IRCzForum d'aide IRC - IRCz.fr

Aide pour le développement du monde de l'IRC

Vous n'êtes pas identifié(e).

Menus

Top posteurs

Statistiques

Partenaires

  • eXolia Hosting
  • Eggdrop.fr

Pages : 1

#1 17/05/2013 13:47:05

sianur
IRCzien en herbe
Lieu : dordogne
Inscription : 17/05/2013
Messages : 79
Site Web

Echange de sécurités pour serveurs irc

Bonjour à tous
sur cette discutions je vous propose d’échanger nos systèmes de sécurités afin de sécurisé au maximum nos serveurs irc

voici mes systèmes de sécurités principaux :

- bopm (antiproxy)
- spamfilter (unrealircd)
- Lea

avant de poster j'ai tester plusieurs attaques de clones sur mon serveur dont une énorme et je vous conseil de mettre deux bopm ou d'ajouter des blacklist au module dnslb de unreal et dans neostats se qui permet de repartir le travaille en cas d'attaque. Il me semple qua anope à un module comme ça aussi.


Bopm.conf:

Code: conf
 
 
 
#############################
##   _____                 ##
##  | __  |___ ___ _____   ##
##  | __ -| . | . |     |  ##
##  |_____|___|  _|_|_|_|  ##
##            |_|  3.1.2   ##
##                         ##
#############################
 
options {
	pidfile = "/home/votrelogin/bopm/bopm.pid";
	dns_fdlimit = 64;
};
 
IRC {
	vhost = "";
nick = "Pseudo_du_bot";
	username = "Bot";
	realname = "Proxy Services";
	server = "ip_de_votre_serveur";
	port = 6667;
	password = "mot_de_passe_pour_la_connexion";
	oper = "login_et_pass_ircop";
	nickserv = "privmsg NickServ :identify mot_de_passe_si_enregistré";
	mode = "+cH-h";
	away = "Proxy Service";
	channel {
		name = "#Services";
#		key = "password";
		invite = "invite pseudo_du_bot #Services";
	};
	connregex = "\\*\\*\\* Notice -- Client connecting: ([^ ]+) \\(([^@]+)@([^\\)]+)\\) \\[([0-9\\.]+)\\].*";
	kline = "zline *@%h 3600 :Proxy Insécurisé";
	perform = "PROTOCTL HCN";
};
 
OPM {
 
        /* DroneBL - http://dronebl.org */
	blacklist {
	   /* The DNS name of the blacklist */
	   name = "dnsbl.dronebl.org";
 
	   /*
	    * There are only two values that are valid for this
	    * "A record bitmask" and "A record reply"
	    * These options affect how the values specified to reply
	    * below will be interpreted, a bitmask is where the reply
	    * values are 2^n and more than one is added up, a reply is
	    * simply where the last octet of the IP is that number.
	    * If you are not sure then the values set for dnsbl.dronebl.org
	    * will work without any changes.
	    */
	   type = "A record reply";
 
	   /* Kline types not listed in the reply list below.
            *
	    * For DNSBLs that are not IRC specific and you just wish to kline
            * certain types this can be disabled.
	    */
	   ban_unknown = yes;
 
	   /* The actual values returned by the dnsbl.dronebl.org blacklist
	    * As documented at http://www.dronebl.org/howtouse.do */
	   reply {
       	      2 = "Sample"; 
              3 = "IRC Drone"; 
              4 = "Tor"; 
              5 = "Bottler"; 
              6 = "Unknown spambot or drone";
              7 = "DDOS Drone"; 
              8 = "SOCKS Proxy"; 
              9 = "HTTP Proxy"; 
              10 = "ProxyChain"; 
              255 = "Unknown"; 
	   };
 
	   /* The kline message sent for this specific blacklist, remember to put
	    * the removal method in this.
	    */
	   kline = "ZLINE *@%i 1d :Proxy interdit";
	};
        /* ircbl.ahbl.org - see http://ahbl.org/docs/ircbl
         * http://oldwww.temp.ahbl.org/docs/ircbl.php */
        blacklist {
           name = "ircbl.ahbl.org";
           type = "A record reply";
           ban_unknown = no;
           reply {
              2 = "Open proxy";
           };
           kline = "ZLINE *@%i 1d :Proxy interdit";
        };
 
         /* tor.dnsbl.sectoor.de - http://www.sectoor.de/tor.php */
        blacklist {
           name = "tor.dnsbl.sectoor.de";
           type = "A record reply";
           reply {
              1 = "Tor exit server";
           };
           ban_unknown = no;
           kline = "ZLINE *@%i 1d :Proxy interdit";
        };
 
         /* rbl.efnet.org - http://rbl.efnet.org/ */
 
 
	 blacklist {
           name = "rbl.efnet.org";
           type = "A record reply";
           reply {
              1 = "Open proxy";
              2 = "Trojan spreader";
              3 = "Trojan infected client";
              4 = "TOR exit server";
              5 = "Drones / Flooding";
           };
           ban_unknown = yes;
         kline = "ZLINE *@%i 1d :Proxy interdit";
        };
 
 
	/* example: NJABL - please read http://www.njabl.org/use.html before
	 * uncommenting */
	 blacklist {
	    name = "dnsbl.njabl.org";
	    type = "A record reply";
	    reply {
	       9 = "Open proxy";
	    };
	    ban_unknown = no;
		   kline = "ZLINE *@%i 1d :Proxy interdit";
	};
 
	/*
	 * You can report the insecure proxies you find to a DNSBL also!
	 * The remaining directives in this section are only needed if you
	 * intend to do this.  Reports are sent by email, one email per IP
	 * address.  The format does support multiple addresses in one email,
	 * but we don't know of any servers that are detecting enough insecure
	 * proxies for this to be really necessary.
	 */
 
	/*
	 * Email address to send reports FROM.  If you intend to send reports,
	 * please pick an email address that we can actually send mail to
	 * should we ever need to contact you.
	 */
	dnsbl_from = "mybopm@myserver.org";
 
	/*
	 * Email address to send reports TO.
         * For example DroneBL:
	 */
	dnsbl_to = "bopm-report@dronebl.org";
 
	/*
	 * Full path to your sendmail binary.  Even if your system does not
	 * use sendmail, it probably does have a binary called "sendmail"
	 * present in /usr/sbin or /usr/lib.  If you don't set this, no
	 * proxies will be reported.
	 */
	sendmail = "/usr/sbin/sendmail";
blacklist {
 name = "rbl.efnetrbl.org";
 type = "A record reply";
 reply {
 1 = "Open proxy";
 2 = "spamtrap666";
 3 = "spamtrap50";
 4 = "TOR exit server";
 5 = "Drones / Flooding";
 };
 ban_unknown = no;
kline = "ZLINE *@%i 1d :Proxy interdit";
};
 
 
blacklist {
 name = "dnsbl.proxybl.org";
 type = "A record reply";
 reply {
 2 = "Open proxy";
 };
 ban_unknown = no;
kline = "ZLINE *@%i 1d :Proxy interdit";
};
 
 
};
 
 
 
/*
 * The short explanation:
 *
 * This is where you define what ports/protocols to check for.  You can have
 * multiple scanner blocks and then choose which users will get scanned by
 * which scanners further down.
 *
 * The long explanation:
 *
 * Scanner defines a virtual scanner.  For each user being scanned, a scanner
 * will use a file descriptor (and subsequent connection) for each protocol.
 * Once connecting it will negotiate the proxy to connect to
 * target_ip:target_port (target_ip MUST be an IP).
 *
 * Once connected, any data passed through the proxy will be checked to see if
 * target_string is contained within that data.  If it is the proxy is
 * considered open. If the connection is closed at any point before
 * target_string is matched, or if at least max_read bytes are read from the
 * connection, the negotiation is considered failed.
 */
 
 
 
