CodeWalrus

CodeWalrus Website => Site Discussion => Site Discussion & Bug Reports => Topic started by: novenary on December 18, 2014, 12:11:15 PM

Title: Efnet botnet
Post by: novenary on December 18, 2014, 12:11:15 PM
Current bots, with server, host and owner:

W-801    irc.teksavvy.ca    rick.codewalr.us
W-802    irc.prison.net    walrus.noip.me (Streetwalrus)
W-803    efnet.port80.se    pinkiepie.juju2143.ca (Juju's place)
W-804    irc.mzima.net    withg.org (Juju)
W-805    irc.underworld.no    sorunome.de (Juju)
W-806    efnet.port80.se    creativity-kitchen.com (Juju)
W-807    irc.colosolutions.net    codinghobbit.no-ip.org (Ivoah)


[spoiler=old post]So we need some kind of botnet to keep Efnet OPs. So far we have two ZNCs on the CW server connected to eversible (me) and port80 (Walrii), one on withg connected to shaw.ca (StreetBot) and YukiBot that Juju set up.

Here are the auto op links :

Streetwalrus <-> Walrii (secure)
Streetwalrus <-> StreetBot (secure)
Streetwalrus  -> YukiBot (only relies on hostmask though it has the CW domain in it so no one can really steal it)


This needs to be improved (need to have every bot linked and more bots on more servers).[/spoiler]
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on December 18, 2014, 02:20:47 PM
Wait I didn't even know there was StreetBot. The last time I went on IRC, only Walrii, YukiBot and Streetwal had ops ???, and all three had the exact same IP address IIRC.

I agree, though, and we should have bots running from multiple connections/EFnet servers. Also Eggdrop would allow us to have an account on the bot to get ops again if it no longer recognizes us.


We also need Freenode/Omninet privileges badly.
Title: Re: Efnet botnet
Post by: novenary on December 18, 2014, 06:54:16 PM
I set up StreetBot today, that's why you didn't know about it. :P Znc is pretty easy to set up for ops keeping.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on December 18, 2014, 07:23:05 PM
Aah ok lol. What about IP address changes?
Title: Re: Efnet botnet
Post by: novenary on December 19, 2014, 02:49:29 PM
None,since it's on withg we have a nice domain and the IP is static.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on December 19, 2014, 05:20:44 PM
Good to hear ^^
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on March 14, 2015, 05:09:49 AM
Bump: We might want to make sure this remains fully intact. The last time I checked Yukibot was no longer in the channel.
Title: Re: Efnet botnet
Post by: novenary on March 15, 2015, 08:47:13 AM
Hmmm indeed. Need to setup eggdrop or something. Thing is we lack servers and with withg down we lost a couple bots. <_<
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on March 15, 2015, 03:13:41 PM
Indeed. I am thinking that as a temporary measure we might have to move the rest on CW until that's solved (assuming Withg ZNC service ever comes back). I would have said to move them to Juju server, but he now uses CW as webspace for his stuff >.<
Title: Re: Efnet botnet
Post by: novenary on March 15, 2015, 03:29:11 PM
Hmmm, I know a free vps service. While it's a hassle to set up a bunch of servers it'd be a good idea to grab one. It's not much but still.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on March 15, 2015, 04:27:48 PM
There are free VPSes? O.O

They came a long way since the days 1and1 charged $35 a month for a VPS with 256 MB of RAM and 1 GB of disk space.


