Add text replies for DNSBL responses.

Closes #1243.

3 files changed, 102 insertions, 2 deletions

diff --git a/docs/conf/providers/dronebl.example.conf b/docs/conf/providers/dronebl.example.conf
index 12c25fcda..5f3b289b1 100644
--- a/docs/conf/providers/dronebl.example.conf
+++ b/docs/conf/providers/dronebl.example.conf
@@ -8,4 +8,80 @@
        records="3,5,6,7,8,9,10,11,13,14,15,16,17,19"
        action="zline"
        duration="7d"
-       reason="You are listed in DroneBL. Please visit https://dronebl.org/lookup.do?ip=%ip%&network=%network.url% for more information.">
+       reason="You are listed in DroneBL: %reason%. Please visit https://dronebl.org/lookup.do?ip=%ip%&network=%network.url% for more information.">
+
+<dnsblreply name="DroneBL"
+            reply="1"
+            description="Testing">
+
+<dnsblreply name="DroneBL"
+            reply="2"
+            description="Sample data used for heuristical analysis">
+
+<dnsblreply name="DroneBL"
+            reply="3"
+            description="IRC spam drone (litmus/sdbot/fyle)">
+
+<dnsblreply name="DroneBL"
+            reply="5"
+            description="Bottler">
+
+<dnsblreply name="DroneBL"
+            reply="6"
+            description="Unknown worm or spambot">
+
+<dnsblreply name="DroneBL"
+            reply="7"
+            description="DDoS drone">
+
+<dnsblreply name="DroneBL"
+            reply="8"
+            description="Open SOCKS proxy">
+
+<dnsblreply name="DroneBL"
+            reply="9"
+            description="Open HTTP proxy">
+
+<dnsblreply name="DroneBL"
+            reply="10"
+            description="Proxychain">
+
+<dnsblreply name="DroneBL"
+            reply="11"
+            description="Webpage proxy">
+
+<dnsblreply name="DroneBL"
+            reply="12"
+            description="Open DNS resolver">
+
+<dnsblreply name="DroneBL"
+            reply="13"
+            description="Automated dictionary attack">
+
+<dnsblreply name="DroneBL"
+            reply="14"
+            description="Open WINGATE proxy">
+
+<dnsblreply name="DroneBL"
+            reply="15"
+            description="Compromised router / gateway">
+
+<dnsblreply name="DroneBL"
+            reply="16"
+            description="Autorooting worm">
+
+<dnsblreply name="DroneBL"
+            reply="17"
+            description="Automatically determined botnet IP">
+
+<dnsblreply name="DroneBL"
+            reply="18"
+            description="Possibly compromised DNS/MX type hostname detected on IRC">
+
+<dnsblreply name="DroneBL"
+            reply="19"
+            description="Abused VPN service">
+
+<dnsblreply name="DroneBL"
+            reply="255"
+            description="Uncategorized threat">
diff --git a/docs/conf/providers/efnet-rbl.example.conf b/docs/conf/providers/efnet-rbl.example.conf
index 78dce53cb..0130951dc 100644
--- a/docs/conf/providers/efnet-rbl.example.conf
+++ b/docs/conf/providers/efnet-rbl.example.conf
@@ -8,4 +8,24 @@
        records="1,2,3,4,5"
        action="zline"
        duration="7d"
-       reason="You are listed in the EFnet RBL. Please visit https://rbl.efnetrbl.org/?i=%ip% for more information.">
+       reason="You are listed in the EFnet RBL: %reason%. Please visit https://rbl.efnetrbl.org/?i=%ip% for more information.">
+
+<dnsblreply name="EFnet RBL"
+            reply="1"
+            description="Open proxy">
+
+<dnsblreply name="EFnet RBL"
+            reply="2"
+            description="Spamtrap score of 666">
+
+<dnsblreply name="EFnet RBL"
+            reply="3"
+            description="Spamtrap score of 50+">
+
+<dnsblreply name="EFnet RBL"
+            reply="4"
+            description="Tor exit node">
+
+<dnsblreply name="EFnet RBL"
+            reply="5"
+            description="Drones or flooding">
diff --git a/docs/conf/providers/torexit.example.conf b/docs/conf/providers/torexit.example.conf
index abc35c696..1be1a5b40 100644
--- a/docs/conf/providers/torexit.example.conf
+++ b/docs/conf/providers/torexit.example.conf
@@ -10,3 +10,7 @@
        action="zline"
        duration="7d"
        reason="Tor exit nodes are not allowed on this network. See https://metrics.torproject.org/rs.html#search/%ip% for more information.">
+
+<dnsblreply name="torexit.dan.me.uk"
+            reply="100"
+            description="Tor exit node">