/* * BOPM sample configuration */ options { pidfile = "/cygdrive/c/BOPM/bopm.pid"; # negcache = 3600; dns_fdlimit = 64; # scanlog = "/cygdrive/c/BOPM/var/bopm_full.log"; }; IRC { # vhost = "0.0.0.0"; nick = "Bopm"; realname = "Bopm"; username = "Bopm"; server = "irc.kingskrown.com"; # password = "bopmsecurity"; port = 6667; nickserv = "privmsg nickserv :identify bopmsecurity"; oper = "bopm bopmsecurity"; mode = "+s +c"; away = "I'm a bot, don't message me."; channel { name = "#bopm"; # key = "somekey"; invite = "privmsg chanserv :invite #bopm"; }; connregex = "\\*\\*\\* Notice -- Client connecting: ([^ ]+) \\(([^@]+)@([^\\)]+)\\) \\[([0-9\\.]+)\\].*"; /* * "kline" controls the command used when an open proxy is confirmed. * We suggest applying a temporary (no more than a few hours) KLINE on the host. * * * Please note that if you are matching against our DNSBL * opm.blitzed.org (see further below), then you will need some way to * let users know how they can be removed from this DNSBL. That is * the purpose of the blitzed.org URL in the example message, so * please do not remove it unless you also disable DNSBL lookups (or * if you use a different DNSBL). * * Also note that you cannot include ':' characters actually inside * the KLINE message (e.g. for a http:// address). * * Users rewriting this message into something that isn't even a valid * IRC command is the single most common cause of support requests and * therefore WE WILL NOT SUPPORT YOU UNLESS YOU USE ONE OF THE EXAMPLE * KLINE COMMANDS BELOW. * * * That said, should you wish to customise this text, several * printf-like placeholders are available: * * %n User's nick * %u User's username * %h User's irc hostname * %i User's IP address * */ kline = "KLINE +3d *@%h :Open Proxy found on your host. Please visit www.blitzed.org/proxy?ip=%i for more information."; # kline = "GLINE +*@%i 1800 :Open proxy found on your host. Please visit www.blitzed.org/proxy?ip=%i for more information."; perform = "PROTOCTL HCN"; }; OPM { blacklist { name = "opm.blitzed.org"; type = "A record bitmask"; ban_unknown = yes; reply { 1 = "WinGate"; 2 = "Socks"; 4 = "HTTP"; 8 = "Router"; 16 = "HTTP POST"; }; # kline = "KLINE +3d *@%h :Open proxy found on your host, please visit www.blitzed.org/proxy?ip=%i"; }; # blacklist { # name = "dnsbl.njabl.org"; # type = "A record reply"; # reply { # 9 = "Open proxy"; # }; # ban_unknown = no; # kline = "KLINE +3d *@%h :Open proxy found on your host, please visit www.njabl.org/cgi-bin/lookup.cgi?query=%i"; # }; # dnsbl_from = "kingskrown@yahoo.com"; # dnsbl_to = "bopm@reports.blitzed.org"; # sendmail = "/usr/sbin/sendmail"; }; scanner { name="default"; protocol = HTTP:80; protocol = HTTP:8080; protocol = HTTP:3128; protocol = HTTP:6588; protocol = SOCKS4:1080; protocol = SOCKS5:1080; protocol = ROUTER:23; protocol = WINGATE:23; protocol = HTTPPOST:80; # vhost = "127.0.0.1"; fd = 512; max_read = 4096; timeout = 30; target_ip = "75.49.23.210"; target_port = 6667; target_string = "*** Looking up your hostname..."; # target_string = ":irc.kingskrown.com NOTICE AUTH :*** Looking up your hostname..."; target_string = "ERROR :Trying to reconnect too fast."; }; scanner { name = "extended"; protocol = HTTP:81; protocol = HTTP:8000; protocol = HTTP:8001; protocol = HTTP:8081; protocol = HTTPPOST:81; protocol = HTTPPOST:6588; protocol = HTTPPOST:8000; protocol = HTTPPOST:8001; protocol = HTTPPOST:8080; protocol = HTTPPOST:8081; protocol = SOCKS4:4914; protocol = SOCKS4:6826; protocol = SOCKS4:7198; protocol = SOCKS4:7366; protocol = SOCKS4:9036; protocol = SOCKS5:4438; protocol = SOCKS5:5104; protocol = SOCKS5:5113; protocol = SOCKS5:5262; protocol = SOCKS5:5634; protocol = SOCKS5:6552; protocol = SOCKS5:6561; protocol = SOCKS5:7464; protocol = SOCKS5:7810; protocol = SOCKS5:8130; protocol = SOCKS5:8148; protocol = SOCKS5:8520; protocol = SOCKS5:8814; protocol = SOCKS5:9100; protocol = SOCKS5:9186; protocol = SOCKS5:9447; protocol = SOCKS5:9578; fd = 400; }; user { mask = "*!*@*"; scanner = "default"; }; user { mask = "*!*@*www*"; mask = "*!*@*proxy*"; mask = "*!*@*cache*"; mask = "*!*@*aol*"; scanner = "extended"; }; exempt { mask = "*!*@127.0.0.1"; };