 
 
scanner {
	name="default";
	protocol = ROUTER:23;
	protocol = WINGATE:23;
	protocol = HTTP:80;
	protocol = HTTP:81;
	protocol = HTTP:3128;
	protocol = HTTP:6588;
	protocol = HTTP:8080;
	protocol = HTTP:8081;
	protocol = HTTPPOST:80;
	protocol = HTTPPOST:81;
	protocol = HTTPPOST:3380;
	protocol = HTTPPOST:4480;
	protocol = HTTPPOST:6588;
	protocol = HTTPPOST:8128;
	protocol = HTTPPOST:8080;
	protocol = HTTPPOST:8081;
	protocol = SOCKS4:1080;
	protocol = SOCKS4:1081;
	protocol = SOCKS4:1180;
	protocol = SOCKS4:1182;
	protocol = SOCKS4:1978;
	protocol = SOCKS4:2280;
	protocol = SOCKS4:9578;
	protocol = SOCKS5:1080;
	protocol = SOCKS5:1081;
	protocol = SOCKS5:1180;
	protocol = SOCKS5:1182;
	protocol = SOCKS5:1978;
	protocol = SOCKS5:2280;
	protocol = SOCKS5:9578;
	fd = 512;
	max_read = 4096;
	timeout = 30;
	target_ip     = "127.0.0.1";
	target_port   = 6667;
	target_string = "*** Looking up your hostname...";
};
 
scanner {
	name = "extended";
	protocol = ROUTER:23;
	protocol = WINGATE:23;
	protocol = HTTP:80;
	protocol = HTTP:8080;
	protocol = HTTP:3128;
	protocol = HTTP:6588;
	protocol = HTTP:81;
	protocol = HTTP:8001;
	protocol = HTTP:8081;
	protocol = HTTP:1080;
	protocol = HTTP:5222;
	protocol = HTTP:2718;
	protocol = HTTP:1813;
	protocol = HTTP:8879;
	protocol = HTTP:8263;
	protocol = HTTP:3128;
	protocol = HTTP:2280;
	protocol = HTTPPOST:80;
	protocol = HTTPPOST:81;
	protocol = HTTPPOST:6588;
	protocol = HTTPPOST:4480;
	protocol = HTTPPOST:3380;
	protocol = HTTPPOST:8128;
	protocol = HTTPPOST:8001;
	protocol = HTTPPOST:8080;
	protocol = HTTPPOST:8081;
	protocol = HTTPPOST:1080;
	protocol = HTTPPOST:2718;
	protocol = HTTPPOST:5222;
	protocol = HTTPPOST:1813;
	protocol = HTTPPOST:8879;
	protocol = HTTPPOST:8263;
	protocol = HTTPPOST:3128;
	protocol = HTTPPOST:2280;
	protocol = SOCKS4:1080;
	protocol = SOCKS4:2280;
	protocol = SOCKS4:2718;
	protocol = SOCKS4:5222;
	protocol = SOCKS4:3128;
	protocol = SOCKS4:4914;
	protocol = SOCKS4:6826;
	protocol = SOCKS4:7198;
	protocol = SOCKS4:7366;
	protocol = SOCKS4:9036;
	protocol = SOCKS4:3380;
	protocol = SOCKS4:8128;
	protocol = SOCKS4:6588;
	protocol = SOCKS4:8888;
	protocol = SOCKS4:1182;
	protocol = SOCKS4:8082;
	protocol = SOCKS4:8088;
	protocol = SOCKS4:8879;
	protocol = SOCKS4:8263;
	protocol = SOCKS4:1180;
	protocol = SOCKS4:2280;
	protocol = SOCKS4:9180;
	protocol = SOCKS4:5089;
	protocol = SOCKS4:3127;
	protocol = SOCKS4:1978;
	protocol = SOCKS4:1813;
	protocol = SOCKS4:8616;
	protocol = SOCKS4:7046;
	protocol = SOCKS4:31711;
	protocol = SOCKS4:12217;
	protocol = SOCKS4:14784;
	protocol = SOCKS4:52413;
	protocol = SOCKS4:14784;
	protocol = SOCKS4:4474;
	protocol = SOCKS4:5104;
	protocol = SOCKS4:49957;
	protocol = SOCKS4:3128;
	protocol = SOCKS5:1080;
	protocol = SOCKS5:1080;
	protocol = SOCKS5:2718;
	protocol = SOCKS5:5222;
	protocol = SOCKS5:1813;
	protocol = SOCKS5:2280;
	protocol = SOCKS5:3128;
	protocol = SOCKS5:8879;
	protocol = SOCKS5:8263;
	protocol = SOCKS5:3380;
	protocol = SOCKS5:4438;
	protocol = SOCKS5:5104;
	protocol = SOCKS5:5113;
	protocol = SOCKS5:5262;
	protocol = SOCKS5:5634;
	protocol = SOCKS5:6552;
	protocol = SOCKS5:6561;
	protocol = SOCKS5:7464;
	protocol = SOCKS5:7810;
	protocol = SOCKS5:8130;
	protocol = SOCKS5:8148;
	protocol = SOCKS5:8520;
	protocol = SOCKS5:8814;
	protocol = SOCKS5:9186;
	protocol = SOCKS5:9447;
	protocol = SOCKS5:9578;
	fd = 400;
};
 
user {
	mask = "*!*@*";
	scanner = "default";
};
 
user {
	mask = "*!~*@*";
	mask = "*!squid@*";
	mask = "*!nobody@*";
	mask = "*!www-data@*";
	mask = "*!cache@*";
	scanner = "extended";
};
 
exempt {
	mask = "*!*@127.0.0.1";
};
 
 
 
 

voila pour bopm je répète en cas de grosse attaque il risque de planter je vous conseil donc de repartir les blacklists avec plusieurs bopm ou autre services


spamfilter

copier et coller sur votre serveur en étant ircop ces commande vont ajouter des expressions regulieres a spamfilter qui bloque une grande partie des logiciels de kiddies comme clonesxs, innondation irc, magic etc.......


