If you have trouble on your server with spam, drones/zombies/bots or proxies
Moderator: Supporters
SaraC
Posts: 4 Joined: Fri Mar 04, 2016 9:26 am
Post
by SaraC » Fri Mar 04, 2016 9:37 am
Hi,
I have try it:
Code: Select all
blacklist efnetrbl {
dns {
name rbl.efnetrbl.org;
type record;
reply { 1; 5; };
};
action kline;
ban-time 1h;
reason "Proxy/drone detected. Check http://rbl.efnetrbl.org/?i=$ip for details.";
};
but all Tor proxy can join without problems
How I can stop them?
Thank you for help me
Syzop
UnrealIRCd head coder
Posts: 2118 Joined: Sat Mar 06, 2004 8:57 pm
Location: .nl
Contact:
Post
by Syzop » Fri Mar 04, 2016 10:45 am
According to the documentation at
efnetrbl.org TOR proxies use reply 4. Your block only catches reply 1 and 5, so simply add 4; to your reply section.
SaraC
Posts: 4 Joined: Fri Mar 04, 2016 9:26 am
Post
by SaraC » Fri Mar 04, 2016 3:57 pm
Thanks Syzop
Many tor pass the same, you think you release other lists to detect and block proxy and Tor?
Don't find a lot about this speech, only this your code to insert into your unrealircd and I thank you for that.
floffy
Posts: 44 Joined: Tue May 05, 2015 9:55 pm
Post
by floffy » Tue Jun 21, 2016 5:00 pm
Does this 2 Are Valid for unrealircd 403
blacklist {
name = "rbl.efnetrbl.org";
type = "A record reply";
ban_unknown = no;
reply {
1 = "Open Proxy";
2 = "spamtrap666";
3 = "spamtrap50";
4 = "TOR";
5 = "Drones / Flooding";
};
kline = "KLINE 1440 *@%h :Blacklisted Proxy found. Visit
http://rbl.efnetrbl.org/?i=%i for info.";
};
blacklist {
name = "tor.efnet.org";
type = "A record reply";
ban_unknown = no;
reply {
1 = "TOR";
};
kline = "KLINE 1440 *@%h :TOR exit node found. Visit
http://rbl.efnet.org/?i=%i for info.";
};
Syzop
UnrealIRCd head coder
Posts: 2118 Joined: Sat Mar 06, 2004 8:57 pm
Location: .nl
Contact:
Post
by Syzop » Thu Jun 23, 2016 1:40 pm
No, see the
Blacklist block for the correct syntax. There's also an example for efnetrbl there.
Billy
Posts: 1 Joined: Tue Aug 30, 2016 3:47 pm
Post
by Billy » Tue Aug 30, 2016 3:49 pm
Hello. I use proxy from
http://advanced.name . How can i can use blacklist block with it?