bopm conf

"Jubair Hasan" <[email protected]> Thu, 13 Nov 2003 08:04:17 +1100
Newsgroups	gmane.network.irc.bopm
Organization	BDiRC
Message-ID	<[email protected]>
Hi this is my conf of BOPM, that nick is registered to nickserv and has
operserv oper access. It also has the bopm helper module and can find
the socks/proxyies that are in the dnsbl database but it is not
klining(gline) them in Unreal3.2beta18, I am using epona 1.4.14
services.
 
JUBAiR
 
[Nov 12 12:01:18 2003] IRC READ -> :irc.myirc.net NOTICE BOPM :***
Notice -- Client connecting: Drowning ([email protected])
[208.192.153.64] {remote}
[Nov 12 12:01:18 2003] IRC REGEX -> Regular expression caught connection
notice. Parsing.
[Nov 12 12:01:18 2003] IRC REGEX -> Parsed [email protected]
[208.192.153.64] from connection notice.
[Nov 12 12:01:18 2003] DNSBL -> Passed '64.153.192.208.opm.blitzed.org'
to resolver
[Nov 12 12:01:18 2003] DNSBL -> Passed
'64.153.192.208.dynablock.easynet.nl' to resolver
[Nov 12 12:01:18 2003] DNSBL -> Passed '64.153.192.208.dnsbl.njabl.org'
to resolver
[Nov 12 12:01:18 2003] SCAN -> Passing [email protected] to
scanner [httpget]
[Nov 12 12:01:18 2003] DNSBL -> Lookup result for
[email protected] (64.153.192.208.opm.blitzed.org)
127.1.0.20 (error: 0)
[Nov 12 12:01:18 2003] DNSBL -> [email protected] appears in
WL zone opm.blitzed.org (HTTP, HTTP POST)
[Nov 12 12:01:18 2003] DNSBL -> Lookup result for
[email protected] (64.153.192.208.dynablock.easynet.nl)
0.0.0.0 (error: 3)
[Nov 12 12:01:18 2003] IRC READ ->
:[email protected] JOIN :#MyChannel
[Nov 12 12:01:18 2003] DNSBL -> Lookup result for
[email protected] (64.153.192.208.dnsbl.njabl.org) 127.0.0.4
(error: 0)
[Nov 12 12:01:18 2003] DNSBL -> [email protected] appears in
WL zone dnsbl.njabl.org ()
[Nov 12 12:01:18 2003] SCAN -> Negotiation failed 208.192.153.64:3128
(HTTPGET) [httpget] (0 bytes read)
[Nov 12 12:01:18 2003] SCAN -> Negotiation failed 208.192.153.64:8080
(HTTPGET) [httpget] (0 bytes read)
[Nov 12 12:01:18 2003] SCAN -> Negotiation failed 208.192.153.64:80
(HTTPGET) [httpget] (367 bytes read)
[Nov 12 12:01:18 2003] SCAN -> Scan 208.192.153.64 [httpget] completed
[Nov 12 12:01:18 2003] SCAN -> All tests on
[email protected] complete.
[Nov 12 12:01:18 2003] SCAN -> Adding 208.192.153.64 to negative cache
 
in this log u can see that bopm has found this ip but it is not klining
the user
 
 
 
 
/*
 
BOPM sample configuration
 
*/
 
options {
      pidfile = "/home/LifE/bopm/bopm.pid";
      negcache = 3600;
      dns_fdlimit = 64;
#     scanlog = "/home/LifE/bopm/scan.log";
};
 
 
IRC {
      vhost = "127.0.0.1"; // I changed the ip of my network
      nick = "BOPM";
      realname = "Mone Pore Tomay";
      username = "RubyRoy";
      server = "something.myirc.net"; // I changed the server name of my
network
      #password = "secret";
      port = 6667;
      nickserv = "privmsg nickserv :identify BopMPass";
      oper = "bopm BopMPass";
      mode = "+rDShgwlcLkFqpKbnAaNCzWHtZv-G";
      away = "Sleeping Beauty Away";
      channel {
         name = "#Opers";
         #key = "somekey";
         invite = "privmsg chanserv :invite #Opers";
      };
      connregex = "\\*\\*\\* Notice -- Client connecting: ([^ ]+)
\\(([^@]+)@([^\\)]+)\\) \\[([0-9\\.]+)\\].*";
      kline = "GLINE *@%h :Open Proxy found on your host. Please visit
www.blitzed.org/proxy?ip=%i for more information.";
      #kline = "GLINE *@%h :Open Proxy found on your host. Please visit
www.blitzed.org/opm/index2.phtml?ip=%i for more information.";
 
      /* A GLINE example for IRCu: */
      #kline = "GLINE +*@%i 1800 :Open proxy found on your host. Please
visit www.blitzed.org/proxy?ip=%i for more information.";
      perform = "PROTOCTL HCN";
 