Code: 
/spamfilter add u zline 86400 proxy_interdit ^[[:alnum:]]{100}![[:lower:]]{2}@[[:print:]]{1,100}:[[:lower:]]{2}$
/spamfilter add u zline 86400 proxy_interdit ^[[:print:]]{1,100}!~[[:lower:]]{2}@[[:print:]]{1,100}:[[:lower:]]{2}$
/spamfilter add u zline 86400 proxy_interdit ^[[:print:]]{1,100}![[:lower:]]{2}@[[:print:]]{1,100}:[[:lower:]]{2}$
/spamfilter add u zline 86400 proxy_interdit ^[[:alpha:]]{1,25}![[:print:]]{1,25}@[[:print:]]{1,100}:[[:alpha:]]{30,60}$
/spamfilter add u zline 86400 proxy_interdit ^[[:alpha:]]{1,25}!~[[:print:]]{1,25}@[[:print:]]{1,100}:[[:alpha:]]{30,60}$
/spamfilter add u zline 86400 proxy_interdit ^[[:alnum:]]{1,100}![[:lower:]]{2}@[[:print:]]{1,100}:[[:lower:]]{2}$
/spamfilter add u zline 86400 proxy_interdit ^[[:print:]]{1,30}[[:punct:]]{1}[[:print:]]{3,4}[[:punct:]]{1}![[:print:]]{1,30}@[[:print:]]{1,100}:[[:lower:]]{5,7}}$
/spamfilter add u zline 86400 proxy_interdit ^[[:print:]]{1,30}[[:punct:]]{1}[[:print:]]{3,4}[[:punct:]]{1}!~[[:print:]]{1,30}@[[:print:]]{1,100}:[[:lower:]]{5,7}}$
/spamfilter add u zline 86400 proxy_interdit ^[[:alnum:]]{1,100}!~[[:lower:]]{2}@[[:print:]]{1,100}:[[:lower:]]{2}$
/spamfilter add u zline 86400 proxy_interdit ^[a-z]{6}!<censored>@[^:]+:<censored> PLeaSe$
/spamfilter add u zline 86400 proxy_interdit ^[[:alpha:]]{7,16}![[:alpha:]]{6}@[[:print:]]{1,100}:[[:alpha:]]{4,10}$
/spamfilter add u zline 86400 proxy_interdit ^[a-z]{2}[0-9][A-Z][a-z][A-Z][0-9]{4}[a-z][0-9][a-z][0-9]![a-z]{2}[0-9][A-Z][a-z][A-Z][0-9]{2}@[^:]+:[a-z]{2}[0-9][A-Z][a-z][A-Z][0-9]{2}$
/spamfilter add u zline 86400 proxy_interdit ^[a-z][A-Z][0-9][a-z]{2}[0-9][A-Z][0-9]{2}![a-zA-Z0-9]+@[^:]+:[-a-z`A-Z]+$
/spamfilter add u zline 86400 proxy_interdit ^[a-z][0-9]{8}!([a-z]{2})+@[^:]+:\1$
/spamfilter add u zline 86400 proxy_interdit ^s[0-9]{8}!([a-z]{8})+@[^:]+:\1$
/spamfilter add u zline 86400 proxy_interdit ^[a-z][0-9A-Za-z]{6}!([a-z]{5})@[^:]+:\1$
/spamfilter add u zline 86400 proxy_interdit ^[a-z][0-9A-Za-z]{8}!([a-z]{5})@[^:]+:\1$
/spamfilter add u zline 86400 proxy_interdit ^[a-z]{7}!([a-z]{5})@[^:]+:\1$
/spamfilter add u zline 86400 proxy_interdit ^[a-z]{9}!([a-z]{5})@[^:]+:\1$
/spamfilter add u zline 86400 proxy_interdit ^([a-z]{5})[0-9A-Za-z]{2}!\1@[^:]+:\1$
/spamfilter add u zline 86400 proxy_interdit ^([a-z]{5})[0-9A-Za-z]{4}!\1@[^:]+:\1$
/spamfilter add u zline 86400 proxy_interdit ^[a-z][0-9A-Za-z]([a-z]{5})!\1@[^:]+:\1$
/spamfilter add u zline 86400 proxy_interdit ^[a-z][0-9A-Za-z]{3}([a-z]{5})!\1@[^:]+:\1$
/spamfilter add u zline 86400 proxy_interdit ^[a-z]{6}!BiTCH@[^:]+:BiTCH PLeaSe$
/spamfilter add u zline 86400 proxy_interdit ^[a-z]{5}[0-9]{1,3}![a-z]{2}@[^:]+:[a-z]{2}$
/spamfilter add u zline 86400 proxy_interdit ^lol!gg@[^:]+:TraCiDTrax$
/spamfilter add u zline 86400 proxy_interdit ^smurfy[0-9]{1,4}!smurfy@[^:]+:[a-z]{6}$
/spamfilter add u zline 86400 proxy_interdit ^!packet ([0-9]{1,3}\.){3}[0-9]{1,3} [0-9]{1,15}
/spamfilter add u zline 86400 proxy_interdit ^!icqpagebomb ([0-9]{1,15} ){2}.+
/spamfilter add u zline 86400 proxy_interdit [0-9]{1,15} ([0-9]{1,3}\.){3}[0-9]{1,3} [0-9]{1,5}$
/spamfilter add u zline 86400 proxy_interdit ([0-9]{1,3}\.){3}[0-9]{1,3} [0-9]{1,5} [0-9]{1,5}$
/spamfilter add u zline 86400 proxy_interdit ^.u(dp)? ([0-9]{1,3}\.){3}[0-9]{1,3} [0-9]{1,15} [0-9]{1,15} [0-9]{1,15}( [0-9])*$
/spamfilter add u zline 86400 proxy_interdit ^.syn ((([0-9]{1,3}\.){3}[0-9]{1,3})|([a-zA-Z0-9_-]+\.[a-zA-Z0-9_-]+\.[a-zA-Z0-9_.-]+)) [0-9]{1,5} [0-9]{1,15} [0-9]{1,15}
/spamfilter add u zline 86400 proxy_interdit ^[[:lower:]]{1}[[:digit:]]{5,7}[[:lower:]]{1}!~[[:lower:]]{5,10}@[[:print:]]{1,100}:[[:lower:]]{4,10}$
/spamfilter add u zline 86400 proxy_interdit ^[[:lower:]]{1}[[:digit:]]{5,7}[[:lower:]]{1}![[:lower:]]{5,10}@[[:print:]]{1,100}:[[:lower:]]{4,10}$
/spamfilter add u zline 86400 proxy_interdit ^[[:alpha:]]{1,29}[[:digit:]]{3,4}![[:alnum:]]{1,10}@[[:print:]]{1,100}:[[:lower:]]{5,7}$
/spamfilter add u zline 86400 proxy_interdit ^[[:alpha:]]{26,100}!~[[:lower:]]{9}@[[:print:]]{10,100}:[[:print:]]{0,100}$
/spamfilter add u zline 86400 proxy_interdit ^[[:alpha:]]{1,30}[[:digit:]]{2,4}!~[[:alpha:]]{1,30}@[[:print:]]{1,100}:[[:lower:]]{5,7}$
/spamfilter add u zline 86400 proxy_interdit ^[[:print:]]{1,30}[[:punct:]]{1}[[:print:]]{3,4}[[:punct:]]{1}![[:print:]]{1,30}@[[:print:]]{1,100}:[[:lower:]]{5,7}$
/spamfilter add u zline 86400 proxy_interdit ^[[:print:]]{1,30}[[:punct:]]{1}[[:print:]]{3,4}[[:punct:]]{1}!~[[:print:]]{1,30}@[[:print:]]{1,100}:[[:lower:]]{5,7}$
/spamfilter add u zline 86400 proxy_interdit ^[[:lower:]]{1}[[:punct:]]{1}[[:print:]]{3,4}[[:punct:]]{1}!~[[:print:]]{1,4}@[[:print:]]{1,100}:[[:lower:]]{5,7}$
/spamfilter add u zline 86400 proxy_interdit ^[[:alpha:]]{1,29}[[:digit:]]{3,4}!~[[:alnum:]]{1,10}@[[:print:]]{1,100}:[[:lower:]]{5,7}$
/spamfilter add u zline 86400 proxy_interdit ^[[:alpha:]]{26,100}![[:lower:]]{9}@[[:print:]]{10,100}:[[:print:]]{0,100}$
/spamfilter add u zline 86400 proxy_interdit ^[[:alpha:]]{1,30}[[:digit:]]{2,4}![[:alpha:]]{1,30}@[[:print:]]{1,100}:[[:lower:]]{5,7}$
/spamfilter add u zline 86400 proxy_interdit ^[[:lower:]]{1}[[:punct:]]{1}[[:print:]]{3,4}[[:punct:]]{1}![[:print:]]{1,4}@[[:print:]]{1,100}:[[:lower:]]{5,7}$

dans unrealircd.conf a vous de voir si vous ajouter ou pas suivant votre trafic j'ai donc pris les blacklists sur ircz smile


Code: conf
 
 
##########################################################################
#  Crée par NeO_DeStrucToR.  Copyright 2005 :: Tous droits résèrvés.     #
#                                                                        #
#               E-mail :  neo_destructor@ucool.org                       #
#                                                                        #
#      _   _   ____   ____   ____   _   _   ____   ____   _____          #
#     | | | | |  __| | __ | | __ | | | | | | __ | / ___| |__ __|         #
#     | | | | | |    ||  || ||  || | |_| | ||  || | \__    | |           #
#     | | | | | |    ||  || ||  || |  _  | ||  || \__  |   | |           #
#     | |_| | | |__  ||__|| ||__|| | | | | ||__||  __) |   | |           #
#     |_____| |____| |____| |____| |_| |_| |____| |____/   |_|           #
#                                                                        #
##########################################################################
       ##             A rajouté dans unrealircd.conf           ##
       ##               include black-list.conf;               ##
       ##########################################################
                       ##                      ##
                       ##    BLACKLIST.CONF    ##
                       ##                      ##
                       ##########################
 
ban user { 
mask *@*.ad;
reason "Extension Blacklisté : *@*.ad [Andorre]";
};
 
ban user {
mask *@*.ae;
reason "Extension Blacklisté : *@*.ae [Emirats Arabes Unis]";
};
 
ban user {
mask *@*.af;
reason "Extension Blacklisté : *@*.af [Afghanistan]";
};
 
ban user {
mask *@*.ag;
reason "Extension Blacklisté : *@*.ag [Antigua et Barbuda]";
};
 
ban user {
mask *@*.ai;
reason "Extension Blacklisté : *@*.ai [Anguilla]";
};
 
ban user {
mask *@*.al;
reason "Extension Blacklisté : *@*.al [Albanie]";
};
 
ban user {
mask *@*.am;
reason "Extension Blacklisté : *@*.am [Arménie]";
};
 
ban user {
mask *@*.an;
reason "Extension Blacklisté : *@*.an [Antilles Néerlandaises]";
};
 
ban user {
mask *@*.ao;
reason "Extension Blacklisté : *@*.ao [Angola]";
};
 
ban user {
mask *@*.aq;
reason "Extension Blacklisté : *@*.aq [Antarctique]";
};
 
ban user {
mask *@*.ar;
reason "Extension Blacklisté : *@*.ar [Argentine]";
};
 
ban user {
mask *@*.as;
reason "Extension Blacklisté : *@*.as [Samoa Américaine]";
};
 
 
ban user {
mask *@*.at;
reason "Extension Blacklisté : *@*.at [Autriche]";
};
 
 
ban user {
mask *@*.au;
reason "Extension Blacklisté : *@*.au [Australie]";
};
 
 
ban user {
mask *@*.aw;
reason "Extension Blacklisté : *@*.aw [Aruba]";
};
 
 
ban user {
mask *@*.az;
reason "Extension Blacklisté : *@*.az [Azerbaijan]";
};
 
 
ban user {
mask *@*.ba;
reason "Extension Blacklisté : *@*.ba [Bosnie Herzégovine]";
};
 
 
ban user {
mask *@*.bb;
reason "Extension Blacklisté : *@*.bb [Barbades]";
};
 
 
ban user {
mask *@*.bd;
reason "Extension Blacklisté : *@*.bd [Bangladesh]";
};
 
ban user {
mask *@*.bf;
reason "Extension Blacklisté : *@*.bf [Burkina Faso]";
};
 
 
ban user {
mask *@*.bg;
reason "Extension Blacklisté : *@*.bg [Bulgarie]";
};
 
 
ban user {
mask *@*.bh;
reason "Extension Blacklisté : *@*.bh [Bahrain]";
};
 
 
ban user {
mask *@*.bi;
reason "Extension Blacklisté : *@*.bi [Burundi]";
};
 
