mirror of
https://github.com/mail-in-a-box/mailinabox.git
synced 2026-03-14 17:27:23 +01:00
somes code fixes and lines added for fixes
This commit is contained in:
15
blacklist
15
blacklist
@@ -7,7 +7,6 @@ list="chinese nigerian russian lacnic exploited-servers"
|
||||
BLACKLISTS=(
|
||||
"http://www.projecthoneypot.org/list_of_ips.php?t=d&rss=1" # Project Honey Pot Directory of Dictionary Attacker IPs
|
||||
"http://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=1.1.1.1" # TOR Exit Nodes
|
||||
"http://www.maxmind.com/en/anonymous_proxies" # MaxMind GeoIP Anonymous Proxies
|
||||
"http://danger.rulez.sk/projects/bruteforceblocker/blist.php" # BruteForceBlocker IP List
|
||||
"http://www.spamhaus.org/drop/drop.lasso" # Spamhaus Don't Route Or Peer List (DROP)
|
||||
"http://cinsscore.com/list/ci-badguys.txt" # C.I. Army Malicious IP List
|
||||
@@ -21,16 +20,6 @@ do
|
||||
grep -Po '(?:\d{1,3}\.){3}\d{1,3}(?:/\d{1,2})?' $IP_TMP >> $IP_BLACKLIST_TMP
|
||||
done
|
||||
|
||||
# This part may not work for everyone, it seems wizcraft doesn't allow all VPS wget access, but I am looking into it
|
||||
for i in `echo $list`; do
|
||||
# Download
|
||||
wget --quiet http://www.wizcrafts.net/$i-iptables-blocklist.html
|
||||
# Grep all but ip blocks
|
||||
cat $i-iptables-blocklist.html | grep -v \< | grep -v \: | grep -v \; | grep -v \# | grep [0-9] > $i.txt
|
||||
# Consolidate
|
||||
cat $i.txt >> $IP_BLACKLIST_TMP
|
||||
done
|
||||
|
||||
sort $IP_BLACKLIST_TMP -n | uniq > $IP_BLACKLIST
|
||||
rm $IP_BLACKLIST_TMP
|
||||
wc -l $IP_BLACKLIST
|
||||
@@ -40,3 +29,7 @@ egrep -v "^#|^$" $IP_BLACKLIST | while IFS= read -r ip
|
||||
do
|
||||
ipset add blacklist $ip
|
||||
done
|
||||
|
||||
# save IPtable rules
|
||||
ipset save blacklist > /etc/ipset/blacklist
|
||||
iptables-save > /etc/iptables.up.rules
|
||||
Reference in New Issue
Block a user