does hopm actually work with ergo?

[slingamn]

Stryker asked about the correct value of target_string for ergo:

https://github.com/ircd-hybrid/hopm/blob/79796fe0b892c653979d6c893253cf158464a94b/INSTALL.md?plain=1#L44

In its default/recommended configuration, Ergo does not send anything on first connect, so maybe hopm has never worked correctly with Ergo? If this is true, we can add a config option to make Ergo send a customizable notice on first connect.

[clbm87]

@slingamn I have HOPM working with Ergo? I'd be happy to share my config or whatever. I have it connected but not currently using any DNSBL functions. It connects just fine using the instructions.

The only thing that I had an issue with was the SASL connection as HOPM doesn't support it. Ergo does use the PASS workaround so I was able to do account name : password and it did the SASL that way.

[slingamn]

The concern is that HOPM will connect to Ergo and parse the snotices, but will never successfully detect an open proxy, because open proxy detection relies on target_string and Ergo doesn't send anything that would be a valid value of target_string.

[clbm87]

My bad. I guess I misunderstood that. I just got it connected and started to work on it the other day. I'm certainly able to help troubleshoot or demo a fix if necessary. I did rig up a log bot that checks the IP addresses through a service and returns whether or not they are a proxy or if they are "suspicious". I'd be happy to share that if it would help?

[clbm87]

I had a little more time to look at things today, and I want to share how I did this and made it work, I have all of the connections logged to a mysql table for connection logs and then use http://ip-api.com/ to go through and check everything on a cron job.

this is how it looks and the responses it can give

[https://ibb.co/67VHYjwq](https://ibb.co/67VHYjwq)

If the HOPM isn't exactly working, I am not sure if this service would be useful to check the ip-api.com database and then just perform an action on it that way?

`<?php
// Database settings
$dbHost = '';
$dbName = '';
$dbUser = '';
$dbPass = '';
$dsn = "mysql:host=$dbHost;dbname=$dbName;charset=utf8mb4";

try {
$pdo = new PDO($dsn, $dbUser, $dbPass);
$pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
} catch (PDOException $e) {
die("Database connection failed: " . $e->getMessage());
}

// Helper: Check if IP is private
function isPrivateIP($ip) {
return (
strpos($ip, '10.') === 0 ||
strpos($ip, '127.') === 0 ||
strpos($ip, '192.168.') === 0 ||
(strpos($ip, '172.') === 0 && (intval(explode('.', $ip)[1]) >= 16 && intval(explode('.', $ip)[1]) <= 31))
);
}

// Step 1: Find distinct IPs not in ip_lookup_cache
$stmt = $pdo->query("
SELECT DISTINCT ip_address
FROM chat_logs
WHERE ip_address IS NOT NULL
AND ip_address NOT IN (SELECT ip_address FROM ip_lookup_cache)
LIMIT 10
");

$ips = $stmt->fetchAll(PDO::FETCH_COLUMN);

foreach ($ips as $ip) {
if (isPrivateIP($ip)) {
continue; // Skip internal IPs
}

// Step 2: Lookup via ip-api.com PHP format
$url = "http://ip-api.com/php/$ip?fields=continent,country,countryCode,region,regionName,city,district,zip,lat,lon,timezone,isp,org,as,asname,proxy,hosting";
$context = stream_context_create(['http' => ['timeout' => 2]]);
$result = @file_get_contents($url, false, $context);

if ($result === false) {
    echo "Lookup failed for $ip (timeout)\n";
    continue;
}

$geo = @unserialize($result);
if ($geo === false || !is_array($geo)) {
    echo "Lookup failed for $ip (bad response)\n";
    continue;
}

if (!isset($geo['country'])) {
    echo "Lookup failed for $ip (invalid)\n";
    continue;
}

// Step 3: Insert into ip_lookup_cache
$stmt = $pdo->prepare("
    INSERT INTO ip_lookup_cache (
        ip_address, continent, country, countryCode, region, regionName, city,
        district, zip, lat, lon, timezone, isp, org, asn, asname, proxy, hosting
    ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
");

$stmt->execute([
    $ip,
    $geo['continent'] ?? null,
    $geo['country'] ?? null,
    $geo['countryCode'] ?? null,
    $geo['region'] ?? null,
    $geo['regionName'] ?? null,
    $geo['city'] ?? null,
    $geo['district'] ?? null,
    $geo['zip'] ?? null,
    $geo['lat'] ?? null,
    $geo['lon'] ?? null,
    $geo['timezone'] ?? null,
    $geo['isp'] ?? null,
    $geo['org'] ?? null,
    $geo['as'] ?? null,
    $geo['asname'] ?? null,
    isset($geo['proxy']) ? (int)$geo['proxy'] : 0,
    isset($geo['hosting']) ? (int)$geo['hosting'] : 0    ]);

echo "Cached IP: $ip\n";

}

?>`