 
ban user {
mask *@*.bj;
reason "Extension Blacklisté : *@*.bj [Bénin]";
};
ban user {
mask *@*.bm;
reason "Extension Blacklisté : *@*.bm [Bermudes]";
};
 
ban user {
mask *@*.bn;
reason "Extension Blacklisté : *@*.bn [Bruneï Darussalam]";
};
 
ban user {
mask *@*.bo;
reason "Extension Blacklisté : *@*.bo [Bolivie]";
};
 
 
ban user {
mask *@*.br;
reason "Extension Blacklisté : *@*.br [Brésil]";
};
 
 
ban user {
mask *@*.bs;
reason "Extension Blacklisté : *@*.bs [Bahamas]";
};
 
 
ban user {
mask *@*.bt;
reason "Extension Blacklisté : *@*.bt [Bhutan]";
};
 
 
ban user {
mask *@*.bv;
reason "Extension Blacklisté : *@*.bv [Iles Bouvet]";
};
 
 
ban user {
mask *@*.bw;
reason "Extension Blacklisté : *@*.bw [Botswana]";
};
 
 
ban user {
mask *@*.by;
reason "Extension Blacklisté : *@*.by [Biélarussie]";
};
 
 
ban user {
mask *@*.bz;
reason "Extension Blacklisté : *@*.bz [Belize]";
};
 
 
ban user {
mask *@*.cc;
reason "Extension Blacklisté : *@*.cc [Iles Cocos]";
};
 
 
ban user {
mask *@*.cf;
reason "Extension Blacklisté : *@*.cf [République Centrafricaine]";
};
 
 
ban user {
mask *@*.cg;
reason "Extension Blacklisté : *@*.cg [Congo]";
};
 
 
ban user {
mask *@*.ci;
reason "Extension Blacklisté : *@*.ci [Cote D'Ivoire]";
};
 
 
ban user {
mask *@*.ck;
reason "Extension Blacklisté : *@*.ck [Iles de Cook]";
};
 
 
ban user {
mask *@*.cl;
reason "Extension Blacklisté : *@*.cl [Chilie]";
};
 
 
 
ban user {
mask *@*.cm;
reason "Extension Blacklisté : *@*.cm [Cameroun]";
};
 
 
ban user {
mask *@*.cn;
reason "Extension Blacklisté : *@*.cn [Chine]";
};
 
 
ban user {
mask *@*.co;
reason "Extension Blacklisté : *@*.co [Colombie]";
};
 
 
ban user {
mask *@*.cr;
reason "Extension Blacklisté : *@*.cr [Costa Rica]";
};
 
 
ban user {
mask *@*.cs;
reason "Extension Blacklisté : *@*.cs [Tchécoslovaquie]";
};
 
 
ban user {
mask *@*.cu;
reason "Extension Blacklisté : *@*.cu [Cuba]";
};
 
 
ban user {
mask *@*.cv;
reason "Extension Blacklisté : *@*.cv [Cap Vert]";
};
 
 
ban user {
mask *@*.cx;
reason "Extension Blacklisté : *@*.cx [Iles Christmas]";
};
 
 
ban user {
mask *@*.cy;
reason "Extension Blacklisté : *@*.cy [Chypre]";
};
 
 
ban user {
mask *@*.cz;
reason "Extension Blacklisté : *@*.cz [République Tchèque]";
};
 
 
ban user {
mask *@*.de;
reason "Extension Blacklisté : *@*.de [Allemagne]";
};
 
 
ban user {
mask *@*.dj;
reason "Extension Blacklisté : *@*.dj [Djibouti]";
};
 
 
ban user {
mask *@*.dk;
reason "Extension Blacklisté : *@*.dk [Danemark]";
};
 
 
ban user {
mask *@*.dm;
reason "Extension Blacklisté : *@*.dm [Dominique]";
};
 
ban user {
mask *@*.do;
reason "Extension Blacklisté : *@*.do [République Dominicaine]";
};
 
ban user {
mask *@*.ec;
reason "Extension Blacklisté : *@*.ec [Equateur]";
};
 
 
ban user {
mask *@*.ee;
reason "Extension Blacklisté : *@*.ee [Estonie]";
};
 
 
ban user {
mask *@*.eg;
reason "Extension Blacklisté : *@*.eg [Egypte]";
};
 
 
ban user {
mask *@*.eh;
reason "Extension Blacklisté : *@*.eh [Ouest Sahara]";
};
 
 
ban user {
mask *@*.er;
reason "Extension Blacklisté : *@*.er [Erithrée]";
};
 
 
ban user {
mask *@*.et;
reason "Extension Blacklisté : *@*.et [Ethiopie]";
};
 
 
ban user {
mask *@*.fi;
reason "Extension Blacklisté : *@*.fi [Finlande]";
};
 
ban user {
mask *@*.fj;
reason "Extension Blacklisté : *@*.fj [Fidji]";
};
 
ban user {
mask *@*.fk;
reason "Extension Blacklisté : *@*.fk [Iles Falkland]";
};
 
ban user {
mask *@*.fm;
reason "Extension Blacklisté : *@*.fm [Micronésie]";
};
 
ban user {
mask *@*.fo;
reason "Extension Blacklisté : *@*.fo [Iles Feroe]";
};
 
ban user {
mask *@*.ge;
reason "Extension Blacklisté : *@*.ge [Géorgie]";
};
 
 
ban user {
mask *@*.gd;
reason "Extension Blacklisté : *@*.gd [Grenade]";
};
 
 
ban user {
mask *@*.gh;
reason "Extension Blacklisté : *@*.gh [Ghana]";
};
 
 
ban user {
mask *@*.gi;
reason "Extension Blacklisté : *@*.gi [Gibraltar]";
};
 
 
ban user {
mask *@*.gl;
reason "Extension Blacklisté : *@*.gl [Groënland]";
};
 
 
ban user {
mask *@*.gm;
reason "Extension Blacklisté : *@*.gm [Gambie]";
};
 
 
ban user {
mask *@*.gn;
reason "Extension Blacklisté : *@*.gn [Guinée]";
};
 
 
ban user {
mask *@*.gp;
reason "Extension Blacklisté : *@*.gp [Guadeloupe]";
};
 
ban user {
mask *@*.gq;
reason "Extension Blacklisté : *@*.gq [Guinée Equatoriale]";
};
 
ban user {
mask *@*.gr;
reason "Extension Blacklisté : *@*.gr [Grèce]";
};
 
 
ban user {
mask *@*.gs;
reason "Extension Blacklisté : *@*.gs [Georgie du Sud/Iles Sandwich Sud]";
};
 
 
ban user {
mask *@*.gt;
reason "Extension Blacklisté : *@*.gt [Guatemala]";
};
 
 
ban user {
mask *@*.gu;
reason "Extension Blacklisté : *@*.gu [Guam]";
};
 
 
ban user {
mask *@*.gw;
reason "Extension Blacklisté : *@*.gw [Guinée-Bissau]";
};
 
 
ban user {
mask *@*.gy;
reason "Extension Blacklisté : *@*.gy [Guyane]";
};
 
 
ban user {
mask *@*.hk;
reason "Extension Blacklisté : *@*.hk [Hong Kong]";
};
 
 
ban user {
mask *@*.hm;
reason "Extension Blacklisté : *@*.hm [Iles Heard et McDonald]";
};
 
 
ban user {
mask *@*.hn;
reason "Extension Blacklisté : *@*.hn [Honduras]";
};
 
 
ban user {
mask *@*.hr;
reason "Extension Blacklisté : *@*.hr [Croatie]";
};
 
 
ban user {
mask *@*.ht;
reason "Extension Blacklisté : *@*.ht [Haïti]";
};
 
 
ban user {
mask *@*.hu;
reason "Extension Blacklisté : *@*.hu [Hongrie]";
};
 
 
ban user {
mask *@*.id;
reason "Extension Blacklisté : *@*.id [Indonéie]";
};
 
 
ban user {
mask *@*.ie;
reason "Extension Blacklisté : *@*.ie [Irlande]";
};
 
ban user {
mask *@*.il;
reason "Extension Blacklisté : *@*.il [Israël]";
};
 
 
ban user {
mask *@*.in;
reason "Extension Blacklisté : *@*.in [Inde]";
};
 
 
ban user {
mask *@*.io;
reason "Extension Blacklisté : *@*.io [Territoire Britannique de l'Océan Indien]";
};
 
 
ban user {
mask *@*.iq;
reason "Extension Blacklisté : *@*.iq [Iraq]";
};
 
 
ban user {
mask *@*.ir;
reason "Extension Blacklisté : *@*.ir [Iran]";
};
 
 
ban user {
mask *@*.is;
reason "Extension Blacklisté : *@*.is [Islande]";
};
 
 
ban user {
mask *@*.it;
reason "Extension Blacklisté : *@*.it [Italie]";
};
 