I assume free VPSes must have unreliable uptime, which is why we should use many different free VPSes, so at least bots can op each others when they come back. Just as long as one bot won't join/part spam :P
Title: Re: Efnet botnet
Post by: novenary on March 15, 2015, 04:32:33 PM
Hmmm yeah my vps wasn't the most reliable. Iirc they guaranteed 95% uptime instead of 99.
Title: Re: Efnet botnet
Post by: Duke "Tape" Eiyeron on March 15, 2015, 06:10:27 PM
Posting harmony-hosting.com to let you a reminder to check on it and talk to their staffs, we already talked about it on Telegram but a reminder always helps! :p
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on March 16, 2015, 10:01:17 PM
Also someone who had ops might want to ask support from an EFnet IRC op ASAP because we lost ops in the channel and if we wait too long it might be impossible to get them back. >.<
Title: Re: Efnet botnet
Post by: novenary on September 13, 2015, 12:48:16 PM
So since I had a spare host (rpi2), I set up a znc on it. Strtwlrs is now idling in the channel. I can't exactly guarantee uptime though because some times my dad decides to be a c and hides the router so there's no more internet at home. <_<
We need to set up an eggdrop botnet though and move auto opping to the botnet, instead of relying on a web of ZNCs.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on September 13, 2015, 05:09:37 PM
Yes an eggdrop botnet is a must. It would be handy if we ever need extra mods but not give them ops. They can probably ban from the partyline by communicating with the bot.

However, the last time I banned or kicked someone from the partyline was back when you were 8 years old, so I doubt I remember much about it <_<
Title: Re: Efnet botnet
Post by: novenary on September 13, 2015, 06:49:27 PM
The main point is that eggdrop is much more reliable than jujus bots, and better than znc autoop to manage a channel. :P
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on September 13, 2015, 07:28:55 PM
Indeed. There is always the solution of using #ti botnet but it depends if Nikky and the like would trust us. :P plus when #omnimaga used it I didnt have full power. To ad ops I had to ask an admin
Title: Re: Efnet botnet
Post by: novenary on September 13, 2015, 08:54:49 PM
Hmm yeah but no, we'd have to trust nikky too. :P Maybe you do but I don't know him well enough. Also it's more fun to roll your own. :P
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on September 13, 2015, 10:42:59 PM
But nilky is the glue that holds the community together. *.*

Just kidding. And nope :P


But yeah we should have own own set of :3= :3= :3=
Title: Re: Efnet botnet
Post by: novenary on September 14, 2015, 12:10:08 AM
More like (http://img.codewalr.us/W-800.png)(http://img.codewalr.us/W-800.png)(http://img.codewalr.us/W-800.png)(http://img.codewalr.us/W-800.png)(http://img.codewalr.us/W-800.png)(http://img.codewalr.us/W-800.png)(http://img.codewalr.us/W-800.png)(http://img.codewalr.us/W-800.png)(http://img.codewalr.us/W-800.png) :P
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on September 14, 2015, 12:10:49 AM
Those look gore intensive, though :P
Title: Re: Efnet botnet
Post by: novenary on September 16, 2015, 09:47:38 AM
Hmm, I took some time to move a few things to different servers. Each bot is now on a different server which will (hopefully) help.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on September 16, 2015, 06:00:28 PM
Good idea. The servers I gave you are the onees on which EFneTI86, Melisma and EFneTI82 or whatever are. I believe saxjax is also on those servers.
Title: Re: Efnet botnet
Post by: novenary on September 26, 2015, 02:31:15 PM
Don't panic at the state of the channel, I'm in the process of changing some management policies. The master node of the eggdrop botnet is up, I'll set a leaf up later.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on September 26, 2015, 05:50:15 PM
Aah ok. You should name the bots after CW-related things, such as :walrii:, Walrianne, Walrette, Walriichu, Walriibot, etc
Title: Re: Efnet botnet
Post by: novenary on September 26, 2015, 10:07:06 PM
Most of these don't fit in 9 characters. Instead, I'm naming them W-801 and up after W-800 from the telegram group and Terminator.
Title: Re: Efnet botnet
Post by: Yuki on September 26, 2015, 11:11:36 PM
I would had said to name them after their computer names (like [CW]Rick), but that works too. That or bus lines in Québec City.
Title: Re: Efnet botnet
Post by: novenary on September 27, 2015, 09:51:41 AM
Ok, so far we have two bots that are linked, sharing their userlist and partyline. I'm going to do the recommended things for security and better botnet management (I found a few scripts for that). Once we have 2 or 3 more bots we can deop ourselves and let the bots manage the channel, since they're fully controllable from the partyline. Also, auto voice the admins.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on September 27, 2015, 05:34:36 PM
Quote from: Streetwalrus on September 26, 2015, 10:07:06 PM
Most of these don't fit in 9 characters. Instead, I'm naming them W-801 and up after W-800 from the telegram group and Terminator.
er... All the names I suggested fits in 9 chars ???
Title: Re: Efnet botnet
Post by: novenary on September 27, 2015, 05:54:06 PM
Lol ok, I didn't count but they looked long so yeah. :P One of them might wind up being called walrified to replace the current one since it's so unstable. >_<
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on September 27, 2015, 06:15:05 PM
Yes. As long as we still have post notifications. Also yukibot should be renamed.
Title: Re: Efnet botnet
Post by: novenary on September 28, 2015, 07:40:36 AM
Good job adding more bots juju (we have 6 :D), it would be a good idea to spread them out more though, 3 of the 4 you added are on port80.se and the main bot on CW is on there too which is less than ideal. Only two are on different servers.

