am    Post subject: Reply with quote

Welp. I can honestly say that the lame flood attacks that happened on my network over the last week, have halted and the idiot behind them, isn't getting far.

I have installed on the servers a new(ish) auth daemon. It handles all the autorization stuff, while the IRCd is just there for chatting etc.

It's one of the useful things that comes with using an ircd that is currently in use by large networks; more benefits of their experiences.
Back to top
greg27
Idler
Idler


Joined: 07 Oct 2006
Posts: 255
Location: Australia

PostPosted: Feb 06, 2008 6:32am    Post subject: Reply with quote

and cue the unrealircd bashing...
Back to top
Xaphan
Newbie
Newbie


Joined: 12 Feb 2007
Posts: 78

PostPosted: Feb 06, 2008 8:00am    Post subject: Reply with quote

greg27 wrote:
and cue the unrealircd bashing...


Not Unreal bashing tonight, sorry. Just stating a fact:)

I'm told EFNet does it as well, so there's Hybrid/ratbox etc added to the list.

When speaking to Unreal IRCd coders about it, suggesting they do something identical... I got...

(06.02) [05.53am] <@Stskeeps> Xaphan: no, doubt it - we have auth.c though where people can write whereever hell they want for auth stuff Razz
Back to top
sirkit
Newbie
Newbie


Joined: 27 Nov 2007
Posts: 63
Location: eth0

PostPosted: Feb 06, 2008 5:20pm    Post subject: Reply with quote

charybdis is based on ratbox which is based on hybrid Smile
Back to top
Display posts from previous:   
Post new topic   Reply to topic    SearchIRC Forum Index -> IRC Abuse All times are GMT - 6 Hours
Page 1 of 1

 
 
Forum powered by phpBB
 
 © 2000 - 2008 EverythingIRC, Inc. All rights reserved. Please read our disclaimer