Commit Graph

Select branches

Hide Pull Requests

2fa

docker

encryption-milter

main

secureupgrade

webauthn

#1

#1

#1000

#1000

#1001

#1001

#1005

#1006

#1007

#1007

#1010

#1014

#1022

#1022

#1024

#1025

#1025

#1027

#1028

#1029

#103

#103

#1030

#1030

#1035

#1035

#1036

#1037

#1039

#1039

#1042

#1042

#1043

#1043

#1044

#105

#1052

#1057

#1057

#1058

#1058

#1065

#1076

#1077

#1078

#1079

#1079

#1083

#1083

#1085

#1085

#1093

#1094

#1096

#1098

#1099

#1103

#1103

#1105

#1108

#111

#1114

#1120

#1121

#1123

#1126

#1126

#113

#1138

#1139

#1140

#1140

#1141

#115

#1150

#1151

#1153

#1155

#1162

#1163

#1165

#1165

#1166

#1168

#1168

#1169

#1169

#1171

#1172

#1173

#1177

#1179

#1181

#1185

#12

#1201

#1206

#1209

#1212

#1215

#1215

#1216

#1216

#1221

#1221

#1223

#1229

#1229

#1231

#1232

#1233

#1233

#1236

#1238

#1238

#1253

#1255

#1258

#1261

#1265

#1265

#1266

#1266

#1268

#1271

#1277

#1278

#1281

#1281

#1287

#1287

#1292

#1294

#1294

#1302

#1305

#1311

#1311

#1312

#1313

#1313

#1330

#1338

#1338

#1345

#1346

#1346

#1347

#1348

#135

#1354

#1359

#1376

#1377

#1377

#1380

#1387

#1387

#1398

#1399

#1400

#1400

#1402

#1406

#1408

#1408

#1412

#1417

#142

#1420

#1427

#1432

#1433

#1434

#1435

#1436

#1438

#144

#1441

#1441

#1443

#1443

#1447

#1448

#1451

#1452

#1454

#1455

#1455

#1456

#1456

#1457

#1458

#146

#1460

#1463

#1464

#1467

#147

#1475

#1476

#1477

#1479

#148

#1480

#1481

#1482

#1487

#1488

#149

#149

#1494

#1497

#1498

#150

#1500

#1504

#1506

#1511

#152

#1520

#1529

#1534

#1545

#1546

#1550

#1551

#1556

#156

#1560

#1563

#1564

#1565

#1568

#1568

#1576

#1577

#1578

#1579

#1580

#1581

#1584

#1588

#1590

#1590

#1603

#1603

#1605

#1606

#1611

#1616

#162

#1620

#1625

#1628

#1628

#1629

#163

#1632

#1633

#1634

#1635

#1636

#1639

#164

#1641

#1642

#1643

#1644

#1644

#1646

#1646

#1648

#1650

#1651

#1652

#1652

#1653

#1654

#1655

#166

#1662

#167

#1670

#1671

#1672

#1673

#1674

#1675

#1676

#1679

#168

#1680

#1684

#1684

#1688

#1689

#1693

#1698

#170

#1702

#1703

#1712

#1716

#1716

#1717

#1720

#1721

#1728

#173

#1731

#1734

#1741

#1742

#1748

#1752

#1754

#1761

#1768

#1770

#1773

#1773

#1775

#178

#1787

#1789

#1790

#1791

#1793

#1795

#1798

#1799

#1800

#1804

#1809

#1812

#1813

#1814

#1817

#1823

#1823

#1827

#1829

#1830

#1836

#1841

#1848

#1853

#1855

#1856

#1856

#1863

#1866

#1869

#1876

#188

#1882

#1882

#1883

#1884

#1884

#1886

#1891

#1892

#1893

#1895

#1899

#1900

#1900

#1905

#1908

#191

#191

#1913

#192

#1920

#1920

#1929

#193

#1932

#1942

#1943

#1947

#1948

#1949

#1950

#1954

#1955

#1958

#1958

#1960

#1965

#1965

#1970

#1976

#2001

#2002

#2008

#201

#2012

#2013

#2015

#2017

#202

#202

#2024

#2033

#2034

#2035

#2038

#2043

#2043

#2044

#2045

#2051

#2054

#2055

#2063

#2064

#2067

#2069

#207

#2074

#2077

#2078

#2079

#2081

#2083

#2090

#21

#2105

#2106

#2109

#2115

#212

#212

#2125

#2126

#2137

#2138

#214

#214

#2151

#2153

#2156

#2157

#2158

#2159

#2162

#2163

#2170

#2182

#2190

#2191

#2192

#2192

#2193

#2193

#2194

#2198

#2199

#220

#220

#2201

#2202

#2203

#2204

#2207

#2208

#2216

#2218

#2219

#2220

#2220

#2226

#2227

#2236

#2241

#2244

#2247

#2248

#2249

#2252

#2253

#2258

#2258

#2259

#2259

#2260

#2260

#2261

#2262