By the way, I completely disabled the YukiBot part of eeezorbot and replaced it with a script I found and modified running on W-801.
I'll take a look at rewriting walrified in python to be simpler and less crashy. It really doesn't need much since it's a clever purpose-built hack.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on September 28, 2015, 05:19:58 PM
Spreading bots on 3 servers would definitively be a good idea, especially considering thay port80.se has split often in recent weeks.
Title: Re: Efnet botnet
Post by: novenary on September 28, 2015, 06:15:03 PM
Juju started doing that.
Also I just added .g and .cw for google and codewalrus search. Just use .g <search string>. .cw is an alias for it that adds site:codewalr.us to filter results to cw only. Tcl isn't too hard so far. :P Only problem is that it only works from IRC since eggdrop isn't made for omnomirc support, I'll fix that later by making my own command parser.
Title: Re: Efnet botnet
Post by: Yuki on September 28, 2015, 06:25:19 PM
Ideally, each bot should be on different EFNet servers. And YukiBot should indeed be replaced by the new Eggdrop botnet, which should be more reliable.

Anyway, we have 6 of them on 6 different servers across the world now, I think we should be okay :P I should add which bot is on which server.

W-801 - rick.codewalr.us (CW's server)
W-802 - walrus.noip.me (Streetwalrus' place)
W-803 - pinkiepie.juju2143.ca (Juju's place)
W-804 - withg.org
W-805 - sorunome.de
W-806 - creativity-kitchen.com
Title: Re: Efnet botnet
Post by: novenary on September 28, 2015, 06:33:06 PM
Hehe yes, thanks Juju for putting one everywhere you could. :3
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on September 30, 2015, 03:10:49 AM
I think the URL title bot should not repost the URL. It's kinda redundant. Maybe just the page title.

