Miscellany

/*

BOPM sample configuration

*/

options {

	pidfile = "/cygdrive/c/BOPM/bopm.pid";


#	negcache = 3600;


	dns_fdlimit = 64;


#       scanlog = "/cygdrive/c/BOPM/var/bopm_full.log";
};


IRC {

#	vhost = "0.0.0.0";

	nick = "Bopm";

	realname = "Bopm";

	username = "Bopm";

	server = "irc.kingskrown.com";
	 
#	password = "bopmsecurity";

	port = 6667;

	nickserv = "privmsg nickserv :identify bopmsecurity";

	oper = "bopm bopmsecurity";
 
	mode = "+s +c";

	away = "I'm a bot, don't message me.";

	channel {

	   name = "#bopm";

#	   key = "somekey";

	   invite = "privmsg chanserv :invite #bopm";
	};

	connregex = "\\*\\*\\* Notice -- Client connecting: ([^ ]+) \\(([^@]+)@([^\\)]+)\\) \\[([0-9\\.]+)\\].*";


	/*
	 * "kline" controls the command used when an open proxy is confirmed.
	 * We suggest applying a temporary (no more than a few hours) KLINE on the host.
	 *
	 * <WARNING>
	 * Please note that if you are matching against our DNSBL
	 * opm.blitzed.org (see further below), then you will need some way to
	 * let users know how they can be removed from this DNSBL.  That is
	 * the purpose of the blitzed.org URL in the example message, so
	 * please do not remove it unless you also disable DNSBL lookups (or
	 * if you use a different DNSBL).
	 *
	 * Also note that you cannot include ':' characters actually inside
	 * the KLINE message (e.g. for a http:// address).
	 *
	 * Users rewriting this message into something that isn't even a valid
	 * IRC command is the single most common cause of support requests and
	 * therefore WE WILL NOT SUPPORT YOU UNLESS YOU USE ONE OF THE EXAMPLE
	 * KLINE COMMANDS BELOW.
	 * </WARNING>
	 *
	 * That said, should you wish to customise this text, several
	 * printf-like placeholders are available:
	 *
	 *  %n     User's nick
	 *  %u     User's username
	 *  %h     User's irc hostname
	 *  %i     User's IP address
	 *
	 */
	kline = "KLINE +3d *@%h :Open Proxy found on your host. Please visit www.blitzed.org/proxy?ip=%i for more information.";

	/* A GLINE example for IRCu: */
#       kline = "GLINE +*@%i 1800 :Open proxy found on your host. Please visit www.blitzed.org/proxy?ip=%i for more information.";

	 perform = "PROTOCTL HCN";

};

OPM {

	blacklist {

	   name = "opm.blitzed.org";
	   
	   type = "A record bitmask";
	   
	   ban_unknown = yes;
	   
	   reply {
	      1 = "WinGate";
	      2 = "Socks";
	      4 = "HTTP";
	      8 = "Router";
	      16 = "HTTP POST";
	   };
	   
#	   kline = "KLINE +3d *@%h :Open proxy found on your host, please visit www.blitzed.org/proxy?ip=%i";
	};

#	 blacklist {
#	    name = "dnsbl.njabl.org";
#	    type = "A record reply";
#	    reply {
#	       9 = "Open proxy";
#	    };
#	    ban_unknown = no;
#	    kline = "KLINE +3d *@%h :Open proxy found on your host, please visit www.njabl.org/cgi-bin/lookup.cgi?query=%i";
#	};

#	dnsbl_from = "kingskrown@yahoo.com";

#	dnsbl_to = "bopm@reports.blitzed.org";

#	sendmail = "/usr/sbin/sendmail";
};

scanner {

	name="default";

	protocol = HTTP:80;
	protocol = HTTP:8080;
	protocol = HTTP:3128;
	protocol = HTTP:6588;

	protocol = SOCKS4:1080;
	protocol = SOCKS5:1080;

	protocol = ROUTER:23;

	protocol = WINGATE:23;

	protocol = HTTPPOST:80;

#	vhost = "127.0.0.1";

	fd = 512;

	max_read = 4096;

	timeout = 30;

	target_ip     = "75.49.23.210";

	target_port   = 6667;

	target_string = "*** Looking up your hostname...";

#	target_string = ":irc.kingskrown.com NOTICE AUTH :*** Looking up your hostname...";

	target_string = "ERROR :Trying to reconnect too fast.";

};

scanner {
	name = "extended";

	protocol = HTTP:81;
	protocol = HTTP:8000;
	protocol = HTTP:8001;
	protocol = HTTP:8081;

	protocol = HTTPPOST:81;
	protocol = HTTPPOST:6588;
	protocol = HTTPPOST:8000;
	protocol = HTTPPOST:8001;
	protocol = HTTPPOST:8080;
	protocol = HTTPPOST:8081;

	protocol = SOCKS4:4914;
	protocol = SOCKS4:6826;
	protocol = SOCKS4:7198;
	protocol = SOCKS4:7366;
	protocol = SOCKS4:9036;

	protocol = SOCKS5:4438;
	protocol = SOCKS5:5104;
	protocol = SOCKS5:5113;
	protocol = SOCKS5:5262;
	protocol = SOCKS5:5634;
	protocol = SOCKS5:6552;
	protocol = SOCKS5:6561;
	protocol = SOCKS5:7464;
	protocol = SOCKS5:7810;
	protocol = SOCKS5:8130;
	protocol = SOCKS5:8148;
	protocol = SOCKS5:8520;
	protocol = SOCKS5:8814;
	protocol = SOCKS5:9100;
	protocol = SOCKS5:9186;
	protocol = SOCKS5:9447;
	protocol = SOCKS5:9578;

	fd = 400;

};
user {
	mask = "*!*@*";
	scanner = "default";
};
user {
	mask = "*!*@*www*";
	mask = "*!*@*proxy*";
	mask = "*!*@*cache*";
	mask = "*!*@*aol*";

	scanner = "extended";
};
exempt {
	mask = "*!*@127.0.0.1";
};