 ChiefGyk
|
8efe6c933f
|
added Malware Domain list and ZeusTracker
|
2016-06-29 14:18:43 -04:00 |
|
|
ChiefGyk
|
162f580e68
|
moved the comments around so it looked nicer on my other computer
|
2016-06-29 12:34:17 -04:00 |
|
|
ChiefGyk
|
324f5666f2
|
removed an unneeded line
|
2016-06-29 12:31:59 -04:00 |
|
|
ChiefGyk
|
02b014527b
|
added link to original project
|
2016-06-29 11:48:26 -04:00 |
|
|
ChiefGyk
|
1edd94ba39
|
added persistence by adding a couple lines to /etc/network/interfaces. It will automatically load at start, save each time the cron.daily runs, so if you need to reboot the ipset is loaded again.
|
2016-06-29 11:14:03 -04:00 |
|
|
ChiefGyk
|
ef5f90e02c
|
changed name from blocklist to blacklist to keep more uniform
|
2016-06-29 09:38:08 -04:00 |
|
|
ChiefGyk
|
39644bd29e
|
Now using ipset, added more lists, resarched and looked around for how to script it better. Now all will be able to wget from wizcraft (blocked my VPS, but not local machine so I suspect IP blocks are blocked from them), however there seems to be a lot of overlap of the addresses so I don't think it will be an issue. Averages around ~47,000 IP addresses as opposed to the original couple thousand just from blocklist.de. Does not require Fail2Ban to work just iptables, and of course iptables-persistent to keep changes.
|
2016-06-29 09:32:16 -04:00 |
|
|
ChiefGyk
|
6c808a5654
|
fixed unneccessary sudo, added part to load global variables.
|
2016-06-29 07:26:34 -04:00 |
|
|
ChiefGyk
|
2bdae89d24
|
polished and finalized, removed two last lines in blocklist.sh. They were redundant.
|
2016-06-28 16:26:52 -04:00 |
|
|
ChiefGyk
|
d27cb57d0c
|
moved blocklist installation to its own script, and moved it to the end of the installation, even after the first user so it can setup all the iptables after everything has been setup
|
2016-06-28 16:19:59 -04:00 |
|
|
ChiefGyk
|
d52f11710c
|
fixed iptables-persistent saving in the cron.daily for sync-fail2ban
|
2016-06-28 16:02:43 -04:00 |
|
|
ChiefGyk
|
89274c6411
|
automated the iptables-persistent installation so it doesn't require user interaction
|
2016-06-28 15:57:04 -04:00 |
|
|
ChiefGyk
|
273078b03e
|
added IPTables persistence and for it to save changes
|
2016-06-28 15:38:11 -04:00 |
|
|
ChiefGyk
|
484c9f2dbe
|
blocklist added to upstream master of 0.18c
|
2016-06-28 13:00:21 -04:00 |
|
|
ChiefGyk
|
23f2b1688f
|
reset
|
2016-06-28 12:31:21 -04:00 |
|
|
ChiefGyk
|
c05312664d
|
Merge branch 'master' of https://github.com/mail-in-a-box/mailinabox
Cleaning up my git was learning how to use git, and didn't learn about branches until now
|
2016-06-28 12:03:55 -04:00 |
|
|
ChiefGyk
|
3a1313144b
|
moved blocklist script locally within installation
|
2016-06-27 09:38:14 -04:00 |
|
|
ChiefGyk
|
406f991be3
|
fixed error in my script copying nginx-badbots
|
2016-06-27 09:30:01 -04:00 |
|
|
ChiefGyk
|
20bf710b28
|
removed some more clutter from jail.local
|
2016-06-27 09:21:29 -04:00 |
|
|
ChiefGyk
|
7f89d7cb82
|
added line for rkhunter to first update when installed.
|
2016-06-27 04:32:06 -04:00 |
|
|
ChiefGyk
|
b76c9330c5
|
some fixes to fail2ban filters and jail.local
|
2016-06-27 04:13:56 -04:00 |
|
|
ChiefGyk
|
5265839681
|
made rkhunter create a local file per suggestions
|
2016-06-27 04:10:39 -04:00 |
|
|
ChiefGyk
|
3701676304
|
fixed miab-munin.conf
|
2016-06-27 04:01:51 -04:00 |
|
|
ChiefGyk
|
187b28dc51
|
committed a fix for owncloud filter. Lack of caffeine caused me to enter a wrong part of my script
|
2016-06-27 03:58:30 -04:00 |
|
|
ChiefGyk
|
cb35e6dd96
|
extended owncloud filter find time
|
2016-06-26 20:06:53 -04:00 |
|
|
ChiefGyk
|
fd457e187c
|
fixed some issues with warnings due to there not being a variable set for PKGMG=DPKG
|
2016-06-26 19:53:30 -04:00 |
|
|
ChiefGyk
|
ab3fbad0b8
|
a couple minor changes to Fail2Ban #870 fixed a couple variables, copied owncloud.conf fail2ban from my own owncloud 9 server for my own business. Though it is commented out
|
2016-06-26 13:37:21 -04:00 |
|
|
ChiefGyk
|
933668f156
|
had rkhunter --propupd run before configs were changed. Fixed for #869, also added a crontab for RKHunter to automatically run daily at 4:15AM
|
2016-06-26 12:57:54 -04:00 |
|
|
ChiefGyk
|
e0b333843a
|
had rkhunter --propupd run before configs were changed. Fixed for #869
|
2016-06-26 12:48:26 -04:00 |
|
|
ChiefGyk
|
4f4ec5436a
|
added RKHunter to system.sh on lines 122-134 per #869 and made it run everytime apt launches to install or update. This should help prevent rootkits. I also added a config to whitelist certain things
|
2016-06-26 12:44:39 -04:00 |
|
|
ChiefGyk
|
994727d2cd
|
added script which automatically adds IP addresses which have been reported to be attacking other servers. It will update the IPTables automatically everyday, as well as perform the initial run the first day. As mentioned in #864 on the origin
|
2016-06-26 11:06:40 -04:00 |
|
|
ChiefGyk
|
6f1315f93a
|
added missing log location for jail.local
|
2016-06-26 11:03:30 -04:00 |
|
|
ChiefGyk
|
3b1b70ed16
|
added Fail2ban filters from #866, #767, and #798 on main branch
|
2016-06-26 10:57:59 -04:00 |
|