And thanks guys :D
Title: Re: Efnet botnet
Post by: novenary on October 01, 2015, 12:10:39 PM
It doesn't post the url (it did by default). I modified it so that it only posts the domain (and it actually pulls the domain from redirects too so goo.gl links and similar will show which site they link to).
Title: Re: Efnet botnet
Post by: novenary on October 04, 2015, 07:50:18 AM
Fixed I| being kicked automatically.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on October 04, 2015, 09:24:37 PM
Ah ok because when it posts the domain name it makes the line of text longer. Also sometimes the bot will return HTML code instead of a title. >.<
Title: Re: Efnet botnet
Post by: novenary on October 04, 2015, 10:35:02 PM
Yeah I suppose the HTML parsing stuff in that script isn't great. I'm too lazy to look at it for now.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on October 04, 2015, 11:16:25 PM
By the way, since we don't have much to hide about this botnet, shouldn't this topic be moved outside the staff section like most non-private stuff? :P
Title: Re: Efnet botnet
Post by: Yuki on October 04, 2015, 11:25:38 PM
I'd create a new topic and introduce the botnet to our users properly.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on October 04, 2015, 11:39:55 PM
We could always put the bot namees in the first post too, rather than just create a news and second topic about it. Especially that the newsletter is coming soon (and is already a few days late)
Title: Re: Efnet botnet
Post by: novenary on October 12, 2015, 08:27:07 PM
@Juju:
-W-805 is down, please look into it asap
-I enabled bitch mode which deops anyone who is not a registered op
-I also set stopnethack to 1 to prevent people from entering the channel with server ops after a netsplit. You should do so for your bots and rehash them, it's a config file option.
-We need to set up centralized config storage so that I can edit the config files on bots I don't have shell access to. It's a feature of netbots.tcl, I just didn't deem it necessary when I set it up.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on October 13, 2015, 04:34:51 AM
Make sure that it's easy for you to login if your IP changes, though, so you won't get locked out of the botnet.

Also would it be possible to send repeated lines so that after 3 lines, it warns, then only kicks after the next 3 lines? And preferably not set those bans too long.
Title: Re: Efnet botnet
Post by: novenary on October 13, 2015, 06:02:36 AM
We can still telnet in from any IP in case we're locked out.

I think it's possible to do that, let me check.
Title: Re: Efnet botnet
Post by: Yuki on October 13, 2015, 07:45:50 AM
Yeah, every bot runs a telnet server and they pretty much always let me login from any IP so far.
Title: Re: Efnet botnet
Post by: novenary on October 13, 2015, 07:56:44 AM
I haven't enabled IP filtering on telnet actually. But the bots won't let you log in from a non-registered host via DCC.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on October 13, 2015, 03:38:56 PM
Quote from: Streetwalrus on October 13, 2015, 07:56:44 AM
I haven't enabled IP filtering on telnet actually. But the bots won't let you log in from a non-registered host via DCC.
Is it why the last time I tried dcc-chatting with the bot from IRCCloud it didn't respond?

also sorry I accidentally downvoted your post when clicking Quote. Mind removing it in the database? Sorry about that X.x
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on October 29, 2015, 06:22:42 AM
@Streetwalrus and @Juju there is some nasty bug that just happened a few seconds ago (juju saw it but just posting this in case it happens again in  the future):

02:14:12 ⇐ tev|stdby, tev, gbl08ma, logger, NIKKY and debrouxl quit 
02:14:12 ⇐ tev|stdby quit ([email protected]) Write error: Broken pipe
02:14:56 ⇐ tev quit ([email protected]) Read error: Operation timed out
02:16:41 ⇐ gbl08ma quit ([email protected]) Read error: Connection reset by peer
02:17:08 ⇐ logger quit ([email protected]) Read error: Operation timed out
02:17:45 ⇐ NIKKY quit ([email protected]) Read error: Operation timed out
02:18:27 ⇐ debrouxl quit ([email protected]) Read error: Operation timed out
02:18:42 <DJ_Omni> cya unicorn
02:19:01 Channel mode set to +l 16 by @W-802
02:19:10 <DJ_Omni> wat
02:19:20 <DJ_Omni> stupid bot, now no one can join x.x
02:19:26 <DJ_Omni> juju
02:19:37 <+Juju> wot

