Hi druino,

The configuration Epic gave you is correct, except for one thing: I highly recommend that you set bans on all records if possible, or at least on the following records at a minimum:

Code
<dnsbl name="ircbl"
       type="record"
       domain="rbl.ircbl.org"
       action="GLINE"
       reason="[K-banned:[exp/comp] Compromised host on this IP. See http://ircbl.org/lookup?ip=%ip%&network=<your_network_name> for more information."
       duration="1d"
       records="2,6,10,11,13,14,16,17,18,19,20,21,22,23,24,30,,31,32,42"
>



My configuration for a bopm bot would look like this:

Code
OPM {
        blacklist {
                name = "rbl.ircbl.org";
                type = "A record reply";
                reply {
                        2 = "Open proxy (2)";
                        6 = "Mail or NS server (6)";
                        10 = "D regex pattern (10)";
                        11 = "Drone / compromised (11)";
                        13 = "Join/part flood (13)";
                        14 = "Drone / compromised 2 (14)";
                        16 = "Spam bot (16)";
                        17 = "Drone (17)";
                        18 = "Drone 2 (18)";
                        19 = "Web abuse (19)";
                        20 = "Drone/flood bot (20)";
                        21 = "Compromised host (21)";
                        22 = "Open Proxy (22)";
                        23 = "Open Proxy (23)";
                        24 = "Mass advertising (24)";
                        30 = "Drone (30)";
                        31 = "Drone 2 (31)";
                        32 = "Open proxy (32)";
                        42 = "Open proxy (42)";
                };
                ban_unknown = yes;
                kline = "KLINE 180 *@%i :Compromised host on this IP. See https://ircbl.org/lookup?ip=%i&network=<your_network_name> for more information.";
        };
};


Depending on the ircd version you use, you may have adjustments to make on the kline command for the bopm config above. On Undernet ircu, it would look like:
Code
kline = "GLINE +*@%i 180 :Compromised host on this IP. See https://ircbl.org/lookup?ip=%i&network=<your_network_name> for more information.";


If you have other questions, let me know.



Hidden
Undernet and DALnet admin
Quakenet irc operator
ircbl.org owner