1
0
mirror of https://github.com/unrealircd/unrealircd.git synced 2026-07-09 01:43:12 +02:00

- spamfilter.conf: Added yet another sig for a site that causes Backdoor.Delf.lq

infection (reported by nexus), also changed LOI trojan and Bloodhound.Exploit.6
  action to gline.
This commit is contained in:
Bram Matthys
2004-05-21 23:15:33 +00:00
parent 9bb3623c4d
commit 09d1dd87e4
2 changed files with 12 additions and 2 deletions
+3
View File
@@ -3183,3 +3183,6 @@ This is the 3.2 fixes branch.
as the 'compiled for' (header) version. If they mismatch, UnrealIRCd could crash,
so a big warning is posted if it happends.
- Improved the above: made it work on windows and also added a check for curl.
- spamfilter.conf: Added yet another sig for a site that causes Backdoor.Delf.lq
infection (reported by nexus), also changed LOI trojan and Bloodhound.Exploit.6
action to gline.
+9 -2
View File
@@ -149,7 +149,7 @@ spamfilter {
spamfilter {
regex ".*(http://jokes\.clubdepeche\.com|http://horny\.69sexy\.net|http://private\.a123sdsdssddddgfg\.com).*";
target private;
action block;
action gline;
reason "Infected by LOI trojan"; /* Name is still unsure */
};
@@ -179,5 +179,12 @@ spamfilter {
regex "^www\.fun-pix\.tk/blub_fish\.jpg <-{6} lo{11}l$";
target channel;
reason "Infected by Bloodhound.Exploit.6: see http://securityresponse.symantec.com/avcenter/venc/data/bloodhound.exploit.6.html";
action block;
action gline;
};
spamfilter {
regex "Free porn pic and movies (www\.sexymovies\.da\.ru|www\.girlporn\.org)";
target private;
reason "Unknown virus. Site causes Backdoor.Delf.lq infection";
action block;
};