UnrealIRCd Forums

I would like to find a solution against vpn. can i find an answer for vpn?

There's a small problem with all of this.

New VPNs and proxies appear in the wild, every day.

It's almost impossible to fight them because there are hundreds, if not thousands, of IPS that can be used, unless it's a well established and well-known provider that lets you know what IPs they do have such as ProtonVPN, as example.

The best option you have currently, is to use UnrealIRCd's built-in Blacklist (https://www.unrealircd.org/docs/Blacklist_block), which will help greatly against proxies and stuff.

Cheers

First to all i want to thanks for your answear. I'm using this one but against vpn it's not working very well.

#BlackList - BOPM - by Dragone2 - http://www.risposteinformatiche.it
blacklist dronebl {
dns {
name dnsbl.dronebl.org;
type record;
reply { 2; 3; 5; 7; 8; 9; 10; 255; };
};
action gline;
ban-time 7d;
reason "Host nella lista DroneBL. Per maggiori informazioni visita http://dronebl.org";
};

blacklist blitzed {
dns
{
name opm.blitzed.org;
type record;
reply { 1; 2; 4; 8; 16; };
};
action gline;
ban-time 7d;
reason "Mi spiace, un Open Proxy e' stato trovato sul tuo host. Visita http://www.blitzed.org per maggiori informazioni.";
};

blacklist njabl {
dns {
name dnsbl.njabl.org;
type record;
reply { 9; };
};
action gline;
ban-time 7d;
reason "Il tuo IP e' nella nostra Lista Open Proxy... http://www.njabl.org";
};

blacklist virbldnsbl {
dns {
name virbl.dnsbl.bit.nl;
type record;
reply { 2; };
};
action gline;
ban-time 7d;
reason "Il tuo IP e' nella nostra Lista Virus... http://virbl.bit.nl/list.php";
};

blacklist dnsblsectorde {
dns {
name tor.dnsbl.sectoor.de;
type record;
reply { 1; };
};
action gline;
ban-time 7d;
reason "Il tuo IP e' nella lista TOR Server... http://www.sectoor.de/";
};

blacklist nomorefun {
dns {
name no-more-funn.moensted.dk;
type record;
reply { 10 ; };
};
action gline;
ban-time 7d;
reason "Il tuo IP e' nella nostra lista Open Proxy... http://moensted.dk/";
};

blacklist sorbs {
dns {
name dnsbl.sorbs.net;
type record;
reply { 2; 3; 4; };
};
action gline;
ban-time 7d;
reason "Il tuo IP e' nella nostra lista Open Proxy Sorbs.net.. http://dnsbl.sorbs.net/";
};

blacklist winbots {
dns {
name spbl.bl.winbots.org;
type record;
reply { 1; 2; 3; 4; };
};
action gline;
ban-time 7d;
reason "Il tuo IP e' nella nostra Lista WinBots.org ... Invia un'email a [email protected] per risolvere.";
};

blacklist noderebellion {
dns {
name dronebl.noderebellion.net;
type record;
reply { 3; 4; 5; 10; 14; 17; 19; };
};
action gline;
ban-time 7d;
reason "Il tuo IP e' in lista in DroneBL, visita http://www.noderebellion.net/";
};

blacklist dnsblacklist {
dns {
name dnsblacklist.co.uk;
type record;
reply { 3; };
};
action gline;
ban-time 7d;
reason "Il tuo host e' nella lista dnsblacklist.co.uk.";
};

blacklist torsector {
dns {
name tor.sectoor.de;
type record;
reply { 1; };
};
action gline;
ban-time 7d;
reason "Sei nella lista tor.sectoor.de DNSBL. Visita http://www.sectoor.de/tor.php";
};

blacklist proxybl {
dns {
name dnsbl.proxybl.org;
type record;
reply { 2; };
};
action gline;
ban-time 7d;
reason "Il tuo host e' nella lista proxyBL. Per maggiori informazioni, visita www.proxybl.org/";
};

blacklist abuse {
dns {
name dnsbl.abuse.ch;
type record;
reply { 2; 3; 4; 5; };
};
action gline;
ban-time 7d;
reason "Il tuo host e' nella lista dnsbl.abuse.ch. Per maggiori informazioni, visita www.dnsbl.abuse.ch/removal.php";
};

blacklist martynip {
dns {
name dnsbl.martynip.co.uk;
type record;
reply { 2; 3; 4; 5; 6; 10; };
};
action gline;
ban-time 7d;
reason "Il tuo host e' nella lista dnsbl.martynip.co.uk";
};

blacklist efnetrbl {
dns {
name rbl.efnetrbl.org;
type record;
reply { 1; 2; 3; 5; };
};
action gline;
ban-time 7d;
reason "Host presente nella lista rbl.efnet.org. Visita http://rbl.efnet.org";
};

#Blocco eccezioni
except blacklist {
mask 85.25.137.*;
mask 109.169.31.*;
};

I see on internet a tcl and i used for a litle time but now it's not working anymore. I want to know if somedoby can do like modules for using in unrealircd. it's BadIP.tcl and verify ip's on this website https://getipintel.net/

RadioClick wrote: Tue Nov 14, 2023 4:53 pm I see on internet a tcl and i used for a litle time but now it's not working anymore. I want to know if somedoby can do like modules for using in unrealircd. it's BadIP.tcl and verify ip's on this website https://getipintel.net/

That website doesn't seem to reply with proper codes like most DNSBL so it can't be used with UnrealIRCd current system.

I also advise to not use it since my home IP had a score o 0.89208, too close to be considered a VPN.

I found https://wafrules.com/ and based on it, I guess you can put a gzline on the following ASN : 207137 141039 147049 9009 16247 51332 394087 60068 212238 209854 9009 46253 8100 62639 16276 206092 206074 206164 206150 210277 216025 39351 51852