};
 
 
OPM {
      blacklist {
            name = "opm.blitzed.org";
            type = "A record bitmask";
            alert = yes;
            ban_unknown = yes;
            whitelist = yes; 
            reply {
                  1 = "WinGate";
                  2 = "Socks";
                  4 = "HTTP";
                  8 = "Router";
                  16 = "HTTP POST";
                  };
         kline = "GLINE *@%h :Open proxy found on your host, please
visit www.blitzed.org/proxy?ip=%i";
            };
      blacklist {
            name = "dynablock.easynet.nl";
            whitelist = yes;
            alert = yes;
            ban_unknown = yes;
            whitelist = yes;
            type = "A record reply";
            reply {
                  2 = "Dynamic address";
                  };
            kline = "GLINE *@%h :Open proxy found on your host, please
visit www.blitzed.org/proxy?ip=%i";
            };
 
      blacklist {
            name = "dnsbl.njabl.org";
            whitelist = yes;
            alert = yes;
            ban_unknown = yes;
            whitelist = yes;
            type = "A record reply";
            reply {
                  9 = "Open proxy";
                  };
            kline = "GLINE *@%h :Open proxy found on your host, please
visit www.njabl.org/cgi-bin/lookup.cgi?query=%i";
            };
 
      dnsbl_from = "[email protected]";
 
      dnsbl_to = "[email protected]";
      sendmail = "/usr/sbin/sendmail";
};
 
 
 
scanner {
 
      name="BOPM";
 
      protocol = HTTP:80;
      protocol = HTTP:8080;
      protocol = HTTP:3128;
      protocol = HTTP:6588;
 
      protocol = SOCKS4:1080;
      protocol = SOCKS5:1080;
      protocol = SOCKS4:81;
      protocol = SOCKS5:81;
      protocol = ROUTER:81;
      protocol = WINGATE:81;
      protocol = HTTPPOST:81;
      protocol = ROUTER:23;
      protocol = HTTPGET:80;
      protocol = HTTPGET:3128;
      protocol = HTTPGET:8080;
      protocol = WINGATE:23;
      protocol = HTTPPOST:80;
      protocol = HTTP:80;
      protocol = HTTP:8080;
      protocol = HTTP:3128;
      protocol = HTTP:6588;
      protocol = HTTP:22799;
      protocol = HTTP:22788;
      protocol = HTTP:6565;
      protocol = HTTP:8000;
      protocol = HTTP:1080;
      protocol = HTTP:8082;
      protocol = HTTP:2280;
      protocol = HTTP:8081;
      protocol = HTTP:9877;
      protocol = HTTP:2282;
      protocol = HTTP:80;
      protocol = HTTP:6588;
      protocol = HTTP:1080;
      protocol = HTTP:8080;
      protocol = HTTP:22788;
      protocol = HTTP:22799;
      protocol = HTTP:8860;
      protocol = HTTP:8833;
      protocol = HTTP:8281;
      protocol = HTTP:8000;
      protocol = HTTP:8001;
      protocol = HTTP:8002;
      protocol = HTTP:81;
      protocol = SOCKS4:1080;
      protocol = SOCKS5:1080;
      protocol = SOCKS4:5124; 
      protocol = SOCKS5:5124;
      protocol = SOCKS4:1813;
      protocol = SOCKS5:1813;
      protocol = SOCKS4:5262;
      protocol = SOCKS5:5262;
      protocol = SOCKS4:43736;
      protocol = SOCKS4:1813;
      protocol = SOCKS5:1813;
      protocol = SOCKS4:3086;
      protocol = SOCKS5:3086;
      protocol = SOCKS4:7441;
      protocol = SOCKS5:7441;
      protocol = SOCKS4:1080;
      protocol = SOCKS5:1080;
      protocol = SOCKS4:5104;
      protocol = SOCKS5:5104;
      protocol = SOCKS4:6225;
      protocol = SOCKS5:6225;
      protocol = SOCKS4:1976;
      protocol = SOCKS5:1976;
      protocol = SOCKS4:1075;
      protocol = SOCKS5:1075;
      protocol = SOCKS4:3086;
      protocol = SOCKS5:3086;
      protocol = SOCKS4:43736;
      protocol = SOCKS5:43736;
      protocol = SOCKS4:29938;
      protocol = SOCKS5:29938;
      protocol = SOCKS4:1976;
      protocol = SOCKS5:1976;
      protocol = SOCKS4:29938;
      protocol = SOCKS5:29938;
      protocol = SOCKS4:22788;
      protocol = SOCKS5:22788;
      protocol = SOCKS4:22799;
      protocol = SOCKS5:22799;
      
      vhost = "127.0.0.1"; // I changed the ip of my network
 
      fd = 512;
 
      max_read = 4096;
 
      timeout = 30;
 
      target_ip     = "127.0.0.1"; // I changed the ip of my network
 
      target_port   = 6667;
      target_url    = "http://www.jubair.net/bopmcheck.txt";
      target_string = "4droovDemov-ot@OkTilduntibAvVocneehaidor";
      target_string = "-dynamic.bdirc.net- *** Looking up your
hostname...";
 
