From: Tim FitzGeorge <ipfr@tfitzgeorge.me.uk>
To: development@lists.ipfire.org
Subject: [PATCH v2 0/8] ipblacklist: IP Address Blacklists
Date: Mon, 27 Apr 2020 15:31:15 +0100 [thread overview]
Message-ID: <20200427143123.6378-1-ipfr@tfitzgeorge.me.uk> (raw)
[-- Attachment #1: Type: text/plain, Size: 3937 bytes --]
Implements downloading of IP address blacklists and implementing
them as IPSets. A separate IPSet is used for each blacklist; this
simplifies handling of overlaps between different lists. Traffic
to or from the red0/ppp0 interface is checked against the IPSets.
The check is placed before the IPS check as the IPSet check is
much lighter on CPU use which means that overall CPU use is
reduced.
The available lists are defined in a separate file. A WUI page
allows the desired lists to be enabled. A minimum update check
interval is defined for each blacklist in the definition file.
Changes since Version 1:
- Changed Dshield download URL to preferred address.
- Removed Abuse.ch blacklist (discontinued).
- Removed Talos Malicious blacklist (not for production use).
- Added Feodo recommended blacklist.
- Added blocklist.de all blacklist.
- Updated ignored messages in logwatch.
- Modified sources file 'rate' to allow unit to be specified.
- Updated sources file 'disable' to allow list to be specified.
- Removed autoblacklist.
- Added WUI log pages.
- Removed status from settings WUI page.
Tim FitzGeorge (8):
ipblacklist: Main script
ipblacklist: WUI Settings page
ipblacklist: WUI Log page
ipblacklist: WUI Log details page
ipblacklist: WUI menus, language file etc
ipblacklist: Ancillary files
ipblacklist: Modifications to system
ipblacklist: Build infrastructure
config/backup/backup.pl | 1 +
config/backup/include | 2 +
config/ipblacklist/sources | 138 ++
config/logwatch/ipblacklist | 105 ++
config/logwatch/ipblacklist.conf | 34 +
config/menu/50-firewall.menu | 5 +
config/menu/70-log.menu | 5 +
config/rootfiles/common/aarch64/stage2 | 1 +
config/rootfiles/common/configroot | 2 +
config/rootfiles/common/ipblacklist-sources | 1 +
config/rootfiles/common/logwatch | 2 +
config/rootfiles/common/misc-progs | 2 +
config/rootfiles/common/stage2 | 1 +
config/rootfiles/common/web-user-interface | 3 +
config/rootfiles/common/x86_64/stage2 | 1 +
html/cgi-bin/ipblacklist.cgi | 463 +++++++
html/cgi-bin/logs.cgi/ipblacklists.dat | 363 +++++
html/cgi-bin/logs.cgi/log.dat | 2 +
html/cgi-bin/logs.cgi/showrequestfromblacklist.dat | 415 ++++++
langs/en/cgi-bin/en.pl | 27 +-
lfs/configroot | 4 +-
lfs/ipblacklist-sources | 53 +
lfs/logwatch | 2 +
make.sh | 1 +
src/initscripts/system/firewall | 12 +
src/misc-progs/Makefile | 2 +-
src/misc-progs/getipsetstat.c | 25 +
src/misc-progs/ipblacklistctrl.c | 48 +
src/scripts/ipblacklist | 1382 ++++++++++++++++++++
29 files changed, 3098 insertions(+), 4 deletions(-)
create mode 100644 config/ipblacklist/sources
create mode 100644 config/logwatch/ipblacklist
create mode 100644 config/logwatch/ipblacklist.conf
create mode 100644 config/rootfiles/common/ipblacklist-sources
create mode 100644 html/cgi-bin/ipblacklist.cgi
create mode 100755 html/cgi-bin/logs.cgi/ipblacklists.dat
create mode 100755 html/cgi-bin/logs.cgi/showrequestfromblacklist.dat
create mode 100644 lfs/ipblacklist-sources
create mode 100644 src/misc-progs/getipsetstat.c
create mode 100644 src/misc-progs/ipblacklistctrl.c
create mode 100755 src/scripts/ipblacklist
--
2.16.4
next reply other threads:[~2020-04-27 14:31 UTC|newest]
Thread overview: 11+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-04-27 14:31 Tim FitzGeorge [this message]
2020-04-27 14:31 ` [PATCH v2 1/8] ipblacklist: Main script Tim FitzGeorge
2020-04-27 14:31 ` [PATCH v2 2/8] ipblacklist: WUI Settings page Tim FitzGeorge
2020-04-27 14:31 ` [PATCH v2 3/8] ipblacklist: WUI Log page Tim FitzGeorge
2020-04-27 14:31 ` [PATCH v2 4/8] ipblacklist: WUI Log details page Tim FitzGeorge
2020-04-27 14:31 ` [PATCH v2 5/8] ipblacklist: WUI menus, language file etc Tim FitzGeorge
2020-04-27 14:31 ` [PATCH v2 6/8] ipblacklist: Ancillary files Tim FitzGeorge
2020-04-27 14:31 ` [PATCH v2 7/8] ipblacklist: Modifications to system Tim FitzGeorge
2020-04-27 14:31 ` [PATCH v2 8/8] ipblacklist: Build infrastructure Tim FitzGeorge
2020-05-16 9:40 ` [PATCH v2 0/8] ipblacklist: IP Address Blacklists Michael Tremer
2020-05-26 17:44 ` Tim FitzGeorge
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20200427143123.6378-1-ipfr@tfitzgeorge.me.uk \
--to=ipfr@tfitzgeorge.me.uk \
--cc=development@lists.ipfire.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox