Protecting and securing your bot from from the bad guys

Default sample conf is convenient, not locked down. Do this before you brag about the botnet.

Users

  • set learn-users 0. Add people with .adduser. If you leave learn-users on, change the hello command off hello.
  • One set owner. +n on the partyline is god. Do not scatter it.
  • set default-flags "" so new users are not +o+p on arrival.
  • set require-p 1 so partyline is explicit.
  • Strong passwords. /msg BotNick pass in a private message, not a channel.

Auto-op

Do not +a auto-op on a public channel. Hostmasks lie. Op after identify: /msg BotNick op or .op on the partyline.

Listen port

listen 49152 all
set protect-telnet 1
set stealth-telnets 1

The listen port is for DCC/partyline/botnet, not for logging into the shell. Shell login is SSH.

Files

  • chmod 700 ~/botdir and the conf / userfile. Conf has passwords.
  • Do not share the shell account.
  • Keep Eggdrop current (1.9 / 1.10 from geteggdrop.com). Old trees are how people get owned.

Network / AUP

Max 2 IRC connections per shell to a given network. Clones, extra BNCs, and "just one more leaf on the same shell" are how you get the port 6667 welcome mat pulled.

Tcl

.tcl and .set on the partyline are loaded guns. set must-be-owner 1 (or 2). Do not source junk. Tcl.

Sides

If you need NickServ/ChanServ on a net you run, that is an IRCD Shell plus either the KIRE services addon or self-managed Anope — see the Anope article. That is not "put services on a bot shell."

  • 0 Users Found This Useful
Was this answer helpful?

Related Articles

Setting up an Eggdrop (the short version)

SSH into your KIRE shell. Not telnet. Tcl and OpenSSL are already on the box. Current Eggdrop is...

Getting the Eggdrop Source Code

Get current Eggdrop from the Eggheads project. That is geteggdrop.com or ftp.eggheads.org. The...

Detailed Installation Instructions (Manual Install Method)

SSH into the shell. Tcl and OpenSSL are already there. Current Eggdrop is 1.9 / 1.10 from...

How to configure your eggdrop bot

Work in the install dir (~/botdir). Copy the sample, do not edit eggdrop.conf in place: cp...

Editing the botchk file to automatically restart your bot

Eggdrop daemonizes. Screen/tmux are for irssi/weechat, not the bot. Persist with crontab via...