Bot set the max users to 16, even though 25 were in. So afterwards no one else would be able to join.
Title: Re: Efnet botnet
Post by: Yuki on October 29, 2015, 06:27:47 AM
Okay that's really weird o.o
Title: Re: Efnet botnet
Post by: novenary on October 29, 2015, 08:59:44 AM
I have no idea how that happened. O.O Maybe netsplit timing ?
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on October 29, 2015, 06:27:06 PM
Most likely. It would have sucked if the netsplit ended before the bot fixed it, though.
Title: Re: Efnet botnet
Post by: novenary on October 29, 2015, 07:10:58 PM
I could make it check every 5 minutes instead of 10.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on October 29, 2015, 08:09:45 PM
That could work.
Title: Re: Efnet botnet
Post by: novenary on November 01, 2015, 12:45:39 AM
Problem is, that would make the bot slightly spammier when changing the channel limit. I'll increase the tolerance at the same time.
I updated the parameters. Now it will check every 5 minutes and it will only update the channel limit if it has to change by more than 5 instead of 2 every 10 minutes.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on November 07, 2015, 11:17:42 PM
That's a good move
Title: Re: Efnet botnet
Post by: novenary on November 12, 2015, 08:22:39 AM
I noticed you guys needed to check if 802 was real last night. Easiest way is to make sure its IP corresponds to the one walrus.noip.me points to (I have a stupid dynamic IP).
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on November 12, 2015, 09:19:49 AM
Thanks for the advice. I needed to know due to the suspicious user/ephraim ban evading incidents (see the people watchlist post I made a few hours ago in the other staff thread)

Also, not only the bot is not opped (it says it's not a registered op), but W-805 is missing.
Title: Re: Efnet botnet
Post by: novenary on November 12, 2015, 10:42:01 AM
It's indeed my current IP, but for some reason the ISP mask is missing, that's why it's not recognizing it (in addition to the cross-bot key exchanges, there is hostmask filtering so I just gave it my ISP's mask with a wildcard on the IP).
To fix that telnet to walrus.noip.me port 5555, log into the bot and do a .jump to reconnect it to IRC.

805 is missing because it's on a hetzner server so finding an efnet server that accepts it is hard (their IP range is banned on most servers due to abuse).
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on November 16, 2015, 06:52:38 PM
We should have a list of bots somewhere in a post, listing the bots, their owners, their op status, where they're hosted and their current efnet server.
Title: Re: Efnet botnet
Post by: novenary on November 16, 2015, 08:05:44 PM
Hmmm well, that's already really easy to fetch from the bots themselves. You don't have access to the bots though.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on November 16, 2015, 08:10:56 PM
True but it would be faster to check. Also Omnimaga has such list available at https://www.omnimaga.org/bots.php and I thought it would be cool to have something similar.
Title: Re: Efnet botnet
Post by: novenary on November 16, 2015, 08:25:06 PM
Could do that, let me edit the first post.
Title: Re: Efnet botnet
Post by: Yuki on November 16, 2015, 09:25:03 PM
I gotta write a similar script.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on November 16, 2015, 09:52:25 PM
Oh, I meant in a post. I would rather not use an extra SMF plugin just to show a botnet list. Look at wwhat happened when Omni upgraded to SMF 2.0 and lost all tutorials/notable tools/etc.
Title: Re: Efnet botnet
Post by: novenary on November 17, 2015, 08:25:21 AM
It doesn't need to be an SMF plugin.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on November 17, 2015, 09:59:14 PM
Yeah I wasn't unsure because I thought juju was refering to the SMF pages mod Omni is using.
Title: Re: Efnet botnet
Post by: novenary on November 21, 2015, 08:40:36 PM
Remind me later to make the repeat filter a little looser.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on November 22, 2015, 06:40:52 AM
5-6 repeats would be better. Or perhaps have a warning instead for the first time at 3 repeats?

