UnrealIRCd Forums

Hi all

Does any body here know where can i get a firewall for irc that blocks all kind of ports that i add.

For example if i add a port 31267 to firewall so that any body that is trying to use proxy/socks port 31267 will be automaticly stoped from the firewall. I have 2 proxy scanners installed but it doesnt help me at all.

I dont wanna just scan for open proxy i wanna block all kind of proxies secure or insecure doesnt matter.

And also i need a good ddos protection program if some body know where to bay all will bay it.

Thank you for any help

In the way od DDoS protection as far as i am aware there isnt any good form of protection. Also putting that protection on the server in the way of software is a bit pointless cause itll be your router/firewall that usually goes down first or at least thats whats happened in my experiance.

What you, guesti, are describing is not possible. From an incoming connection it is impossible to see if the user is from a proxy or not. You cannot solve that at firewall level.
You either have to scan, use dns blacklists (dnsbl's), or other counter measures, and even that is not a guarantee that you would catch everyon ;)

Syzop wrote:use dns blacklists (dnsbl's), or other counter measures

Can you explain me a little bit please how to use the dns blacklists and where it is, and where are does other counter measures. And also if you know some softwares that at least help something in protecting ircd not for 100% but 30% would also help.

Thanks for fast replay

Look up these two proxy scanners. BOPM (Blitzed Open Proxy Monitor, i think) and OPSB (Open Proxy Scanning Bot? not sure). They are highly effective.

A lot of people use BOPM, but if you use BOPM remember to reconfigure it to use another DNS Blacklist (DNSBL) because the default blacklist went down.

I personally think OPSB is a little less effective, and you have to load the entire neostats package on, and I don't like NeoStats.

ARcanUSNUMquam wrote:A lot of people use BOPM, but if you use BOPM remember to reconfigure it to use another DNS Blacklist (DNSBL) because the default blacklist went down.

Do you know of a viable alternate blacklist?

guesti wrote:Hi all

Does any body here know where can i get a firewall for irc that blocks all kind of ports that i add.

For example if i add a port 31267 to firewall so that any body that is trying to use proxy/socks port 31267 will be automaticly stoped from the firewall. I have 2 proxy scanners installed but it doesnt help me at all.

I dont wanna just scan for open proxy i wanna block all kind of proxies secure or insecure doesnt matter.

And also i need a good ddos protection program if some body know where to bay all will bay it.

Thank you for any help

Well if u got root access then you can use "apf" in linux to block those port read the feature

http://www.r-fx.org/apf.php

MiNdErAsR wrote:

ARcanUSNUMquam wrote:A lot of people use BOPM, but if you use BOPM remember to reconfigure it to use another DNS Blacklist (DNSBL) because the default blacklist went down.

Do you know of a viable alternate blacklist?

Try these threads on searchirc.org:
http://searchirc.com/boards/viewtopic.p ... =blacklist
http://searchirc.com/boards/viewtopic.p ... =blacklist

Some of these blacklists may have died out. Make sure you check them out for a proper response before using them fully. Others may have bad banning policies or it may take forever to get a fixed/nonmalicious/dynamic IP off the list, which will screw with some of your users. The best one out there was the BOPM default one, but sadly it went down.

SLipKnOt wrote:Well if u got root access then you can use "apf" in linux to block those port read the feature

http://www.r-fx.org/apf.php

How do i have to install this one? In the readme file i cant find the instruction for installing this script.