Tor Proxy

If you have trouble on your server with spam, drones/zombies/bots or proxies

Moderator: Supporters

Post Reply
SaraC
Posts: 2
Joined: Fri Mar 04, 2016 9:26 am

Tor Proxy

Post by SaraC » Fri Mar 04, 2016 9:37 am

Hi,
I have try it:

Code: Select all

blacklist efnetrbl {
        dns {
                name rbl.efnetrbl.org;
                type record;
                reply { 1; 5; };
        };
        action kline;
        ban-time 1h;
        reason "Proxy/drone detected. Check http://rbl.efnetrbl.org/?i=$ip for details.";
};
but all Tor proxy can join without problems :cry:
How I can stop them?
Thank you for help me

Syzop
UnrealIRCd head coder
Posts: 1727
Joined: Sat Mar 06, 2004 8:57 pm
Location: .nl
Contact:

Re: Tor Proxy

Post by Syzop » Fri Mar 04, 2016 10:45 am

According to the documentation at efnetrbl.org TOR proxies use reply 4. Your block only catches reply 1 and 5, so simply add 4; to your reply section.

SaraC
Posts: 2
Joined: Fri Mar 04, 2016 9:26 am

Re: Tor Proxy

Post by SaraC » Fri Mar 04, 2016 3:57 pm

Thanks Syzop :)

Code: Select all

reply { 1; 4; 5; };
Many tor pass the same, you think you release other lists to detect and block proxy and Tor?
Don't find a lot about this speech, only this your code to insert into your unrealircd and I thank you for that.

floffy
Posts: 37
Joined: Tue May 05, 2015 9:55 pm

Re: Tor Proxy

Post by floffy » Tue Jun 21, 2016 5:00 pm

Does this 2 Are Valid for unrealircd 403


blacklist {
name = "rbl.efnetrbl.org";
type = "A record reply";
ban_unknown = no;
reply {
1 = "Open Proxy";
2 = "spamtrap666";
3 = "spamtrap50";
4 = "TOR";
5 = "Drones / Flooding";
};
kline = "KLINE 1440 *@%h :Blacklisted Proxy found. Visit http://rbl.efnetrbl.org/?i=%i for info.";
};
blacklist {
name = "tor.efnet.org";
type = "A record reply";
ban_unknown = no;
reply {
1 = "TOR";
};
kline = "KLINE 1440 *@%h :TOR exit node found. Visit http://rbl.efnet.org/?i=%i for info.";
};

Syzop
UnrealIRCd head coder
Posts: 1727
Joined: Sat Mar 06, 2004 8:57 pm
Location: .nl
Contact:

Re: Tor Proxy

Post by Syzop » Thu Jun 23, 2016 1:40 pm

No, see the Blacklist block for the correct syntax. There's also an example for efnetrbl there.

Billy
Posts: 1
Joined: Tue Aug 30, 2016 3:47 pm

Re: Tor Proxy

Post by Billy » Tue Aug 30, 2016 3:49 pm

Hello. I use proxy from http://advanced.name. How can i can use blacklist block with it?

Post Reply

Who is online

Users browsing this forum: No registered users and 1 guest