Also change the kick message to mention that it was an automated kick.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on March 01, 2016, 04:24:33 AM
Does anyone know what happened to W-803 and W-806?
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on March 01, 2016, 11:12:40 PM
/me pokes @Streetwalrus and @Juju to link W-806 back with the other bots (making sure it's legit and not an imposter first) and to stabilize W-803 connection
Title: Re: Efnet botnet
Post by: Yuki on March 01, 2016, 11:37:09 PM
No idea what's happening with 806, and there's a few network and DNS issues with 803, don't really know why either.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on March 02, 2016, 12:16:03 AM
Could it be related to your router?
Title: Re: Efnet botnet
Post by: Yuki on March 02, 2016, 01:07:55 AM
I suspect the other router. I have two of them plugged to each other with a 50ft cable.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on March 02, 2016, 01:29:44 AM
I always wondered if using multiple routers was a good idea :P (can't the signals screw up each others?)
Title: Re: Efnet botnet
Post by: Yuki on March 02, 2016, 05:12:46 AM
That's pretty much how the Internet works, actually, so yes, it's a good idea. You'd have to configure them correctly so they won't give the same IPs, though.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on March 02, 2016, 05:37:07 AM
Ah I see. If they have the same IP, can they improve your connection stability?
Title: Re: Efnet botnet
Post by: aetios on March 02, 2016, 03:11:05 PM
I think W-802 is hosted by Streetwalrus, and thus, when his connection drops (and it regularly does), W-802 disconnects.
Title: Re: Efnet botnet
Post by: novenary on March 02, 2016, 04:53:05 PM
That's right. TheBot (link info bot) is also hosted at my place until I merge it with Walrified.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on March 02, 2016, 06:28:11 PM
The main issue lately was mostly W-803, W-805 and W-806, though. W-803 is rarely around, W-805 has disappeeared days ago and we had no news about what happened to it and W-806 last night kept disconnecting every few minutes.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on March 20, 2016, 06:29:51 AM
So @Juju W-803 is still offline and whoever runs W-804, same there too.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on March 29, 2016, 02:55:01 AM
@Streetwalrus do you think it would be possible to move W-802 to a static IP address/hostname? Because every few month it loses ops and is no longer recognized by the rest of the botnet. Right now, for example, the bot doesn't have ops in the channel.
Title: Re: Efnet botnet
Post by: novenary on March 29, 2016, 09:27:19 AM
Not possible since it's hosted at home. I could just wildcard the bot's hostname but eh.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on March 29, 2016, 03:05:08 PM
Ah that sucks. Can't you make the bot auto-ident? (After checking if the other bot hostmasks are legit, of course)
Title: Re: Efnet botnet
Post by: aetios on March 29, 2016, 03:51:08 PM
That would not be a great idea.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on March 29, 2016, 03:53:30 PM
Care to explain, @aeTIos ?
Title: Re: Efnet botnet
Post by: aetios on March 31, 2016, 06:41:06 PM
I have no idea why i wrote that. Disregard.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on April 01, 2016, 10:44:06 PM
Ok, so now we're down to three bots >.<

