mirror of
https://github.com/unrealircd/unrealircd.git
synced 2026-07-09 01:43:12 +02:00
- spamfilter.conf: Added yet another sig for a site that causes Backdoor.Delf.lq
infection (reported by nexus), also changed LOI trojan and Bloodhound.Exploit.6 action to gline.
This commit is contained in:
@@ -3183,3 +3183,6 @@ This is the 3.2 fixes branch.
|
||||
as the 'compiled for' (header) version. If they mismatch, UnrealIRCd could crash,
|
||||
so a big warning is posted if it happends.
|
||||
- Improved the above: made it work on windows and also added a check for curl.
|
||||
- spamfilter.conf: Added yet another sig for a site that causes Backdoor.Delf.lq
|
||||
infection (reported by nexus), also changed LOI trojan and Bloodhound.Exploit.6
|
||||
action to gline.
|
||||
|
||||
+9
-2
@@ -149,7 +149,7 @@ spamfilter {
|
||||
spamfilter {
|
||||
regex ".*(http://jokes\.clubdepeche\.com|http://horny\.69sexy\.net|http://private\.a123sdsdssddddgfg\.com).*";
|
||||
target private;
|
||||
action block;
|
||||
action gline;
|
||||
reason "Infected by LOI trojan"; /* Name is still unsure */
|
||||
};
|
||||
|
||||
@@ -179,5 +179,12 @@ spamfilter {
|
||||
regex "^www\.fun-pix\.tk/blub_fish\.jpg <-{6} lo{11}l$";
|
||||
target channel;
|
||||
reason "Infected by Bloodhound.Exploit.6: see http://securityresponse.symantec.com/avcenter/venc/data/bloodhound.exploit.6.html";
|
||||
action block;
|
||||
action gline;
|
||||
};
|
||||
|
||||
spamfilter {
|
||||
regex "Free porn pic and movies (www\.sexymovies\.da\.ru|www\.girlporn\.org)";
|
||||
target private;
|
||||
reason "Unknown virus. Site causes Backdoor.Delf.lq infection";
|
||||
action block;
|
||||
};
|
||||
|
||||
Reference in New Issue
Block a user