[IRCServices] Major fizzer worm problem

[Ballsy]

	We ust bahamut on our network, and while there is apparently a 
patch available (mentioned on dalnet-src@ mailing list) here...

http://www.rezosup.org/download/uptodate/serveurs/ircd/patches/patchs_norm/b    
ahamut-1.4.34-release.fz3.patch

	we opted to go with small Perl bots (1 per server) instead, which 
are +oK which /who all connecting users. If they match a given regex, they 
get /zlined (not sure what the equivalent command on other IRCds is).  
Basically, they're "banned" before they can even register, before the 
server 
creates a structure for the user, etc.  These should give us the 
flexibility to modify the regex should the pattern change without having 
to take the server down to apply a patch.  No apparent resource 
implications, other than an ircd.conf file which gets pretty large over 
time.  Granted, we're a small network...larger networks may see 
performance hits...not sure.
	Having services deal with these infected clients will become a 
nightmare because its S?Line/Akill list will become huge and unmanageable.  
Resource issues are inevitable, as well.

David


Quoth Terrance Thornsley on May 14 at 10:03,

> Our IRC net is one of those targeted by the
> fizzer worm and we are getting huge amounts of
> connects.  Is anyone aware of any
> module/fix/patch for services that we may be able
> to use to ban these connects?  We're currently
> using the most recent ver. of ircservices as well
> as Unreal IRCd.
> 
> Any help would be greatly appreciated.
> 
> Thanks,
> 
> Terry
> 
> 
> 
> 
> ------------------------------------------------------------------
> To unsubscribe or change your subscription options, visit:
> http://www.ircservices.za.net/mailman/listinfo/ircservices
>