 
ban user {
mask *@*.jm;
reason "Extension Blacklisté : *@*.jm [Jamaïque]";
};
 
 
ban user {
mask *@*.jo;
reason "Extension Blacklisté : *@*.jo [Jordanie]";
};
 
 
ban user {
mask *@*.jp;
reason "Extension Blacklisté : *@*.jp [Japon]";
};
 
 
ban user {
mask *@*.ke;
reason "Extension Blacklisté : *@*.ke [Kenya]";
};
 
 
ban user {
mask *@*.kg;
reason "Extension Blacklisté : *@*.kg [Kyrgyzstan]";
};
 
 
ban user {
mask *@*.kh;
reason "Extension Blacklisté : *@*.kh [Cambodge]";
};
 
 
ban user {
mask *@*.ki;
reason "Extension Blacklisté : *@*.ki [Kiribati]";
};
 
 
ban user {
mask *@*.km;
reason "Extension Blacklisté : *@*.km [Comores]";
};
 
 
ban user {
mask *@*.kn;
reason "Extension Blacklisté : *@*.kn [Saint Kitts et Nevis]";
};
 
 
ban user {
mask *@*.kp;
reason "Extension Blacklisté : *@*.kp [Corée du Nord]";
};
 
 
ban user {
mask *@*.kn;
reason "Extension Blacklisté : *@*.kn [Corée du Sud]";
};
 
 
ban user {
mask *@*.kw;
reason "Extension Blacklisté : *@*.kw [Koweit]";
};
 
 
ban user {
mask *@*.ky;
reason "Extension Blacklisté : *@*.ky [Iles Caïman]";
};
 
 
ban user {
mask *@*.kz;
reason "Extension Blacklisté : *@*.kz [Kazakhstan]";
};
 
 
ban user {
mask *@*.la;
reason "Extension Blacklisté : *@*.la [Laos]";
};
 
 
ban user {
mask *@*.lb;
reason "Extension Blacklisté : *@*.lb [Liban]";
};
 
 
ban user {
mask *@*.lc;
reason "Extension Blacklisté : *@*.lc [Saint Lucia]";
};
 
 
ban user {
mask *@*.li;
reason "Extension Blacklisté : *@*.li [Liechtenstein]";
};
 
 
ban user {
mask *@*.lk;
reason "Extension Blacklisté : *@*.lk [Sri Lanka]";
};
 
 
ban user {
mask *@*.lr;
reason "Extension Blacklisté : *@*.lr [Libéria]";
};
 
ban user {
mask *@*.ls;
reason "Extension Blacklisté : *@*.ls [Lesotho]";
};
 
ban user {
mask *@*.lt;
reason "Extension Blacklisté : *@*.lt [Lithuanie]";
};
 
ban user {
mask *@*.lu;
reason "Extension Blacklisté : *@*.lu [Luxembourg]";
};
 
ban user {
mask *@*.lv;
reason "Extension Blacklisté : *@*.lv [Latvia]";
};
 
 
ban user {
mask *@*.ly;
reason "Extension Blacklisté : *@*.ly [Libye]";
};
 
 
ban user {
mask *@*.ma;
reason "Extension Blacklisté : *@*.ma [Monaco]";
};
 
 
ban user {
mask *@*.md;
reason "Extension Blacklisté : *@*.md [Moldavie]";
};
 
 
ban user {
mask *@*.mg;
reason "Extension Blacklisté : *@*.mg [Madagascar]";
};
 
 
ban user {
mask *@*.mh;
reason "Extension Blacklisté : *@*.mh [Iles Marshall]";
};
 
 
ban user {
mask *@*.mk;
reason "Extension Blacklisté : *@*.mk [Macédonie]";
};
 
 
ban user {
mask *@*.ml;
reason "Extension Blacklisté : *@*.ml [Mali]";
};
 
 
ban user {
mask *@*.mm;
reason "Extension Blacklisté : *@*.mm [Myanmar]";
};
 
 
ban user {
mask *@*.mn;
reason "Extension Blacklisté : *@*.mn [Mongolie]";
};
 
 
ban user {
mask *@*.mo;
reason "Extension Blacklisté : *@*.mo [Macau]";
};
 
 
ban user {
mask *@*.mp;
reason "Extension Blacklisté : *@*.mp [Iles Mariana du Nord]";
};
 
 
ban user {
mask *@*.mq;
reason "Extension Blacklisté : *@*.mq [Martinique]";
};
 
 
ban user {
mask *@*.mr;
reason "Extension Blacklisté : *@*.mr [Mauritanie]";
};
 
 
ban user {
mask *@*.ms;
reason "Extension Blacklisté : *@*.ms [Montserrat]";
};
 
 
ban user {
mask *@*.mt;
reason "Extension Blacklisté : *@*.mt [Malte]";
};
 
 
ban user {
mask *@*.mu;
reason "Extension Blacklisté : *@*.mu [Mauritie]";
};
 
 
ban user {
mask *@*.mv;
reason "Extension Blacklisté : *@*.mv [Maldives]";
};
 
 
ban user {
mask *@*.mw;
reason "Extension Blacklisté : *@*.mw [Malawi]";
};
 
 
ban user {
mask *@*.mx;
reason "Extension Blacklisté : *@*.mx [Mexique]";
};
 
 
ban user {
mask *@*.my;
reason "Extension Blacklisté : *@*.my [Malaysie]";
};
 
 
ban user {
mask *@*.mz;
reason "Extension Blacklisté : *@*.mz [Mozambique]";
};
 
 
ban user {
mask *@*.na;
reason "Extension Blacklisté : *@*.na [Namibie]";
};
 
 
ban user {
mask *@*.nc;
reason "Extension Blacklisté : *@*.nc [Nouvelle Calédonie]";
};
 
 
ban user {
mask *@*.ne;
reason "Extension Blacklisté : *@*.ne [Niger]";
};
 
 
ban user {
mask *@*.nf;
reason "Extension Blacklisté : *@*.nf [Iles de Norfolk]";
};
 
 
ban user {
mask *@*.ng;
reason "Extension Blacklisté : *@*.ng [Nigéria]";
};
 
 
ban user {
mask *@*.ni;
reason "Extension Blacklisté : *@*.ni [Nicaragua]";
};
 
 
ban user {
mask *@*.nl;
reason "Extension Blacklisté : *@*.nl [Pays-Bas]";
};
 
 
ban user {
mask *@*.no;
reason "Extension Blacklisté : *@*.no [Norvège]";
};
 
 
ban user {
mask *@*.np;
reason "Extension Blacklisté : *@*.np [Népal]";
};
 
 
ban user {
mask *@*.nr;
reason "Extension Blacklisté : *@*.nr [Nauru]";
};
 
 
ban user {
mask *@*.nt;
reason "Extension Blacklisté : *@*.nt [Zone Neutre]";
};
 
 
ban user {
mask *@*.nu;
reason "Extension Blacklisté : *@*.nu [Niue]";
};
 
 
ban user {
mask *@*.nz;
reason "Extension Blacklisté : *@*.nz [Nouvelle Zealand]";
};
 
 
ban user {
mask *@*.om;
reason "Extension Blacklisté : *@*.om [Oman]";
};
 
 
ban user {
mask *@*.op;
reason "Extension Blacklisté : *@*.op [Panama]";
};
 
 
ban user {
mask *@*.pe;
reason "Extension Blacklisté : *@*.pe [Pérou]";
};
 
 
ban user {
mask *@*.pg;
reason "Extension Blacklisté : *@*.pg [Papouasie Nouvelle Guinée]";
};
 
 
ban user {
mask *@*.ph;
reason "Extension Blacklisté : *@*.ph [Philippines]";
};
 
 
ban user {
mask *@*.pa;
reason "Extension Blacklisté : *@*.pa [Pakistan]";
};
 
 
ban user {
mask *@*.pl;
reason "Extension Blacklisté : *@*.pl [Pologne]";
};
 
ban user {
mask *@*.pm;
reason "Extension Blacklisté : *@*.pm [St. Pierre et Miquelon]";
};
 
 
ban user {
mask *@*.pn;
reason "Extension Blacklisté : *@*.pn [Pitcairn]";
};
 
 
ban user {
mask *@*.pr;
reason "Extension Blacklisté : *@*.pr [Puerto Rico]";
};
 
ban user {
mask *@*.pt;
reason "Extension Blacklisté : *@*.pt [Portugal]";
};
 
 
ban user {
mask *@*.pw;
reason "Extension Blacklisté : *@*.pw [Palau]";
};
 
 
ban user {
mask *@*.py;
reason "Extension Blacklisté : *@*.py [Paraguay]";
};
 
 
ban user {
mask *@*.qa;
reason "Extension Blacklisté : *@*.qa [Qatar]";
};
 
