From: <abe...@us...> - 2016-09-18 18:55:42
|
Revision: 7849 http://sourceforge.net/p/astlinux/code/7849 Author: abelbeck Date: 2016-09-18 18:55:40 +0000 (Sun, 18 Sep 2016) Log Message: ----------- reload-blocklist-netset, tweak script comments Modified Paths: -------------- branches/1.0/package/arnofw/reload-blocklist-netset Modified: branches/1.0/package/arnofw/reload-blocklist-netset =================================================================== --- branches/1.0/package/arnofw/reload-blocklist-netset 2016-09-17 23:37:42 UTC (rev 7848) +++ branches/1.0/package/arnofw/reload-blocklist-netset 2016-09-18 18:55:40 UTC (rev 7849) @@ -2,9 +2,13 @@ ## ## reload-blocklist-netset ## +## Regularly update .netset IP/Net entries to be used by Arno's Iptables Firewall (AIF) +## ## Cron may be used to run this script once or twice every day. Example: -## 05 05,15 * * * reload-blocklist-netset /mnt/kd/blocklists firehol_level1 spamhaus_dropv6 >/dev/null 2>&1 +## 15 05,15 * * * reload-blocklist-netset /mnt/kd/blocklists firehol_level1 spamhaus_dropv6 >/dev/null 2>&1 ## +## Important: Do not use the cron time schedule as above, make changes so the servers are not hit at the same time. +## ## Multiple netset entries may be space or comma separated. ## ## In this example, a /mnt/kd/blocklists/firehol_level1.netset This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <abe...@us...> - 2016-09-21 11:50:31
|
Revision: 7853 http://sourceforge.net/p/astlinux/code/7853 Author: abelbeck Date: 2016-09-21 11:50:29 +0000 (Wed, 21 Sep 2016) Log Message: ----------- arnofw, reload-blocklist-netset, add 'voipbl' blocklist Modified Paths: -------------- branches/1.0/package/arnofw/reload-blocklist-netset Modified: branches/1.0/package/arnofw/reload-blocklist-netset =================================================================== --- branches/1.0/package/arnofw/reload-blocklist-netset 2016-09-20 14:10:14 UTC (rev 7852) +++ branches/1.0/package/arnofw/reload-blocklist-netset 2016-09-21 11:50:29 UTC (rev 7853) @@ -5,14 +5,14 @@ ## Regularly update .netset IP/Net entries to be used by Arno's Iptables Firewall (AIF) ## ## Cron may be used to run this script once or twice every day. Example: -## 15 05,15 * * * reload-blocklist-netset /mnt/kd/blocklists firehol_level1 spamhaus_dropv6 >/dev/null 2>&1 +## 15 05,15 * * * reload-blocklist-netset /mnt/kd/blocklists firehol_level1 voipbl >/dev/null 2>&1 ## ## Important: Do not use the cron time schedule as above, make changes so the servers are not hit at the same time. ## ## Multiple netset entries may be space or comma separated. ## ## In this example, a /mnt/kd/blocklists/firehol_level1.netset -## and a /mnt/kd/blocklists/spamhaus_dropv6.netset file will be created. +## and a /mnt/kd/blocklists/voipbl.netset file will be created. ## Note: The specified directory must pre-exist, it will not be created. ## ## This script prevents any netset from being updated more often than @@ -31,6 +31,7 @@ firehol_level1: Blacklist composed from IP lists, providing maximum protection with minimum false positives. firehol_level2: Blacklist that track attacks, during about the last 48 hours. firehol_level3: Blacklist that track attacks, spyware, viruses, reported or detected in the last 30 days. + voipbl: VoIP Blacklist - sponsored by ScopServ International - http://www.voipbl.org/ spamhaus_drop: Spamhaus DROP (Don't Route Or Peer), consisting of netblocks that are "hijacked" by cyber-crime operations. spamhaus_edrop: Spamhaus EDROP is an extension of the DROP list that includes suballocated netblocks. @@ -61,6 +62,11 @@ ALT_URL="" AGE=3600 ;; + voipbl) + URL="http://www.voipbl.org/update/" + ALT_URL="https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/voipbl.netset" + AGE=43200 + ;; spamhaus_drop) URL="https://www.spamhaus.org/drop/drop.txt" ALT_URL="https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/spamhaus_drop.netset" This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <abe...@us...> - 2016-09-24 12:45:47
|
Revision: 7863 http://sourceforge.net/p/astlinux/code/7863 Author: abelbeck Date: 2016-09-24 12:45:45 +0000 (Sat, 24 Sep 2016) Log Message: ----------- reload-blocklist-netset, count IP/Nets beginning with a 'zero' Modified Paths: -------------- branches/1.0/package/arnofw/reload-blocklist-netset Modified: branches/1.0/package/arnofw/reload-blocklist-netset =================================================================== --- branches/1.0/package/arnofw/reload-blocklist-netset 2016-09-23 15:51:18 UTC (rev 7862) +++ branches/1.0/package/arnofw/reload-blocklist-netset 2016-09-24 12:45:45 UTC (rev 7863) @@ -150,7 +150,7 @@ rm -f "$tmp_file" UPDATES=$((UPDATES + 1)) - count=$(grep -c '^[1-9a-fA-F]' "$DIR/$netset.netset") + count=$(grep -c '^[0-9a-fA-F]' "$DIR/$netset.netset") mesg="Netset '$netset' has been updated. Contains $count addresses/nets." logger -t reload-blocklist-netset -p kern.info "$mesg" echo "$mesg" This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <abe...@us...> - 2016-11-07 17:49:52
|
Revision: 7938 http://sourceforge.net/p/astlinux/code/7938 Author: abelbeck Date: 2016-11-07 17:49:50 +0000 (Mon, 07 Nov 2016) Log Message: ----------- reload-blocklist-netset, add 'firehol_webclient' blocklist support Modified Paths: -------------- branches/1.0/package/arnofw/reload-blocklist-netset Modified: branches/1.0/package/arnofw/reload-blocklist-netset =================================================================== --- branches/1.0/package/arnofw/reload-blocklist-netset 2016-11-07 17:22:42 UTC (rev 7937) +++ branches/1.0/package/arnofw/reload-blocklist-netset 2016-11-07 17:49:50 UTC (rev 7938) @@ -31,6 +31,7 @@ firehol_level1: Blacklist composed from IP lists, providing maximum protection with minimum false positives. firehol_level2: Blacklist that track attacks, during about the last 48 hours. firehol_level3: Blacklist that track attacks, spyware, viruses, reported or detected in the last 30 days. + firehol_webclient: Blacklist made from blocklists that a web client should never talk to. Use with firehol_level1. voipbl: VoIP Blacklist - sponsored by ScopServ International - http://www.voipbl.org/ spamhaus_drop: Spamhaus DROP (Don't Route Or Peer), consisting of netblocks that are "hijacked" by cyber-crime operations. spamhaus_edrop: Spamhaus EDROP is an extension of the DROP list that includes suballocated netblocks. @@ -62,6 +63,11 @@ ALT_URL="" AGE=3600 ;; + firehol_webclient) + URL="https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/firehol_webclient.netset" + ALT_URL="" + AGE=3600 + ;; voipbl) URL="http://www.voipbl.org/update/" ALT_URL="https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/voipbl.netset" This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |