blacklist {
/* The DNS name of the blacklist */
name = "dnsbl.dronebl.org";
/*
* There are only two values that are valid for this
* "A record bitmask" and "A record reply"
* These options affect how the values specified to reply
* below will be interpreted, a bitmask is where the reply
* values are 2^n and more than one is added up, a reply is
* simply where the last octet of the IP is that number.
* If you are not sure then the values set for dnsbl.dronebl.org
* will work without any changes.
*/
type = "A record reply";
/* Kline types not listed in the reply list below.
*
* For DNSBLs that are not IRC specific and you just wish to kline
* certain types this can be disabled.
*/
ban_unknown = yes;
/* The actual values returned by the dnsbl.dronebl.org blacklist
* As documented at http://www.dronebl.org/howtouse.do */
reply {
2 = "Sample";
3 = "IRC Drone";
4 = "Tor";
5 = "Bottler";
6 = "Unknown spambot or drone";
7 = "DDOS Drone";
8 = "SOCKS Proxy";
9 = "HTTP Proxy";
10 = "ProxyChain";
255 = "Unknown";
};
/* The kline message sent for this specific blacklist, remember to put
* the removal method in this.
*/
kline = "KLINE *@%h :You have a host listed in the DroneBL. For more information, visit http://dronebl.org/lookup_branded.do?ip=%i&network=Network";
};
/* tor.dnsbl.sectoor.de - http://www.sectoor.de/tor.php */
blacklist {
name = "tor.dnsbl.sectoor.de";
type = "A record reply";
reply {
1 = "Tor exit server";
};
ban_unknown = no;
kline = "KLINE *@%h :Tor exit server detected. See www.sectoor.de/tor.php?ip=%i";
};
/* rbl.efnet.org - http://rbl.efnet.org/ */
blacklist {
name = "rbl.efnet.org";
type = "A record reply";
reply {
1 = "Open proxy";
2 = "Trojan spreader";
3 = "Trojan infected client";
4 = "TOR exit server";
5 = "Drones / Flooding";
};
ban_unknown = yes;
kline = "KLINE *@%h :Listed in rbl.efnet.org. See rbl.efnet.org/?i=%i";
};