#2262

#2263

#2268

#227

#227

#2270

#2271

#2275

#2281

#2287

#2293

#2296

#2298

#2298

#2299

#230

#2301

#2304

#2305

#2306

#2308

#2308

#2309

#2309

#2310

#2311

#2315

#2317

#2319

#2319

#232

#2322

#2325

#2328

#2329

#233

#2330

#2332

#2333

#2334

#2340

#2340

#2342

#2343

#2345

#2346

#2347

#2349

#2351

#2352

#2356

#2359

#2360

#2365

#2368

#2376

#2377

#2378

#2379

#2380

#2382

#2382

#2383

#2383

#2385

#2387

#2387

#2389

#239

#239

#2390

#2401

#2406

#2407

#2409

#2410

#2410

#2411

#2411

#2413

#2413

#2416

#2416

#2418

#2418

#242

#242

#2422

#2423

#2424

#2424

#2425

#2425

#2428

#2428

#2429

#2429

#2431

#2431

#2432

#2432

#2433

#2436

#2436

#2437

#2439

#244

#244

#2440

#2440

#2441

#2441

#248

#25

#25

#251

#251

#254

#260

#261

#269

#269

#274

#274

#275

#276

#276

#279

#282

#287

#288

#29

#297

#298

#300

#304

#306

#307

#310

#311

#311

#312

#313

#313

#317

#324

#324

#326

#332

#334

#336

#336

#338

#338

#34

#347

#348

#349

#349

#350

#350

#353

#363

#363

#365

#365

#366

#372

#377

#377

#38

#38

#392

#392

#396

#397

#397

#40

#403

#406

#409

#409

#410

#411

#412

#412

#413

#414

#414

#418

#419

#420

#421

#422

#423

#427

#429

#435

#435

#436

#437

#437

#439

#439

#442

#445

#45

#450

#451

#452

#460

#463

#47

#471

#476

#476

#477

#478

#479

#483

#483

#485

#485

#486

#49

#490

#490

#491

#491

#492

#494

#5

#502

#502

#507

#507

#510

#510

#512

#517

#523

#526

#528

#533

#536

#537

#540

#540

#544

#548

#549

#549

#550

#551

#571

#571

#572

#573

#580

#581

#583

#583

#584

#584

#587

#589

#596

#596

#597

#598

#599

#602

#605

#621

#624

#624

#630

#630

#632

#632

#634

#634

#636

#638

#638

#647

#65

#650

#650

#654

#66

#661

#664

#664

#665

#668

#674

#675

#678

#679

#679

#68

#685

#687

#687

#688

#69

#69

#699

#70

#708

#708

#709

#709

#712

#714

#714

#716

#718

#719

#719

#726

#727

#728

#73

#732

#733

#734

#735

#739

#739

#74

#743

#743

#744

#751

#754

#754

#755

#756

#757

#757

#760

#760

#763

#766

#767

#767

#768

#769

#77

#770

#770

#771

#772

#773

#774

#774

#775

#775

#776

#780

#780

#786

#787

#789

#791

#793

#794

#794

#795

#798

#80

#80

#804

#805

#805

#806

#808

#808

#810

#810

#811

#811

#818

#818

#821

#822

#823

#837

#840

#840

#846

#846

#857

#868

#868

#87

#870

#874

#874

#875

#876

#876

#879

#88

#880

#883

#883

#886

#887

#887

#889

#89

#891

#891

#894

#897

#897

#90

#900

#902

#904

#904

#906

#906

#908

#909

#914

#914

#917

#917

#92

#927

#931

#936

#938

#938

#939

#940

#946

#946

#947

#947

#948

#948

#949

#951

#952

#955

#955

#956

#956

#957

#957

#958

#958

#959

#959

#960

#961

#962

#962

#965

#97

#97

#970

#972

#974

#975

#975

#976

#976

#983

#984

#988

#992

#996

14.08-beta

v0.01

v0.02

v0.03

v0.04

v0.05

v0.06

v0.07

v0.08

v0.09

v0.10

v0.11

v0.11b

v0.12

v0.12b

v0.12c

v0.13a

v0.13b

v0.14

v0.15

v0.15-rc1

v0.15a

v0.16

v0.17

v0.17b

v0.17c

v0.18

v0.18b

v0.18c

v0.19

v0.19a

v0.19b

v0.20

v0.21

v0.21b

v0.21c

v0.22

v0.23

v0.23a

v0.24

v0.25

v0.26

v0.26b

v0.26c

v0.27

v0.28

v0.29

v0.30

v0.40

v0.41

v0.42

v0.42b

v0.43

v0.44

v0.45

v0.46

v0.47

v0.48

v0.50

v0.51

v0.52

v0.53

v0.53a

v0.54

v55

v56

v57

v57a

v60

v60.1

v61

v61.1

v62

v63

v64

v65

v66

v67

v68

v69

v69a

v69b

