dnsbl: per-zone name/action/duration/reason with %ip%; XLINE notice shows duration + absolute expiry

This commit is contained in:
Jean Chevronnet 2026-08-21 14:14:17 +00:00
parent 1824af5d90
commit b693c5e5df
No known key found for this signature in database
GPG key ID: 439666D63A9477E4
6 changed files with 309 additions and 37 deletions

View file

@ -61,7 +61,9 @@ Rejected before any per-connection state is allocated — the cheapest point:
- **Reputation** — every address accrues a score over time; the `y:<score>`
extban bans by it (`+b y:<100`).
- **DNSBL** — check connecting IPs against DNS blocklists (`mark` / `kill` /
`kline` / `gline` / `zline`).
`kline` / `gline` / `zline`). Each `dnsbl` zone may carry its own
`name` / `action` / `duration` / `reason` (the reason supports `%ip%`), or fall
back to the global defaults.
- **X-lines** — persistent `K` / `G` / `Z` / `Q` / `CBAN` / `RLINE` bans (see
[operators](operators.md)).