Re: [Astlinux-devel] Using APIBAN in Astlinux

[Michael K. <mic...@ip...>]

Thanks for the heads up. We would be putting it into that release so all good.

Regards
Michael Knill

On 15/10/21, 11:57 am, "Lonnie Abelbeck" <li...@lo...> wrote:

    Hey Michael,

    BTW, The PHP script uses the curl module, which was first added into AstLinux 1.4.3 (I thought it was earlier) ... so keep that in mind when testing.

    Lonnie


    > On Oct 14, 2021, at 7:52 PM, Michael Knill <mic...@ip...> wrote:
    > 
    > Thanks Lonnie. Will give it a try.
    > 
    > Regards
    > Michael Knill
    > 
    > On 15/10/21, 9:27 am, "Lonnie Abelbeck" <li...@lo...> wrote:
    > 
    >    I wrote a PHP script that retrieves all the APIBAN 'banned' IPs and runs them through iprange to generate a .netset file as stdout.
    > 
    >    https://gist.github.com/abelbeck/28bdea0d45be8bfcbf65bb34e57fd4d4
    > 
    >    Remove the trailing .php and make apiban-netset executable.
    > 
    >    You must have an APIBAN Key, and place it by itself (no leading/trailing text) in '/mnt/kd/apiban.conf'.
    > 
    >    We can decide if we want this in production AstLinux.
    > 
    >    Lonnie
    > 
    > 
    > 
    > 
    >> On Oct 14, 2021, at 9:27 AM, Lonnie Abelbeck <li...@lo...> wrote:
    >> 
    >> Michael, thanks for bringing APIBAN to our attention.
    >> 
    >> I re-looked at our /usr/sbin/reload-blocklist-netset script and the 'asterisk' URLs, turns out only "blocklist_de_sip.ipset" is actively updated.
    >> 
    >> The 'voipbl' URL has only grown over time, no IPs have been removed, which makes false positives a problem.
    >> 
    >> So, the APIBAN list may have a place, but requiring an access key and not a straight .ipset/.netset file download is a hurdle.
    >> 
    >> Possibly there are other sip/asterisk related blocklists?
    >> 
    >> Lonnie
    >> 
    >> 
    >> 
    >>> On Oct 13, 2021, at 5:55 PM, Michael Knill <mic...@ip...> wrote:
    >>> 
    >>> Yep it needs to go into a netset list aggregated with iprange. Note their client does actually work on Astlinux.
    >>> Should be pretty easy to do!
    >>> 
    >>> Regards
    >>> Michael Knill
    >>> 
    >>> From: Michael Keuter <li...@mk...>
    >>> Reply to: AstLinux Developers Mailing List <ast...@li...>
    >>> Date: Thursday, 14 October 2021 at 9:41 am
    >>> To: AstLinux Developers Mailing List <ast...@li...>
    >>> Subject: Re: [Astlinux-devel] Using APIBAN in Astlinux
    >>> 
    >>> Quite interesting thread about apiban:
    >>> 
    >>> https://community.freepbx.org/t/integrating-apiban-org-with-freepbx/69422/11
    >>> 
    >>> Sent from a mobile device.
    >>> 
    >>> Michael Keuter
    >>> 
    >>> 
    >>>> Am 13.10.2021 um 23:24 schrieb Michael Knill <mic...@ip...>:
    >>>> 
    >>>> APIBAN looks very interesting. There will be a session on it at Astricon this year as well.
    >>>> I assume that banned IP addresses could just be pulled into a netset list?
    >>>> 
    >>>> https://apiban.org/doc.html
    >>>> https://www.securevoip.io/48-hours-with-apiban/
    >>>> 
    >>>> Regards
    >>>> 
    >>>> Michael Knill
    >>>> Managing Director
    >>>> 
    >>>> D: +61 2 6189 1360
    >>>> P: +61 2 6140 4656
    >>>> E: mic...@ip...
    >>>> W: ipcsolutions.com.au
    >>>> 
    >>>> 
    >>>> <image001.png>
    >>>> Smarter Business Communications
    >>>> 
    >>>> _______________________________________________
    >>>> Astlinux-devel mailing list
    >>>> Ast...@li...
    >>>> https://lists.sourceforge.net/lists/listinfo/astlinux-devel
    >>> _______________________________________________
    >>> Astlinux-devel mailing list
    >>> Ast...@li...
    >>> https://lists.sourceforge.net/lists/listinfo/astlinux-devel
    >> 
    >> 
    >> 
    >> _______________________________________________
    >> Astlinux-devel mailing list
    >> Ast...@li...
    >> https://lists.sourceforge.net/lists/listinfo/astlinux-devel
    >> 
    >> 
    > 
    > 
    > 
    >    _______________________________________________
    >    Astlinux-devel mailing list
    >    Ast...@li...
    >    https://lists.sourceforge.net/lists/listinfo/astlinux-devel
    > 
    > 
    > _______________________________________________
    > Astlinux-devel mailing list
    > Ast...@li...
    > https://lists.sourceforge.net/lists/listinfo/astlinux-devel



    _______________________________________________
    Astlinux-devel mailing list
    Ast...@li...
    https://lists.sourceforge.net/lists/listinfo/astlinux-devel