Re: Help: BOPM detection of different proxy ports?
Okan Karasoy <[email protected]>
| Newsgroups | gmane.network.irc.bopm |
|---|---|
| Message-ID | <[email protected]> |
In order for BOPM to check the ports in this list, could you tell me in more detail what I am to add to the bopm.conf? Thanks for your reply and your help Jan > On Fri, 12 Mar 2004, Okan Karasoy <[email protected]> wrote: > > > Recently there have been a lot of attacks on my server. Some of these are Trojan bots, and some that are controlled remotely, and there are others that enter using different proxy ports. We are using the newest version of BOPM on our server, but it doesn't detect and kline the different proxy ports. Below there are a few examples of the proxy ports. I may have made a conf error. I got these from a proxy website but I'm sure that some active proxy ports are not controlled by the BOPM. > > > > 15859 > > 9240 > > 1978 > > 32917 > > 2326 > > > > Is there any way to make the BOPM check the different proxy ports? Or is there anything that I could add to the conf in order for it to check these different proxy ports? I would like it if you could give me some examples. > > Because of the increased number of attacks we're now looking at solutions through here. We've been using BOPM for a long time and we are really happy with the job it does. > > The list of currently used proxy ports maintained by Richard from Zonnet > is available at http://dsbl.zonnet.nl/ports.txt - it's formatted for use > by the proxycheck program but can easily be converted into a format > suitable for adding to the bopm config file. > > s4=SOCKS4 > s5=SOCKS5 > hc=HTTP > ho=HTTPPOST > > The list is updated quite often. > > Regards > Jan