ban user {
mask *@*.ro;
reason "Extension Blacklisté : *@*.ro [Roumanie]";
};
 
 
ban user {
mask *@*.ru;
reason "Extension Blacklisté : *@*.ru [Russie]";
};
 
 
ban user {
mask *@*.rw;
reason "Extension Blacklisté : *@*.rw [Rwanda]";
};
 
 
ban user {
mask *@*.sa;
reason "Extension Blacklisté : *@*.sa [Arabie Saoudite]";
};
 
 
ban user {
mask *@*.sb;
reason "Extension Blacklisté : *@*.sb [Iles Salomon]";
};
 
 
ban user {
mask *@*.sc;
reason "Extension Blacklisté : *@*.sc [Seychelles]";
};
 
 
ban user {
mask *@*.sd;
reason "Extension Blacklisté : *@*.sd [Soudan]";
};
 
 
ban user {
mask *@*.se;
reason "Extension Blacklisté : *@*.se [Suède]";
};
 
 
ban user {
mask *@*.sg;
reason "Extension Blacklisté : *@*.sg [Singapoure]";
};
 
 
ban user {
mask *@*.sh;
reason "Extension Blacklisté : *@*.sh [St. Hélène]";
};
 
 
ban user {
mask *@*.si;
reason "Extension Blacklisté : *@*.si [Slovénie]";
};
 
 
ban user {
mask *@*.sj;
reason "Extension Blacklisté : *@*.sj [Iles Svalbard et Jan Mayen]";
};
 
 
ban user {
mask *@*.sk;
reason "Extension Blacklisté : *@*.sk [République Slovaque]";
};
 
 
ban user {
mask *@*.sl;
reason "Extension Blacklisté : *@*.sl [Sierra Léone]";
};
 
 
ban user {
mask *@*.sm;
reason "Extension Blacklisté : *@*.sm [Saint Marin]";
};
 
 
ban user {
mask *@*.sn;
reason "Extension Blacklisté : *@*.sn [Sénégal]";
};
 
 
ban user {
mask *@*.so;
reason "Extension Blacklisté : *@*.so [Somalie]";
};
 
 
ban user {
mask *@*.sr;
reason "Extension Blacklisté : *@*.sr [Suriname]";
};
 
 
ban user {
mask *@*.st;
reason "Extension Blacklisté : *@*.st [Sao Tome et Principe]";
};
 
 
ban user {
mask *@*.su;
reason "Extension Blacklisté : *@*.su [URSS]";
};
 
 
ban user {
mask *@*.sv;
reason "Extension Blacklisté : *@*.sv [El Salvador]";
};
 
 
ban user {
mask *@*.sy;
reason "Extension Blacklisté : *@*.sy [Syrie]";
};
 
 
ban user {
mask *@*.sz;
reason "Extension Blacklisté : *@*.sz [Swaziland]";
};
 
 
ban user {
mask *@*.tc;
reason "Extension Blacklisté : *@*.tc [Iles Turks et Caicos]";
};
 
 
ban user {
mask *@*.td;
reason "Extension Blacklisté : *@*.td [Tchad]";
};
 
 
ban user {
mask *@*.tg;
reason "Extension Blacklisté : *@*.tg [Togo]";
};
 
 
ban user {
mask *@*.th;
reason "Extension Blacklisté : *@*.th [Thaïland]";
};
 
ban user {
mask *@*.tj;
reason "Extension Blacklisté : *@*.tj [Tajikistan]";
};
 
 
ban user {
mask *@*.tk;
reason "Extension Blacklisté : *@*.tk [Tokelau]";
};
 
 
ban user {
mask *@*.tm;
reason "Extension Blacklisté : *@*.tm [Turkmenistan]";
};
 
 
ban user {
mask *@*.tn;
reason "Extension Blacklisté : *@*.tn [Tunisie]";
};
 
 
ban user {
mask *@*.to;
reason "Extension Blacklisté : *@*.to [Tonga]";
};
 
 
ban user {
mask *@*.tp;
reason "Extension Blacklisté : *@*.tp [Timor Est]";
};
 
 
ban user {
mask *@*.tr;
reason "Extension Blacklisté : *@*.tr [Turquie]";
};
 
 
ban user {
mask *@*.tt;
reason "Extension Blacklisté : *@*.tt [Trinidad et Tobago]";
};
 
 
ban user {
mask *@*.tv;
reason "Extension Blacklisté : *@*.tv [Tuvalu]";
};
 
 
ban user {
mask *@*.tw;
reason "Extension Blacklisté : *@*.tw [Taïwan]";
};
 
 
ban user {
mask *@*.tz;
reason "Extension Blacklisté : *@*.tz [Tanzanie]";
};
 
 
ban user {
mask *@*.ua;
reason "Extension Blacklisté : *@*.ua [Ukraine]";
};
 
 
ban user {
mask *@*.ug;
reason "Extension Blacklisté : *@*.ug [Ouganda]";
};
 
 
ban user {
mask *@*.uk;
reason "Extension Blacklisté : *@*.uk [Grande Bretagne]";
};
 
 
ban user {
mask *@*.um;
reason "Extension Blacklisté : *@*.um [Iles US Mineures]";
};
 
 
ban user {
mask *@*.us;
reason "Extension Blacklisté : *@*.us [Etats Unis]";
};
 
 
ban user {
mask *@*.uy;
reason "Extension Blacklisté : *@*.uy [Uruguay]";
};
 
 
ban user {
mask *@*.uz;
reason "Extension Blacklisté : *@*.uz [Uzbekistan]";
};
 
 
ban user {
mask *@*.va;
reason "Extension Blacklisté : *@*.va [Etat du Vatican]";
};
 
 
ban user {
mask *@*.vc;
reason "Extension Blacklisté : *@*.vc [Saint Vincent et les Grenadines]";
};
 
 
ban user {
mask *@*.ve;
reason "Extension Blacklisté : *@*.ve [Vénézuela]";
};
 
 
ban user {
mask *@*.vg;
reason "Extension Blacklisté : *@*.vg [Iles Vierges (Anglaises)]";
};
 
 
ban user {
mask *@*.vi;
reason "Extension Blacklisté : *@*.vi [Iles Vierges (Américaines)]";
};
 
 
ban user {
mask *@*.vn;
reason "Extension Blacklisté : *@*.vn [Vietnam]";
};
 
 
ban user {
mask *@*.vu;
reason "Extension Blacklisté : *@*.vu [Vanuatu]";
};
 
 
ban user {
mask *@*.wf;
reason "Extension Blacklisté : *@*.wf [Iles de Wallis et Futuna]";
};
 
 
ban user {
mask *@*.ws;
reason "Extension Blacklisté : *@*.ws [Samoa]";
};
 
 
ban user {
mask *@*.ye;
reason "Extension Blacklisté : *@*.ye [Yemen]";
};
 
 
 
ban user {
mask *@*.yu;
reason "Extension Blacklisté : *@*.yu [Yougoslavie]";
};
 
 
ban user {
mask *@*.za;
reason "Extension Blacklisté : *@*.za [Afrique du Sud]";
};
 
 
ban user {
mask *@*.zm;
reason "Extension Blacklisté : *@*.zm [Zambie]";
};
 
 
ban user {
mask *@*.zr;
reason "Extension Blacklisté : *@*.zr [Zaïre]";
};
 
 
ban user {
mask *@*.zw;
reason "Extension Blacklisté : *@*.zw [Zimbabwe]";
};
 
 
ban user {
mask *@*.edu;
reason "Extension Blacklisté : *@*.edu [Education]";
};
 
ban user {
mask *@*.gov;
reason "Extension Blacklisté : *@*.gov [Gouvernement]";
};
 
 
ban user {
mask *@*.rpa;
reason "Extension Blacklisté : *@*.rpa [Arpanet ancien style]";
};
 
 
ban user {
mask *@*.ato;
reason "Extension Blacklisté : *@*.ato [O.T.A.N]";
};
 
 
ban user { 
mask *@*.vtr.net; 
reason "Proxy Insécurisé !!!";
};
 
ban user { 
mask *@*.veloxzone.com.br; 
reason "Proxy Insécurisé !!!";
};
 
