/* This is a semi-modified/stripped bopm.conf
 * For use with BOPM tutorial on wiki.neoturbine.net */

options {
	/* Full path and filename for file storing the process ID */
	pidfile = "/home/bopm/bopm/var/bopm.pid";

	/* seconds to store the IP address of hosts */
#	negcache = 3600;

	/* Amount of file descriptors to allocate to asynchronous DNS */
	dns_fdlimit = 64;

	/* full path and filename of scan logfile */
	scanlog = "/home/bopm/bopm/var/scan.log";
};

IRC {
	/* IP to bind to for the IRC connection */
	vhost = "127.0.0.1";

	/* Nickname for BOPM to use */
	nick = "YOURBOPMUSERNAMEGOESHERE";

	/* Text to appear in the "realname" field of BOPM's whois output */
	realname = "OPM";

	/* If you don't have an identd running, what username to use */
	username = "bopm";

	/* Hostname (or IP) of the IRC server */
	server = "127.0.0.1";

	/* Password used to connect to the IRC server (PASS) */
#	password = "secret";

	/* Connect to IRC server via this port */
	port = 31337; 

	/* Command to identify to NickServ */
#	nickserv = "privmsg nickserv :identify password";

	/* The username and password needed for BOPM to oper up */
	oper = "bopm BOPMOPERATORPASSWORD";
 
	/* Mode string that BOPM needs to set on itself as soon as it opers */
	/* See Unreal documentation for more information on user modes */
	mode = "+scH";

	/* Set BOPMs away as soon as it connects */
#	away = "I'm a bot.  Your messages will be ignored.";

	/* Specify BOPM control channel(s) */
	channel {
		/* Channel name. */
		name = "#SUPERSECRETCHANNELNAMEGOESHERE";

		/* Channel key */
		key = "someSECRETkey";

		/* command used to ask chanserv for invite */
#		invite = "privmsg chanserv :invite #bopm";
	};
       
	/* connregex is a POSIX regular expression used to parse connection
	 * (+c) notices from the ircd. The complexity of the expression should
	 * be kept to a minimum so load is @ a minimum even during 'heavy' traffic */

	/* Unreal in HCN mode */
	connregex = "\\*\\*\\* Notice -- Client connecting: ([^ ]+) \\(([^@]+)@([^\\)]+)\\) \\[([0-9\\.]+)\\].*";

	/* default kline
	 *  %n User's nick
	 *  %u User's username     - REMEMBER!
	 *  %h User's irc hostname - bots (& blacklists) don't necessarily have (contain) hostnames
	 *  %i User's IP address   - but they ALWAYS have IPs */
	kline = "KLINE *@%i :Open Proxy found on your host.";
      
	/* Text to send on connection. Specify multiple with multiple lines. */
	perform = "PROTOCTL HCN";
};

OPM {
blacklist {
	name = "rbl.efnet.org";
	type = "A record reply";
	reply {
		1 = "Open proxy";
		2 = "spamtrap666";
		3 = "spamtrap50";
		4 = "TOR exit server";
		5 = "Drones / Flooding"; /* as i understand it: any ip efnet has beef with */
	};
	ban_unknown = no; /* if RBL doesn't include an IP in (white|black)list ban */
	kline = "kline +*@%i 7d :EFnet RBL ircnet.com/cgi-bin/bl.cgi?ip=%i";
};

blacklist { 
	name = "dnsbl.dronebl.org"; 
	type = "A record reply"; 
	reply { 
		3 = "IRC Drone"; 
		4 = "Tor"; 
		5 = "Bottler"; 
		6 = "Unknown spambot or drone";
		7 = "DDOS Drone"; 
		8 = "SOCKS Proxy"; 
		9 = "HTTP Proxy"; 
		10 = "ProxyChain"; 
	}; 
	ban_unknown = no; 
	kline = "kline +*@%i 7d :DroneBL dronebl.org/lookup_branded.do?ip=%i"; 
};

blacklist { 
	name = "dnsbl.njabl.org"; 
	type = "A record reply"; 
	reply { 
		2 = "Open Relay"; 
		4 = "Confirmed Spam Source"; 
		9 = "Open Proxy"; 
	}; 
	ban_unknown = no; 
	kline = "kline +*@%i 7d :najabl njabl.org/cgi-bin/lookup.cgi?query=%i"; 
};

/* i'm not sure if i should uncomment the next two blacklist lines
   they might match too many entires 
   if you figure it out uncomment them and make a note in the wiki*/
/*
blacklist { 
	name = "dnsbl-2.uceprotect.net"; 
	type = "A record reply"; 
	reply { 
		2 = "Matched Entry"; 
	}; 

blacklist {
	name = "xbl.spamhaus.org";
	type = "A record reply"
	reply {
		4 = "CBL Detected Address"
	};
	ban_unknown = no; 
	kline = "kline +*@%i 7d :SpamhausXBL spamhaus.org/query/bl?ip=%i"; 
};
*/

/* this should match entries that attacked us in Feb 09 */
blacklist {
	name = "dnsbl.swiftbl.net";
	type = "A record reply"
	reply {
		2 = "SOCKS Proxy";
		3 = "IRC Proxy";
		4 = "HTTP Proxy";
		5 = "IRC Drone";
		6 = "TOR";
	};
	ban_unknown = no; 
	kline = "kline +*@%i 7d :SwiftBL swiftbl.net/lookup"; 
};

	/* Pretend to send reports FROM */
#	dnsbl_from = "mybopm@myserver.org";

	/* Email address to send reports TO.  Specify multiple with multiple lines. */
#	dnsbl_to = "bopm-report@dronebl.org";

	/* Full path to your sendmail binary */
#	sendmail = "/usr/sbin/sendmail";
};

/* Exempt hosts matching (hostname or IP) strings from any form of scanning or dnsbl */
exempt {
	mask = "*!*@127.0.0.1";
};