From 301dbe6e596a7240febf5138f521364cd9a4ccd3 Mon Sep 17 00:00:00 2001
From: Bram Matthys <syzop@vulnscan.org>
Date: Sat, 6 Mar 2004 19:57:21 +0000
Subject: [PATCH] spybot .syn sig

---
 spamfilter.conf | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/spamfilter.conf b/spamfilter.conf
index cc6d3a5fb..a2a4bfd28 100644
--- a/spamfilter.conf
+++ b/spamfilter.conf
@@ -83,3 +83,10 @@ spamfilter {
 	reason "Attempting to use a GTBot";
 	action block;
 };
+
+spamfilter {
+	regex "^.syn ((([0-9]{1,3}\.){3}[0-9]{1,3})|([a-zA-Z0-9_-]+\.[a-zA-Z0-9_-]+\.[a-zA-Z0-9_.-]+)) [0-9]{1,5} [0-9]{1,15} [0-9]{1,15}";
+	target { channel; private; };
+	reason "Attempting to use a SpyBot (syn flood command)";
+	action block;
+};