v70

Mono Color

• 37e626df77 Delete zpush.sh Josh Harmon 2016-07-24 17:28:17 -0700
• 19b08c61d2 Update index.html Josh Harmon 2016-07-24 17:27:37 -0700
• f8bf686b4b Update mail-postfix.sh Josh Harmon 2016-07-24 17:25:40 -0700
• 13cb4357de Update www_default.html Josh Harmon 2016-07-24 17:23:57 -0700
• 7c526313fd per Yodax suggestion used built in python tool I was unaware existed. ChiefGyk 2016-07-21 12:15:58 -0400
• 125405edfb Merge master Michael Kroes 2016-07-21 16:30:03 +0200
• 5bec8014fc added it under the firewall conditions so it will run only if enabled ChiefGyk 2016-07-20 17:12:23 -0400
• bf8e095b36 added grep to see if ciphers were already added for when rerunning the script ChiefGyk 2016-07-20 16:46:38 -0400
• 46627f98ef Remove HTTP_PROXY from mail and zpush Michael Kroes 2016-07-19 07:45:03 +0200
• dc19a614ce Strip HTTP_PROXY from requests to php-fpm and Flask Michael Kroes 2016-07-19 05:38:35 +0200
• 4d00d8be9b Allow i686 as a supported architecture. This is checked during preflight. See https://github.com/mail-in-a-box/mailinabox/issues/885 Michael Kroes 2016-07-17 07:40:09 +0200
• e069eb9940 Add trailing slash when checking a remote backup. Also check if we actually can read the remote size Michael Kroes 2016-07-16 11:25:39 +0200
• 5454a5f06b Remove nohup from ssh-keygen so errors aren't hidden. Also only generate a key if none exists yet Michael Kroes 2016-07-16 07:00:53 +0200
• 6f899033e4 fixed some spacing and missing TLSv1+HIGH ChiefGyk 2016-07-14 20:42:20 -0400
• 5be322aa04 hardened dovecot, learning postfix now used tips per https://bettercrypto.org/static/applied-crypto-hardening.pdf ChiefGyk 2016-07-14 20:09:48 -0400
• 6b6bda520a only enabled recommended MAC and ciphers per research. Added this after it was revealed via OpenVAS ChiefGyk 2016-07-14 19:36:11 -0400
• be8ae6619c added repo of ipset-assassin for easier modification by me as I update the root project for this. ChiefGyk 2016-07-02 18:56:21 -0400
• 8f4941a3c5 removed optional GeoIP and Tor exit node blocking. Can be readded if need be later, or by using the root project ChiefGyk 2016-07-02 18:34:34 -0400
• 5abc9c3ec5 added MaxMind, StopForumSpam, and Greensnow addresses to ipset lists. ChiefGyk 2016-07-02 18:29:07 -0400
• c02be38f07 Added MaxMind, StopForumSpam, and GreenSnow to the list of ipset filters ChiefGyk 2016-07-02 18:24:45 -0400
• 2d51e5d0ab code fix ChiefGyk 2016-06-30 16:38:52 -0400
• 894fdc1d21 updated readme ChiefGyk 2016-06-30 15:21:34 -0400
• 24a2062ca6 updated readme ChiefGyk 2016-06-30 15:21:06 -0400
• 025dc9a02b updated readme ChiefGyk 2016-06-30 15:19:35 -0400
• 1cdf97158f updated readme ChiefGyk 2016-06-30 15:18:58 -0400
• 99a852ad34 updated readme ChiefGyk 2016-06-30 15:17:01 -0400
• 0337dc3eb0 Merge branch '2.41' ChiefGyk 2016-06-30 15:05:20 -0400
• 55ab6ec99a readme ChiefGyk 2016-06-30 15:04:44 -0400
• f3b1309971 clutter ChiefGyk 2016-06-30 15:00:52 -0400
• e70eabbd21 clutter ChiefGyk 2016-06-30 14:59:29 -0400
• 22d173ff80 credits ChiefGyk 2016-06-30 14:56:27 -0400
• a9fa2533b6 credit fixes ChiefGyk 2016-06-30 14:37:21 -0400
• 9d3f7df679 merging and credits, added malc0de IP blacklist ChiefGyk 2016-06-30 14:34:06 -0400
• 8a6e59af47 wrong link Alon Ganon 2016-06-30 09:28:21 -0400
• 5c5fc025c2 fixed minor issue Alon Ganon 2016-06-30 09:25:46 -0400
• 18cd0c6902 removed dialog.sh which had the geoblock options, and fixed typo in tor.sh for the optional tor exit node block ChiefGyk 2016-06-30 08:57:35 -0400
• f02acfe0c5 fixed typo ChiefGyk 2016-06-30 08:56:43 -0400