     #target_string = ":server.yournetwork.org NOTICE AUTH :*** Looking
up your hostname...";
 
      target_string = "ERROR :Trying to reconnect too fast.";
      target_string = "ERROR :Your host is trying to (re)connect too
fast -- throttled.";
};
 
scanner {
      name = "extended";
 
      protocol = HTTP:81;
      protocol = HTTP:8000;
      protocol = HTTP:8001;
      protocol = HTTP:8081;
 
      protocol = HTTPPOST:81;
      protocol = HTTPPOST:6588;
      protocol = HTTPPOST:4480;
      protocol = HTTPPOST:8000;
      protocol = HTTPPOST:8001;
      protocol = HTTPPOST:8080;
      protocol = HTTPPOST:8081;
 
      /*
       * IRCnet have seen many socks5 on these ports, more than on the
       * standard ports even.
       */
      protocol = SOCKS4:4914;
      protocol = SOCKS4:6826;
      protocol = SOCKS4:7198;
      protocol = SOCKS4:7366;
      protocol = SOCKS4:9036;
 
      protocol = SOCKS5:4438;
      protocol = SOCKS5:5104;
      protocol = SOCKS5:5113;
      protocol = SOCKS5:5262;
      protocol = SOCKS5:5634;
      protocol = SOCKS5:6552;
      protocol = SOCKS5:6561;
      protocol = SOCKS5:7464;
      protocol = SOCKS5:7810;
      protocol = SOCKS5:8130;
      protocol = SOCKS5:8148;
      protocol = SOCKS5:8520;
      protocol = SOCKS5:8814;
      protocol = SOCKS5:9100;
      protocol = SOCKS5:9186;
      protocol = SOCKS5:9447;
      protocol = SOCKS5:9578;
 
      vhost = "127.0.0.1"; // I changed the ip of my network
 
      fd = 512;
 
      max_read = 4096;
 
      timeout = 30;
 
      target_ip     = "127.0.0.1"; // I changed the ip of my network
 
      target_port   = 6667;
      target_url    = "http://www.jubair.net/bopmcheck.txt";
      target_string = "4droovDemov-ot@OkTilduntibAvVocneehaidor";
      target_string = "-dynamic.bdirc.net- *** Looking up your
hostname...";
 
     #target_string = ":server.yournetwork.org NOTICE AUTH :*** Looking
up your hostname...";
 
      target_string = "ERROR :Trying to reconnect too fast.";
      target_string = "ERROR :Your host is trying to (re)connect too
fast -- throttled.";
 
};
 
 
 
user {
   mask = "*!*@*";
   scanner = "httpget";
};
scanner {
   name = "httpget";
 
   protocol = HTTPGET:80;
   protocol = HTTPGET:3128;
   protocol = HTTPGET:8080;
      vhost = "127.0.0.1"; // I changed the ip of my network
 
      fd = 512;
 
      max_read = 4096;
 
      timeout = 30;
 
      target_ip     = "127.0.0.1"; // I changed the ip of my network
 
      target_port   = 6667;
      target_url    = "http://www.jubair.net/bopmcheck.txt";
      target_string = "4droovDemov-ot@OkTilduntibAvVocneehaidor";
      target_string = "-something.myirc.net- *** Looking up your
hostname...";
 
     #target_string = ":server.yournetwork.org NOTICE AUTH :*** Looking
up your hostname...";
 
      target_string = "ERROR :Trying to reconnect too fast.";
      target_string = "ERROR :Your host is trying to (re)connect too
fast -- throttled.";
 
      target_url    = "http://www.something.net/bopmcheck.txt";
      target_string = "4droovDemov-ot@OkTilduntibAvVocneehaidor";
};
user {
 
      mask = "*!*@*";
      scanner = "BOPM";
};
 
user {
 
      mask = "*!*@*";
      scanner = "extended";
};
user {
      mask = "*!*@*";
      mask = "*!~*@*";
      mask = "*!squid@*";
      mask = "*!nobody@*";
      mask = "*!www-data@*";
      mask = "*!cache@*";
      mask = "*!CacheFlowS@*";
      mask = "*!*@*www*";
      mask = "*!*@*proxy*";
      mask = "*!*@*cache*";
 
      scanner = "BOPM";
      };
 
 
exempt {
      mask = "*!*@81.17.57.99";
};