ban user { 
mask *@*.il24.net; 
reason "Proxy Insécurisé !!!"; 
}; 
ban user { 
mask *@*.optonline.net; 
reason "Proxy Insécurisé !!!";
}; 
ban user { 
mask *@*.cox.net; 
reason "Proxy Insécurisé !!!";
}; 
ban user { 
mask *@*.metropolis-inter.com; 
reason "Proxy Insécurisé !!!";
}; 
ban user { 
mask *@*.vtr.net; 
reason "Proxy Insécurisé !!!"; 
}; 
ban user { 
mask *@*.tvn95-3-82-237-157-188.fbx.proxad.net; 
reason "Proxy Insécurisé !!!"; 
}; 
ban user { 
mask *@*.at; 
reason "Proxy Insécurisé !!!"; 
}; 
ban user { 
mask *@*.telus.net; 
reason "Proxy Insécurisé !!!"; 
};
ban user { 
mask *@*.oricom.ca; 
reason "Proxy Insécurisé !!!"; 
}; 
ban user { 
mask *@*.pacbell.net; 
reason "Proxy Insécurisé !!!"; 
}; 
ban user { 
mask *@*.mindspring.com; 
reason "Proxy Insécurisé !!!"; 
}; 
ban user { 
mask *@*.hinet.net; 
reason "Proxy Insécurisé !!!"; 
}; 
ban user { 
mask *@195.229.241.182; 
reason "Proxy Insécurisé !!!"; 
}; 
ban user { 
mask *@193.251.169.187; 
reason "Proxy Insécurisé !!!"; 
}; 
ban user { 
mask *@193.251.169.187; 
reason "Proxy Insécurisé !!!"; 
}; 
ban user { 
mask *@61.3.216.165; 
reason "Proxy Insécurisé !!!"; 
}; 
ban user { 
mask *@164.58.10.121; 
reason "Proxy Insécurisé !!!"; 
}; 
ban user { 
mask *@85.204.156.38; 
reason "Proxy Insécurisé !!!"; 
}; 
ban user { 
mask *@65.78.105.153; 
reason "Proxy Insécurisé !!!"; 
}; 
ban user { 
mask *@86.34.2.192; 
reason "Proxy Insécurisé !!!"; 
}; 
ban user { 
mask *@201.6.246.224; 
reason "Proxy Insécurisé !!!"; 
}; 
ban user { 
mask *@195.229.241.188; 
reason "Proxy Insécurisé !!!"; 
}; 
ban user { 
mask *@*.tricom.net; 
reason "Proxy Insécurisé !!!"; 
}; 
ban user { 
mask *@61.244.116.229; 
reason "Proxy Insécurisé !!!"; 
}; 
ban user { 
mask *@61.244.116.229; 
reason "Proxy Insécurisé !!!"; 
};
ban user { 
mask *@61.131.51.91; 
reason "Proxy Insécurisé !!!"; 
}; 
ban user { 
mask *@61.155.100.55; 
reason "Proxy Insécurisé !!!"; 
}; 
ban user { 
mask *@*.ameritech.net; 
reason "Proxy Insécurisé !!!"; 
}; 
ban user { 
mask *@81.12.69.82; 
reason "Proxy Insécurisé !!!"; 
}; 
ban user { 
mask *@*.mx; 
reason "Proxy Insécurisé !!!"; 
}; 
ban user { 
mask *@213.42.2.11; 
reason "Proxy Insécurisé !!!"; 
}; 
ban user { 
mask *@86.35.6.34; 
reason "Proxy Insécurisé !!!"; 
}; 
 
 
 
 

pour lea il y a déjà pleins de tuto sur le sujet donc je vais pas en rajouter /!\ quant le système de sécurité s'active il gline tlm pour 5 min je vous conseil donc de mettre votre host en exception dans unreal


Voici ma secu si vous voulez la renforcer ou partager la votre se serais instructif pour tout le monde je pense smile

Cette secu n'est pas incontournable mais je pense que c'est déjà un bon début smile

je suis désoler pour les fautes d’orthographe je suis pas bien doué smile


Bon tchat @ tlm

Un jour j'irai vivre en Théorie, car en Théorie tout se passe bien.

Hors ligne

#2 17/05/2013 16:48:11

Great
Nouveau IRCzien
Inscription : 31/08/2011
Messages : 7

Re : Echange de sécurités pour serveurs irc

ya quelques erreurs dans les regex :X

Hors ligne

#3 17/05/2013 17:13:38

Harakiri
Administrateur
Lieu : Paris
Inscription : 02/07/2011
Messages : 261

Re : Echange de sécurités pour serveurs irc

Great a écrit :

ya quelques erreurs dans les regex :X

Je pense que le mieux c'est que tu les corriges. Parce que là, on est pas bien avancés. smile

EOF

Hors ligne

#4 17/05/2013 17:23:20

Great
Nouveau IRCzien
Inscription : 31/08/2011
Messages : 7

Re : Echange de sécurités pour serveurs irc

Si il a tout fait lui même,  il devrai trouver facilement...

Hors ligne

#5 17/05/2013 17:34:51

sianur
IRCzien en herbe
Lieu : dordogne
Inscription : 17/05/2013
Messages : 79
Site Web

Re : Echange de sécurités pour serveurs irc

salut Great ce n'est pas moi qui ai fait tout ça smile mais si tu est le même Great que je connais ca viens de bond j'ai juste partager les sécurités afin que tout le monde en profite smile
Car je crois que beaucoup de serveurs irc en aurais besoins de grands ou de petit et comme j'ai marquer dans le sujet ^^ c'est du partage donc si tu vois des erreurs se serai sympa d'en faire profité tlm smile

Un jour j'irai vivre en Théorie, car en Théorie tout se passe bien.

Hors ligne

#6 17/05/2013 17:38:42

Great
Nouveau IRCzien
Inscription : 31/08/2011
Messages : 7

Re : Echange de sécurités pour serveurs irc

Nop sa vient de moi la preuve ...

Code: 
##############################################################################################################
# By Great                                                                                                   #
#[Spamfilter][NICK: 'LjyW!identiniz@183.82.38.128:lkxvUWRFOIVtnjwWIyOvUwCuffPsZrSvVsogEdAafcRD']             #
#[Spamfilter][NICK: 'BnCIkEHVzet!identiniz@183.82.38.128:kqbKcdFbTmyVUPQqSmaHykRchgGXkKRNtamzncEGvIkAnoxCuv']#
#[Spamfilter][NICK: 'JHDdEn!identiniz@112.14.179.196:FECFcLGZFxVWGSFWaNPnvyREwwHavsdqkhxaooUlAYEOtYiNXh']    #
#[Spamfilter][NICK: 'WCSmYgzpprA!identiniz@107.63.113.206:dLpLxRJAumizrdRfUIyKKuwrZzHrUJbTjmcwITQCQGjXriA']  #
#[Spamfilter][NICK: 'wqkcSnCdr!identiniz@209.124.132.3:gBFXyfYTsPBpfJKpaZIdLGepADZEcVCBneGafwcuBSdSLTzTWq']  #
##############################################################################################################

spamfilter {
		regex "^[[:alpha:]]{1,25}![[:print:]]{1,25}@[[:print:]]{1,100}:[[:alpha:]]{30,60}$";
		target { user; };
		reason "Les clones ne sont pas tolérés sur ce réseau";
		action viruschan;
};

spamfilter {
		regex "^[[:alpha:]]{1,25}!~[[:print:]]{1,25}@[[:print:]]{1,100}:[[:alpha:]]{30,60}$";
		target { user; };
		reason "Les clones ne sont pas tolérés sur ce réseau";
		action viruschan;
};

##############################################################################################################
# By Great                                                                                                   #
#[Spamfilter][NICK: 'u388571t!izjeor@181.48.17.106:kurazbs']                                                 #
#[Spamfilter][NICK: 'n344521m!wudzohz@186.146.253.43:xogvkkna']                                              #
#[Spamfilter][NICK: 'r237581d!xcccelk@72.250.140.122:aatkyqme']                                              #
#[Spamfilter][NICK: 'p983958d!ialaaab@183.82.38.128:fdliau']                                                 #
#[Spamfilter][NICK: 'r528657s!zyjqffcn@190.37.163.24:tnwncnm']                                               #
##############################################################################################################			
			
spamfilter {
		regex "^[[:lower:]]{1}[[:digit:]]{5,7}[[:lower:]]{1}![[:lower:]]{5,10}@[[:print:]]{1,100}:[[:lower:]]{4,10}$";
		target { user; };
		reason "Les clones ne sont pas tolérés sur ce réseau";
		action viruschan;
};

spamfilter {
		regex "^[[:lower:]]{1}[[:digit:]]{5,7}[[:lower:]]{1}!~[[:lower:]]{5,10}@[[:print:]]{1,100}:[[:lower:]]{4,10}$";
		target { user; };
		reason "Les clones ne sont pas tolérés sur ce réseau";
		action viruschan;
};

##############################################################################################################
# By Great                                                                                                   #
#                                                                                                            #
# [Spamfilter][NICK: 'robert008[erd]!robert008@pool-108-29-121-165.nycmny.fios.verizon.net:zoxlef']          #
# [Spamfilter][NICK: 'robert008[jme]!robert008@c-98-245-60-46.hsd1.co.comcast.net:klpkur']                   #
# [Spamfilter][NICK: 'robert008[hnq]!robert008@c-71-195-146-249.hsd1.ma.comcast.net:qwvgvp']                 #
##############################################################################################################

spamfilter {
		regex "^[[:print:]]{1,30}[[:punct:]]{1}[[:print:]]{3,4}[[:punct:]]{1}![[:print:]]{1,30}@[[:print:]]{1,100}:[[:lower:]]{5,7}}$";
		target { user; };
		reason "Les clones ne sont pas tolérés sur ce réseau";
		action viruschan;
};

spamfilter {
		regex "^[[:print:]]{1,30}[[:punct:]]{1}[[:print:]]{3,4}[[:punct:]]{1}!~[[:print:]]{1,30}@[[:print:]]{1,100}:[[:lower:]]{5,7}}$";
		target { user; };
		reason "Les clones ne sont pas tolérés sur ce réseau";
		action viruschan;
};

