BOPM DNSBL's

Cobi · Lurker Joined: 30 Dec 2003 Posts: 121 Location: IRC

Ok, here are a few useful dnsbls for BOPM:

Blitzed's DNSBL

EqualSlashed_Brian · Lurker Joined: 29 Aug 2004 Posts: 222 Location: IRC

I have tested many DNSBLs with BOPM. I do not recommend using them, other than the TOR DNSBL and the Blizted DNSBL. The reason for this is because they are not really made for IRC, and they have lots of false positives. My IRC network has European users and South American users and when I tested out Sorbs and AHBL there dynamic IP was in the database.

Just sharing some knowledge so someone else doesn't make the same mistake. Please realize that most DNSBLs are for blocking mail from SMTP SERVERS.

Cobi · Lurker Joined: 30 Dec 2003 Posts: 121 Location: IRC

make sure you only use the correct sections in the other dnsbl's (like the "Open Proxy" sections..
like in the NJABL you only test for the return of 127.0.0.9 (Open Proxy)
in the no-more-funn dnsbl you only test for the return of 127.0.0.10 (Open Proxy)
in SORBS you only test for 127.0.0.2 127.0.0.3 and 127.0.0.4 (Open HTTP Proxy, Open Socks Proxy, and Other Open Proxy, respectivly)

EqualSlashed_Brian · Lurker Joined: 29 Aug 2004 Posts: 222 Location: IRC

I know how a DNSBL works, and I configured it properly. Those DNSBLs are a bad choice because they are not maintained for IRC. They are maintained for blocking spam e-mail.

Robert-E-Lee · Posted: Feb 10, 2005 5:29pm Post subject:

opm.blitzed.org and the njabl one are hardly bad choices, as those are the two main ones that bopm suggests you use....the others are PERSONAL choice.
something that's maintained for spam email can equally be an indicator of suitability for use as a dnsbl for something else, as it's indicative of an insecure machine which could easily be turned into a proxy...geddit brian?

nenolod · Idler Joined: 23 Jan 2004 Posts: 334 Location: A box!

NodeRebellion DroneBL (beta):

Cobi · Lurker Joined: 30 Dec 2003 Posts: 121 Location: IRC

Spam Black List

cythrawll · none Joined: 24 Apr 2005 Posts: 2

cobi, im getting a server error on the last one you posted

Name141 · Guest

anyone know how to add list.dsbl.org ?

Mr_Smoke · Guest

blacklist {
name = "list.dsbl.org";
type = "A record reply";
reply {
2 = "Open Proxy";
};
ban_unknown = no;
kline = "KLINE *@%h 86400 :Open proxy found on your host, please visit dsbl.org/listing?%i";
};

Ashen · Idler Joined: 05 Jan 2004 Posts: 285

Something like this has kept almost all bad users off our network for awhile now.

I've been waiting for OPSB to add STABLE support for multiple DNSBLs for a long time.... but then I figured really, the solution was to replace OPSB with BOPM, at least until OPSB can catch up.

DeadNotBuried · none Joined: 01 Mar 2004 Posts: 43

black lists have been taken out of v3 opsb, and blsb now handles them, along with multiple lists, added at run time via private message to the pseudo client, svn version seems to have the bugs fixed Smile

still some more things to add to it though.

braindigitalis · Idler Joined: 22 Sep 2003 Posts: 443 Location: IRC

Do not use the open proxy sections of spamhaus or sorbs!

There are many reasons for this:

For once i agree with brian - these lists are designed for blocking EMAIL transport. They are not maintained at a high enough rate for use on irc - e.g. if one of your users is listed in spamhaus, chances are they will NEVER be able to delist themselves, no matter how legitimate their claim, and they will be waiting weeks to be delisted IF they are successful.

ONLY USE BLACKLISTS WHICH (A) ALLOW AUTOMATED DELISTING OF OPEN PROXIES AND (B) CLAIM TO DELIST WITHIN A SHORT PERIOD OF TIME LIKE 24 HOURS.

If you do NOT follow this advice, you will be flooded with complaints from irate users "im listed on spamhaus and they wont remove me" (NOTE: Spamhaus lists *entire isp netblocks* just because they found *one* proxy, to punish the users of the isp!!!)

nenolod · Idler Joined: 23 Jan 2004 Posts: 334 Location: A box!

In other news, I've been convinced to reopen DroneBL. I'll have details on that someday soon.

Cobi · Lurker Joined: 30 Dec 2003 Posts: 121 Location: IRC