blacklist { /* The DNS name of the blacklist */ name = "dnsbl.dronebl.org"; /* * There are only two values that are valid for this * "A record bitmask" and "A record reply" * These options affect how the values specified to reply * below will be interpreted, a bitmask is where the reply * values are 2^n and more than one is added up, a reply is * simply where the last octet of the IP is that number. * If you are not sure then the values set for dnsbl.dronebl.org * will work without any changes. */ type = "A record reply"; /* Kline types not listed in the reply list below. * * For DNSBLs that are not IRC specific and you just wish to kline * certain types this can be disabled. */ ban_unknown = yes; /* The actual values returned by the dnsbl.dronebl.org blacklist * As documented at http://www.dronebl.org/howtouse.do */ reply { 2 = "Sample"; 3 = "IRC Drone"; 4 = "Tor"; 5 = "Bottler"; 6 = "Unknown spambot or drone"; 7 = "DDOS Drone"; 8 = "SOCKS Proxy"; 9 = "HTTP Proxy"; 10 = "ProxyChain"; 255 = "Unknown"; }; /* The kline message sent for this specific blacklist, remember to put * the removal method in this. */ kline = "KLINE *@%h :You have a host listed in the DroneBL. For more information, visit http://dronebl.org/lookup_branded.do?ip=%i&network=Network"; }; /* tor.dnsbl.sectoor.de - http://www.sectoor.de/tor.php */ blacklist { name = "tor.dnsbl.sectoor.de"; type = "A record reply"; reply { 1 = "Tor exit server"; }; ban_unknown = no; kline = "KLINE *@%h :Tor exit server detected. See www.sectoor.de/tor.php?ip=%i"; }; /* rbl.efnet.org - http://rbl.efnet.org/ */ blacklist { name = "rbl.efnet.org"; type = "A record reply"; reply { 1 = "Open proxy"; 2 = "Trojan spreader"; 3 = "Trojan infected client"; 4 = "TOR exit server"; 5 = "Drones / Flooding"; }; ban_unknown = yes; kline = "KLINE *@%h :Listed in rbl.efnet.org. See rbl.efnet.org/?i=%i"; };