Tor Proxy

If you have trouble on your server with spam, drones/zombies/bots or proxies

Moderator: Supporters

Locked
SaraC
Posts: 4
Joined: Fri Mar 04, 2016 9:26 am

Tor Proxy

Post by SaraC »

Hi,
I have try it:

Code: Select all

blacklist efnetrbl {
        dns {
                name rbl.efnetrbl.org;
                type record;
                reply { 1; 5; };
        };
        action kline;
        ban-time 1h;
        reason "Proxy/drone detected. Check http://rbl.efnetrbl.org/?i=$ip for details.";
};
but all Tor proxy can join without problems :cry:
How I can stop them?
Thank you for help me
Syzop
UnrealIRCd head coder
Posts: 2112
Joined: Sat Mar 06, 2004 8:57 pm
Location: .nl
Contact:

Re: Tor Proxy

Post by Syzop »

According to the documentation at efnetrbl.org TOR proxies use reply 4. Your block only catches reply 1 and 5, so simply add 4; to your reply section.
SaraC
Posts: 4
Joined: Fri Mar 04, 2016 9:26 am

Re: Tor Proxy

Post by SaraC »

Thanks Syzop :)

Code: Select all

reply { 1; 4; 5; };
Many tor pass the same, you think you release other lists to detect and block proxy and Tor?
Don't find a lot about this speech, only this your code to insert into your unrealircd and I thank you for that.
floffy
Posts: 44
Joined: Tue May 05, 2015 9:55 pm

Re: Tor Proxy

Post by floffy »

Does this 2 Are Valid for unrealircd 403


blacklist {
name = "rbl.efnetrbl.org";
type = "A record reply";
ban_unknown = no;
reply {
1 = "Open Proxy";
2 = "spamtrap666";
3 = "spamtrap50";
4 = "TOR";
5 = "Drones / Flooding";
};
kline = "KLINE 1440 *@%h :Blacklisted Proxy found. Visit http://rbl.efnetrbl.org/?i=%i for info.";
};
blacklist {
name = "tor.efnet.org";
type = "A record reply";
ban_unknown = no;
reply {
1 = "TOR";
};
kline = "KLINE 1440 *@%h :TOR exit node found. Visit http://rbl.efnet.org/?i=%i for info.";
};
Syzop
UnrealIRCd head coder
Posts: 2112
Joined: Sat Mar 06, 2004 8:57 pm
Location: .nl
Contact:

Re: Tor Proxy

Post by Syzop »

No, see the Blacklist block for the correct syntax. There's also an example for efnetrbl there.
Billy
Posts: 1
Joined: Tue Aug 30, 2016 3:47 pm

Re: Tor Proxy

Post by Billy »

Hello. I use proxy from http://advanced.name. How can i can use blacklist block with it?
Locked