mirror of
https://github.com/mail-in-a-box/mailinabox.git
synced 2025-04-21 03:02:09 +00:00
polish
This commit is contained in:
parent
a0185aca95
commit
097adec5d2
@ -6,5 +6,8 @@ Script is pretty self explanatory it prepares iptables, ipset, and the cron tab.
|
||||
2.0 has been rewritten with help from some research to use IPset and far more tables and lists resourced. Please do not run this more than once per day, per server.
|
||||
This also adds persistence, and removes iptables-persistent from 1.0 as a requirement. In fact you won't need it at all. I average thousands of more malicious IP addresses now ~48,000 as of testing. Maximum ipset can handle is 65535 from what I have read.
|
||||
Tested on Ubuntu 14.04LTS for my own servers, so please test on your own systems before fully deploying.
|
||||
|
||||
Simply run this once, and that's it.
|
||||
sudo ./install.sh
|
||||
alon@ganon.me
|
||||
https://alonganon.info
|
26
blacklist
26
blacklist
@ -1,18 +1,26 @@
|
||||
# I found this script somewhere a long time ago and modified it
|
||||
#!/bin/bash
|
||||
IP_TMP=/tmp/ip.tmp
|
||||
IP_BLACKLIST=/etc/ip-blacklist.conf
|
||||
IP_BLACKLIST_TMP=/tmp/ip-blacklist.tmp
|
||||
IP_BLACKLIST_CUSTOM=/etc/ip-blacklist-custom.conf # optional
|
||||
list="chinese nigerian russian lacnic exploited-servers"
|
||||
BLACKLISTS=(
|
||||
"http://www.projecthoneypot.org/list_of_ips.php?t=d&rss=1" # Project Honey Pot Directory of Dictionary Attacker IPs
|
||||
"http://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=1.1.1.1" # TOR Exit Nodes
|
||||
"http://danger.rulez.sk/projects/bruteforceblocker/blist.php" # BruteForceBlocker IP List
|
||||
"http://www.spamhaus.org/drop/drop.lasso" # Spamhaus Don't Route Or Peer List (DROP)
|
||||
"http://cinsscore.com/list/ci-badguys.txt" # C.I. Army Malicious IP List
|
||||
"http://www.openbl.org/lists/base.txt" # OpenBL.org 30 day List
|
||||
"http://www.autoshun.org/files/shunlist.csv" # Autoshun Shun List
|
||||
"http://lists.blocklist.de/lists/all.txt" # blocklist.de attackers
|
||||
# Project Honey Pot Directory of Dictionary Attacker IPs
|
||||
"http://www.projecthoneypot.org/list_of_ips.php?t=d&rss=1"
|
||||
# TOR Exit Nodes
|
||||
"http://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=1.1.1.1"
|
||||
# BruteForceBlocker
|
||||
"http://danger.rulez.sk/projects/bruteforceblocker/blist.php"
|
||||
# Spamhaus
|
||||
"http://www.spamhaus.org/drop/drop.lasso"
|
||||
# C.I. Army
|
||||
"http://cinsscore.com/list/ci-badguys.txt"
|
||||
# OpenBL.org
|
||||
"http://www.openbl.org/lists/base.txt"
|
||||
#Autoshun
|
||||
"http://www.autoshun.org/files/shunlist.csv"
|
||||
#Blocklist.de
|
||||
"http://lists.blocklist.de/lists/all.txt"
|
||||
)
|
||||
for i in "${BLACKLISTS[@]}"
|
||||
do
|
||||
|
Loading…
Reference in New Issue
Block a user