external/mailinabox
1
0
Fork 0
mirror of https://github.com/mail-in-a-box/mailinabox.git synced 2025-04-21 03:02:09 +00:00
Code Issues Releases Wiki Activity

polish

Browse Source
This commit is contained in:
ChiefGyk 2016-06-29 12:37:46 -04:00
parent a0185aca95
commit 097adec5d2
2 changed files with 20 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
README.md
View File

@ -6,5 +6,8 @@ Script is pretty self explanatory it prepares iptables, ipset, and the cron tab.
2.0 has been rewritten with help from some research to use IPset and far more tables and lists resourced. Please do not run this more than once per day, per server. 2.0 has been rewritten with help from some research to use IPset and far more tables and lists resourced. Please do not run this more than once per day, per server.
This also adds persistence, and removes iptables-persistent from 1.0 as a requirement. In fact you won't need it at all. I average thousands of more malicious IP addresses now ~48,000 as of testing. Maximum ipset can handle is 65535 from what I have read. This also adds persistence, and removes iptables-persistent from 1.0 as a requirement. In fact you won't need it at all. I average thousands of more malicious IP addresses now ~48,000 as of testing. Maximum ipset can handle is 65535 from what I have read.
Tested on Ubuntu 14.04LTS for my own servers, so please test on your own systems before fully deploying. Tested on Ubuntu 14.04LTS for my own servers, so please test on your own systems before fully deploying.
Simply run this once, and that's it.
sudo ./install.sh
alon@ganon.me alon@ganon.me
https://alonganon.info https://alonganon.info

26
blacklist
View File

@ -1,18 +1,26 @@
# I found this script somewhere a long time ago and modified it
#!/bin/bash #!/bin/bash
IP_TMP=/tmp/ip.tmp IP_TMP=/tmp/ip.tmp
IP_BLACKLIST=/etc/ip-blacklist.conf IP_BLACKLIST=/etc/ip-blacklist.conf
IP_BLACKLIST_TMP=/tmp/ip-blacklist.tmp IP_BLACKLIST_TMP=/tmp/ip-blacklist.tmp
IP_BLACKLIST_CUSTOM=/etc/ip-blacklist-custom.conf # optional IP_BLACKLIST_CUSTOM=/etc/ip-blacklist-custom.conf # optional
list="chinese nigerian russian lacnic exploited-servers"
BLACKLISTS=( BLACKLISTS=(
"http://www.projecthoneypot.org/list_of_ips.php?t=d&rss=1" # Project Honey Pot Directory of Dictionary Attacker IPs # Project Honey Pot Directory of Dictionary Attacker IPs
"http://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=1.1.1.1" # TOR Exit Nodes "http://www.projecthoneypot.org/list_of_ips.php?t=d&rss=1"
"http://danger.rulez.sk/projects/bruteforceblocker/blist.php" # BruteForceBlocker IP List # TOR Exit Nodes
"http://www.spamhaus.org/drop/drop.lasso" # Spamhaus Don't Route Or Peer List (DROP) "http://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=1.1.1.1"
"http://cinsscore.com/list/ci-badguys.txt" # C.I. Army Malicious IP List # BruteForceBlocker
"http://www.openbl.org/lists/base.txt" # OpenBL.org 30 day List "http://danger.rulez.sk/projects/bruteforceblocker/blist.php"
"http://www.autoshun.org/files/shunlist.csv" # Autoshun Shun List # Spamhaus
"http://lists.blocklist.de/lists/all.txt" # blocklist.de attackers "http://www.spamhaus.org/drop/drop.lasso"
# C.I. Army
"http://cinsscore.com/list/ci-badguys.txt"
# OpenBL.org
"http://www.openbl.org/lists/base.txt"
#Autoshun
"http://www.autoshun.org/files/shunlist.csv"
#Blocklist.de
"http://lists.blocklist.de/lists/all.txt"
) )
for i in "${BLACKLISTS[@]}" for i in "${BLACKLISTS[@]}"
do do