• 795ca8a2e0 removed redundant dialog.sh ChiefGyk 2016-06-30 08:30:00 -0400
• 0d69474688 updated added tor exit node being optional ChiefGyk 2016-06-30 08:29:22 -0400
• 6556da1e65 removed geoblocks, made tor exit node blocking optional during setup via yes/no dialog which will comment out the appropriate line in /etc/cron.daily/blacklist. Rearranged some code, deleted some files and clutter. ChiefGyk 2016-06-30 08:20:47 -0400
• c478125269 Update README.md Alon Ganon 2016-06-29 21:43:36 -0400
• 88365d43ac polished, more finalized, from now on minor features added (lists, new countries), but the foundation I believe is complete ChiefGyk 2016-06-29 21:37:56 -0400
• 52410106e9 replaced iptables-persistent with another iptables-persistent in /etc/init.d, this one also will save ipsets and allow persistence upon reboot. Cleaned up some code, changed debconf variables at iptables-persistent install to false. Still installs iptable-persistant through apt, just to get rid of all the foundation work for it to run, but is quickly replaced. ChiefGyk 2016-06-29 21:35:37 -0400
• 6ee8852a67 removed apt installing iptables-persistent, now manually adding it ChiefGyk 2016-06-29 21:28:20 -0400
• 4645806675 readme tweaks and other fixes ChiefGyk 2016-06-29 21:20:24 -0400
• 67e40c07b8 moved persistence to front, pulled iptables-persistence from another github and forked it. Using that in /etc/init.d/iptables-persistent so it handles ipset as well to make things easier. Also allows you to load and save much easier for both iptables and ipset. ChiefGyk 2016-06-29 21:07:11 -0400
• a1698f82ef ipset persistence, and fixes ChiefGyk 2016-06-29 20:50:33 -0400
• 84040e56f8 fixes ChiefGyk 2016-06-29 20:14:07 -0400
• b66ab07ea0 fixed a bug with unable to reload network interface ChiefGyk 2016-06-29 19:56:01 -0400
• 3d7f9bdbea Merge 8a06d0aa8b into 82903cd09e Michael Kroes 2016-06-29 23:42:10 +0000
• c15aa078b7 added #!/bin/bash to install.sh ChiefGyk 2016-06-29 19:09:17 -0400
• 8316782cdb removing unneccessary clutter ChiefGyk 2016-06-29 18:52:00 -0400
• 835c8e0d74 Merge branch '2.2' ChiefGyk 2016-06-29 18:37:42 -0400
• 86a504713e added dshield ChiefGyk 2016-06-29 18:36:55 -0400
• 9b3a158b72 Added Dshield, to automatically block the top 20 malicious IP blocks each day. It is merged into blacklist which will run in cron.daily. So ipset blocks the majority of addresses from lists, and IPTables does the blocks. ChiefGyk 2016-06-29 18:33:09 -0400
• 66a542d666 dialog fix ChiefGyk 2016-06-29 18:27:01 -0400
• b9a9b46707 merging dshield and blacklist cron together ChiefGyk 2016-06-29 18:23:46 -0400
• fe8acc8e44 trying to get the blacklist and dshield merged ChiefGyk 2016-06-29 18:13:18 -0400
• 4286eff0bd changing IPtable settings ChiefGyk 2016-06-29 17:55:36 -0400
• 06f4a1d55c changing IPtable settings ChiefGyk 2016-06-29 17:54:21 -0400
• 10aef791d7 dshield ChiefGyk 2016-06-29 17:49:54 -0400
• 7dffae1cb3 Closing China, calls you 'Mr.Trump' ChiefGyk 2016-06-29 16:01:08 -0400
• 61780b8ae7 added optional geoblock lists that update weekly for China, and Korea as they create a lot of spam. They are added via IPtables as they are added in blocks. ChiefGyk 2016-06-29 15:39:41 -0400
• d5df6ff09d added geo-blocking ChiefGyk 2016-06-29 15:24:29 -0400
• adf7ca25ea added ability to optionally block Korean and/or Chinese IP address blocks towards the end via a dialog box. ChiefGyk 2016-06-29 15:23:13 -0400
• aca54c66bf fixing stuff ChiefGyk 2016-06-29 15:00:35 -0400