W-802 lacks auto-ops
W-803 is gone
W-805 is also gone >.<
Title: Re: Efnet botnet
Post by: novenary on April 02, 2016, 08:11:16 PM
Screw this bot, I hate it.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on April 02, 2016, 09:00:23 PM
Which one? O.O
Title: Re: Efnet botnet
Post by: novenary on April 02, 2016, 09:05:45 PM
All of them. Eggdrop a c.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on April 02, 2016, 10:53:46 PM
Let's not ditch them yet, though. Remember what happened to the channel last year >.< https://codewalr.us/index.php?topic=326.0
Title: Re: Efnet botnet
Post by: novenary on April 03, 2016, 02:04:58 PM
Yeah I remember that. I have no intention of ditching eggdrop but it's really annoying.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on April 03, 2016, 02:11:56 PM
I think certain EFnet servers are also to blame. I should /whois TI and Ceme bots to see which server they use.
Title: Re: Efnet botnet
Post by: novenary on April 03, 2016, 03:02:38 PM
Oh well, I wildcarded the bot's hostname. <_<
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on April 03, 2016, 05:16:46 PM
*.*.*.* and *!*@* ? O.O
Title: Re: Efnet botnet
Post by: novenary on April 03, 2016, 07:18:19 PM
Well, only the IP really matters. It's not like allowing an entire ISP is secure in the first place anyway. <_<
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on April 03, 2016, 07:58:43 PM
I was kidding. :P
Title: Re: Efnet botnet
Post by: novenary on April 03, 2016, 09:24:07 PM
That is what I've allowed though. In theory the bots use some kind of password to authenticate themselves anyway so it should be fine. I'ts filtered by nick and ident at least.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on April 03, 2016, 09:34:03 PM
Make sure the passwords are minimum 65536 chars long. That's what juju uses to ssh into his servers.
Title: Re: Efnet botnet
Post by: novenary on April 04, 2016, 11:54:12 AM
I have no idea what the password is though. :P I think it's randomly generated every time.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on April 04, 2016, 04:08:03 PM
So what about a W-808 for aeTIos?
Title: Re: Efnet botnet
Post by: Yuki on April 04, 2016, 04:10:02 PM
If he want one, yeah.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on April 04, 2016, 04:10:52 PM
Also juju, fix W-803 :P
Title: Re: Efnet botnet
Post by: aetios on April 14, 2016, 09:34:19 AM
Oh,um, I don't think i really need a bot for me ^^' I can't really run it 24/7 reliably so yeah.. :')
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on April 14, 2016, 03:38:59 PM
I wonder if @Cumred_Snektron and @Ivoah could, so we could have more than 3 bots...
Title: Re: Efnet botnet
Post by: Ivoah on April 14, 2016, 04:16:08 PM
Quote from: DJ Omnimaga on April 14, 2016, 03:38:59 PM
I wonder if @Cumred_Snektron and @Ivoah could, so we could have more than 3 bots...
I did run an eggdrop before my iMac died. I'll set another one up if y'all want.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on April 14, 2016, 04:24:51 PM
It would be cool if you could. We used to have 7 bots, and 4 of those seems gone now. 3 bots with ops is not very safe against opless channel disasters (Chanfix didn't save us, last time)
Title: Re: Efnet botnet
Post by: Ivoah on April 14, 2016, 06:59:45 PM
Juju would have to help me set it up, as he did last time.
Title: Re: Efnet botnet
Post by: Snektron on April 14, 2016, 10:40:28 PM
I can probably host something on my vps, bur i spknow nothing about irc
Title: Re: Efnet botnet
Post by: Yuki on April 14, 2016, 11:45:11 PM
I'd send you the config file, you'd have to install eggdrop (usually apt-get install eggdrop or pacman -S eggdrop, depending of your distro) then run it you don't even have to know anything.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on April 15, 2016, 03:47:56 AM
From personal memories, all I had to do was launch some batch file and keep the command prompt window open, right? I ran an eggdrop back in 2005 but someone set it up for me at the time. THe main problem was having the window always open or taking space in the task bar so I kept closing it by accident.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on May 05, 2016, 06:13:46 PM
@Juju could you bring W-803 back online and ensure it can stay connected at night?

Also it seems EFnet banned W-805 >.<

Now we're down to two bots
Title: Re: Efnet botnet
Post by: aetios on May 07, 2016, 08:08:28 AM
Can someone ELI5 how to put w-808 on my VPS? I know I have to move eggdrop to it but I'm not entirely sure what do.
Title: Re: Efnet botnet
Post by: novenary on May 07, 2016, 06:07:10 PM
Quote from: aeTIos on May 07, 2016, 08:08:28 AM
Can someone ELI5 how to put
Wat.
More seriously I can explain it to you, just poke me on telegram until you break the limits of my laziness. :P
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on May 07, 2016, 07:15:01 PM
Quote from: Streetwalrus on May 07, 2016, 06:07:10 PM
Quote from: aeTIos on May 07, 2016, 08:08:28 AM
Can someone ELI5 how to put
Wat.
More seriously I can explain it to you, just poke me on telegram until you break the limits of my laziness. :P
That's possible? *.*