##############################################################################################################
# By Great                                                                                                   #
#                                                                                                            #
# MTwsGQETJiYvIUwPrOmuacMgOKuncr!~ekxesvute@24.42.158.76:LessPinaSsestephane                                 #
# LoGMHogvXLiZhRVHgFwNoKDQRteYC!~slurkpsiy@modemcable141.36-22-96.mc.videotron.ca:LessPinaSsestephane        #
# ngWRisvYLjvVySHVOLALfAzMYaqAiW!~mrmcpmywx@61.131.11.52:LessPinass                                          #
# [19:32] <Join> hwYUDVGZIYCjPIbGdJIqoytfz (~rxifeqwpe@92008151.AD2EDD41.F8E5385A.IP)                        #
##############################################################################################################

spamfilter {
		regex "^[[:alpha:]]{26,100}!~[[:lower:]]{9}@[[:print:]]{10,100}:[[:print:]]{0,100}$";
		target { user; };
		reason "Les clones ne sont pas tolérés sur ce réseau";
		action viruschan;
};

spamfilter {
		regex "^[[:alpha:]]{26,100}![[:lower:]]{9}@[[:print:]]{10,100}:[[:print:]]{0,100}$";
		target { user; };
		reason "Les clones ne sont pas tolérés sur ce réseau";
		action viruschan;
};

############################################################################################################################################################



spamfilter {
		regex "^[[:alpha:]]{1,30}[[:digit:]]{2,4}!~[[:alpha:]]{1,30}@[[:print:]]{1,100}:[[:lower:]]{5,7}$";
		target { user; };
		reason "Les clones ne sont pas tolérés sur ce réseau";
		action viruschan;
};


#########################################################################################################################


spamfilter {
		regex "^[a-z]{2}[0-9][A-Z][a-z][A-Z][0-9]{4}[a-z][0-9][a-z][0-9]![a-z]{2}[0-9][A-Z][a-z][A-Z][0-9]{2}@[^:]+:[a-z]{2}[0-9][A-Z][a-z][A-Z][0-9]{2}$";
		target { user; };
		reason "Les clones ne sont pas tolérés sur ce réseau";
		action viruschan;
};

spamfilter {
		regex "^[a-z][A-Z][0-9][a-z]{2}[0-9][A-Z][0-9]{2}![a-zA-Z0-9]+@[^:]+:[-a-z`A-Z]+$";
		target { user; };
		reason "Les clones ne sont pas tolérés sur ce réseau";
		action viruschan;
};

spamfilter {
		regex "^[a-z][0-9]{8}!([a-z]{2})+@[^:]+:\1$";
		target { user; };
		reason "Les clones ne sont pas tolérés sur ce réseau";
		action viruschan;
};

spamfilter {
		regex "^s[0-9]{8}!([a-z]{8})+@[^:]+:\1$";
		target { user; };
		reason "Les clones ne sont pas tolérés sur ce réseau";
		action viruschan;
};

spamfilter {
		regex "^[a-z][0-9A-Za-z]{6}!([a-z]{5})@[^:]+:\1$";
		target { user; };
		reason "Les clones ne sont pas tolérés sur ce réseau";
		action viruschan;
};

spamfilter {
		regex "^[a-z][0-9A-Za-z]{8}!([a-z]{5})@[^:]+:\1$";
		target { user; };
		reason "Les clones ne sont pas tolérés sur ce réseau";
		action viruschan;
};

spamfilter {
		regex "^[a-z]{7}!([a-z]{5})@[^:]+:\1$";
		target { user; };
		reason "Les clones ne sont pas tolérés sur ce réseau";
		action viruschan;
};

spamfilter {
		regex "^[a-z]{9}!([a-z]{5})@[^:]+:\1$";
		target { user; };
		reason "Les clones ne sont pas tolérés sur ce réseau";
		action viruschan;
};

spamfilter {
		regex "^([a-z]{5})[0-9A-Za-z]{2}!\1@[^:]+:\1$";
		target { user; };
		reason "Les clones ne sont pas tolérés sur ce réseau";
		action viruschan;
};

spamfilter {
		regex "^([a-z]{5})[0-9A-Za-z]{4}!\1@[^:]+:\1$";
		target { user; };
		reason "Les clones ne sont pas tolérés sur ce réseau";
		action viruschan;
};

spamfilter {
		regex "^[a-z][0-9A-Za-z]([a-z]{5})!\1@[^:]+:\1$";
		target { user; };
		reason "Les clones ne sont pas tolérés sur ce réseau";
		action viruschan;
};

spamfilter {
		regex "^[a-z][0-9A-Za-z]{3}([a-z]{5})!\1@[^:]+:\1$";
		target { user; };
		reason "Les clones ne sont pas tolérés sur ce réseau";
		action viruschan;
};

spamfilter {
		regex "^[a-z]{6}!BiTCH@[^:]+:BiTCH PLeaSe$";
		target { user; };
		reason "Les clones ne sont pas tolérés sur ce réseau";
		action viruschan;
};

spamfilter {
		regex "^[a-z]{5}[0-9]{1,3}![a-z]{2}@[^:]+:[a-z]{2}$";
		target { user; };
		reason "Les clones ne sont pas tolérés sur ce réseau";
		action viruschan;
};

spamfilter {
		regex "^lol!gg@[^:]+:TraCiDTrax$";
		target { user; };
		reason "Les clones ne sont pas tolérés sur ce réseau";
		action viruschan;
};

spamfilter {
		regex "^smurfy[0-9]{1,4}!smurfy@[^:]+:[a-z]{6}$";
		target { user; };
		reason "Les clones ne sont pas tolérés sur ce réseau";
		action viruschan;
};

Dernière modification par Great (17/05/2013 17:43:55)

Hors ligne

#7 17/05/2013 17:47:10

sianur
IRCzien en herbe
Lieu : dordogne
Inscription : 17/05/2013
Messages : 79
Site Web

Re : Echange de sécurités pour serveurs irc

a ba je suis vraiment désolé mais j'ai pas eu les # By Great :s juste les cmds mais merci de partager ton fichier smile

Un jour j'irai vivre en Théorie, car en Théorie tout se passe bien.

Hors ligne

#8 17/05/2013 18:02:24

Damien
Méchant Modérateur.
Lieu : Bruxelles
Inscription : 20/06/2011
Messages : 238
Site Web

Re : Echange de sécurités pour serveurs irc

Bien le bonjour \o/

Alors, la configuration BOPM c'est bien jolie... mais ça se maintient à jour...

Code: INI
 
	/* example: NJABL - please read http://www.njabl.org/use.html before
	 * uncommenting */
	 blacklist {
	    name = "dnsbl.njabl.org";
	    type = "A record reply";
	    reply {
	       9 = "Open proxy";
	    };
	    ban_unknown = no;
		   kline = "ZLINE *@%i 1d :Proxy interdit";
	};
 

Ceci déjà... étonnant que tu n'es pas vu les notifications de ton Blitzed Open Proxy Monitor te signalant que les requêtes vers ce serveur n'aboutissaient pas...
Effectivement, le service n'est désormais plus fourni (Cf: leur site web) que je cite ici:

March 1, 2013: NJABL is in the process of being shut down. The DNSBL zones have been emptied. After "the Internet" has had some time to remove NJABL from server configs, the NS's will be pointed off into unallocated space (192.0.2.0/24 TEST-NET-1) to hopefully make the shutdown obvious to those who were slower to notice.

Tu peux donc déjà le retirer de la configuration.

Second point: Pourquoi utiliser "zline" et non "gzline" qui permet de bannir l'IP de tout les serveurs linkés?

Pour information: le Z:line est un bannissement d'une IP sur un serveur et un seul l'équivalent du K:line qui se pose sur un masque ident@host.tld, tandis que le GZline est lui l'équivalent global du Z:line, ce que le G:line est au K:line.

Cordialement,

En informatique il n'y a pas de mauvais outils, il n'y a que de mauvais utilisateurs. Le problème le plus récurrent est celui qui se trouve entre la chaise et le clavier.

Hors ligne

Pages : 1

Pied de page des forums

Propulsé par FluxBB

1272129 visites ( 108 aujourd'hui ) 5 visiteurs en ligne
Copyright © 2004 - 2013 IRCz