• 345fd9e787 added do nothing option to dialog ChiefGyk 2016-06-29 14:53:23 -0400
• 1b825f9bc4 fixing window size ChiefGyk 2016-06-29 14:50:12 -0400
• ee41ba2366 fixing window size ChiefGyk 2016-06-29 14:49:25 -0400
• c563970355 added dialog and blocks for korea as well as China ChiefGyk 2016-06-29 14:45:36 -0400
• 8efe6c933f added Malware Domain list and ZeusTracker ChiefGyk 2016-06-29 14:18:43 -0400
• 1437f7c891 dialog for china and korea ChiefGyk 2016-06-29 13:49:22 -0400
• a8eb27dc3f added malware domain list and zeus tracker ChiefGyk 2016-06-29 13:09:33 -0400
• 097adec5d2 polish ChiefGyk 2016-06-29 12:37:46 -0400
• 162f580e68 moved the comments around so it looked nicer on my other computer ChiefGyk 2016-06-29 12:34:17 -0400
• 324f5666f2 removed an unneeded line ChiefGyk 2016-06-29 12:31:59 -0400
• a0185aca95 typo ChiefGyk 2016-06-29 11:54:32 -0400
• 3824d20faa fixed comments in script ChiefGyk 2016-06-29 11:53:07 -0400
• 02b014527b added link to original project ChiefGyk 2016-06-29 11:48:26 -0400
• 5a40ff0bc6 updated readme ChiefGyk 2016-06-29 11:35:24 -0400
• 9ed4952474 updated readme ChiefGyk 2016-06-29 11:31:08 -0400
• 1edd94ba39 added persistence by adding a couple lines to /etc/network/interfaces. It will automatically load at start, save each time the cron.daily runs, so if you need to reboot the ipset is loaded again. ChiefGyk 2016-06-29 11:14:03 -0400
• 33bcd10278 fixing persistence with ipset ChiefGyk 2016-06-29 11:01:53 -0400
• 4f0096c3c2 somes code fixes and lines added for fixes ChiefGyk 2016-06-29 10:18:56 -0400
• ef5f90e02c changed name from blocklist to blacklist to keep more uniform ChiefGyk 2016-06-29 09:38:08 -0400
• 39644bd29e Now using ipset, added more lists, resarched and looked around for how to script it better. Now all will be able to wget from wizcraft (blocked my VPS, but not local machine so I suspect IP blocks are blocked from them), however there seems to be a lot of overlap of the addresses so I don't think it will be an issue. Averages around ~47,000 IP addresses as opposed to the original couple thousand just from blocklist.de. Does not require Fail2Ban to work just iptables, and of course iptables-persistent to keep changes. ChiefGyk 2016-06-29 09:32:16 -0400
• 022752d0bb polished ChiefGyk 2016-06-29 09:18:24 -0400
• ed8881afc9 double checking lists ChiefGyk 2016-06-29 09:05:39 -0400
• a931ec80ad rewrote blacklist with more lists, and ipset ChiefGyk 2016-06-29 08:52:17 -0400
• 74e5dba3ba testing all lists ChiefGyk 2016-06-29 08:24:43 -0400
• 619e1a7265 added some bad url list ChiefGyk 2016-06-29 08:18:00 -0400
• 957f3a9b08 removed some lists for testing ChiefGyk 2016-06-29 08:14:21 -0400
• 4f9b926dba used xargs to make it a bit easier for script, had it make /etc/iptables then copy blocklist.txt to there, which the cron.daily will continuously read from for it's lists ChiefGyk 2016-06-29 08:06:54 -0400
• 1b17b25e9e added mishing back slash for lists ChiefGyk 2016-06-29 07:48:47 -0400
• b04bcf1d47 added a bunch of filters for email/webmail servers ChiefGyk 2016-06-29 07:45:48 -0400
• 3249a55f3a added API info to users page template schlypel 2016-06-29 13:35:42 +0200
• b58fb54725 added API info to aliases page template schlypel 2016-06-29 13:34:54 +0200
• b4154ad1bd removed unneeded sudo ChiefGyk 2016-06-29 07:28:45 -0400
• 6c808a5654 fixed unneccessary sudo, added part to load global variables. ChiefGyk 2016-06-29 07:26:34 -0400
• ffe7efef96 Add HSTS to the control panel headers Michael Kroes 2016-06-29 08:33:41 +0200