J/k but more bots = the better
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on June 28, 2016, 04:21:02 AM
Quote from: Streetwalrus on May 07, 2016, 06:07:10 PM
Quote from: aeTIos on May 07, 2016, 08:08:28 AM
Can someone ELI5 how to put
Wat.
More seriously I can explain it to you, just poke me on telegram until you break the limits of my laziness. :P
4cc0rd1n6 70 h15 p057 1 7h1nk h3 w4n75 y0u 70 8r34k 7h3 l1m175 0f h15 l421n355 1n5734d 4nd m4k3 y0u 134rn 13375p34k 1n 7h3 pr0c355.

How's the progress on this, by the way? :P (we have 4 bots right now, though, which is good, but more doesn't hurt). I can't host one myself, though, because during Summer heat I keep my PC turned ON only a few hours a day
Title: Re: Efnet botnet
Post by: novenary on June 28, 2016, 11:50:16 AM
We haven't progressed on it at all. Sometime later.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on August 08, 2016, 06:44:19 PM
/me pokes @Juju to add auto-startup/reconnect to W-803 and put it back online
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on March 13, 2017, 03:24:22 AM
@Juju or @Streetwalrus should sync W-803 with the two other bots, because it lacks ops right now.
Title: Re: Efnet botnet
Post by: novenary on March 14, 2017, 01:32:17 AM
Fixed.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on March 14, 2017, 01:32:46 AM
Yay! I wonder what caused the desync issue...

(assuming the bot is legit, of course, lol)
Title: Re: Efnet botnet
Post by: novenary on March 14, 2017, 01:34:47 AM
Something with juju's isp changing the format of their hostmasks.
Title: Re: Efnet botnet
Post by: _iPhoenix_ on March 14, 2017, 05:30:13 AM
I have always wanted to create a bot net (never have), but there are always people like juju and street that ruin the fun :( Good job, like honestly ;)
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on March 14, 2017, 05:36:44 AM
Botnets aren't really useful unless you have your own IRC channel or something. the W-801, 803 and 805 bots are mainly around to give operator privileges to each others, while making sure the IRC channel has at least one operator left, since EFnet lacks Nickserv/Chanserv services.
Title: Re: Efnet botnet
Post by: Yuki on March 14, 2017, 06:10:56 AM
Quote from: Streetwalrus on March 14, 2017, 01:34:47 AM
Something with juju's isp changing the format of their hostmasks.
Maybe I changed IPs too. Yeah, sounds like it.
Title: Re: Efnet botnet
Post by: novenary on June 20, 2017, 11:32:04 PM
@Juju make sure you don't upgrade eggdrop to 1.8 on the bots you manage until we can upgrade them all, it looks like 1.8 and 1.6 are not compatible and the botrs won't link. Just had the problem with mine, the aur package got updated in april it seems, but I never update my raspberry pi lol.
Title: Re: Efnet botnet
Post by: Yuki on June 20, 2017, 11:49:34 PM
Good to know. Debian probably won't update it to 1.8 anytime soon and I hardly ever update my Arch server (even less AUR packages), but good to know. In any case, you probably can compile a previous version.

git clone https://aur.archlinux.org/eggdrop.git
cd eggdrop
git checkout 5e6e164
makepkg
Title: Re: Efnet botnet
Post by: novenary on June 20, 2017, 11:51:00 PM
I already had it in my pacaur cache so that wasn't really a problem, I just had to reinstall the old package and add it to IgnorePkg.
Title: Re: Efnet botnet
Post by: Dream of Omnimaga on June 21, 2017, 03:26:40 AM
Yeah the upgrade sghould probably only be done once you all are online at the same time to do it on Telegram or something

Title: Re: Efnet botnet
Post by: novenary on June 21, 2017, 09:56:40 AM
Like Juju said, not until plebian updates it which is probably in about 10 years.