Commit Graph

  • c563970355 added dialog and blocks for korea as well as China ChiefGyk 2016-06-29 14:45:36 -0400
  • 8efe6c933f added Malware Domain list and ZeusTracker ChiefGyk 2016-06-29 14:18:43 -0400
  • 1437f7c891 dialog for china and korea ChiefGyk 2016-06-29 13:49:22 -0400
  • a8eb27dc3f added malware domain list and zeus tracker ChiefGyk 2016-06-29 13:09:33 -0400
  • 097adec5d2 polish ChiefGyk 2016-06-29 12:37:46 -0400
  • 162f580e68 moved the comments around so it looked nicer on my other computer ChiefGyk 2016-06-29 12:34:17 -0400
  • 324f5666f2 removed an unneeded line ChiefGyk 2016-06-29 12:31:59 -0400
  • a0185aca95 typo ChiefGyk 2016-06-29 11:54:32 -0400
  • 3824d20faa fixed comments in script ChiefGyk 2016-06-29 11:53:07 -0400
  • 02b014527b added link to original project ChiefGyk 2016-06-29 11:48:26 -0400
  • 5a40ff0bc6 updated readme ChiefGyk 2016-06-29 11:35:24 -0400
  • 9ed4952474 updated readme ChiefGyk 2016-06-29 11:31:08 -0400
  • 1edd94ba39 added persistence by adding a couple lines to /etc/network/interfaces. It will automatically load at start, save each time the cron.daily runs, so if you need to reboot the ipset is loaded again. ChiefGyk 2016-06-29 11:14:03 -0400
  • 33bcd10278 fixing persistence with ipset ChiefGyk 2016-06-29 11:01:53 -0400
  • 4f0096c3c2 somes code fixes and lines added for fixes ChiefGyk 2016-06-29 10:18:56 -0400
  • ef5f90e02c changed name from blocklist to blacklist to keep more uniform ChiefGyk 2016-06-29 09:38:08 -0400
  • 39644bd29e Now using ipset, added more lists, resarched and looked around for how to script it better. Now all will be able to wget from wizcraft (blocked my VPS, but not local machine so I suspect IP blocks are blocked from them), however there seems to be a lot of overlap of the addresses so I don't think it will be an issue. Averages around ~47,000 IP addresses as opposed to the original couple thousand just from blocklist.de. Does not require Fail2Ban to work just iptables, and of course iptables-persistent to keep changes. ChiefGyk 2016-06-29 09:32:16 -0400
  • 022752d0bb polished ChiefGyk 2016-06-29 09:18:24 -0400
  • ed8881afc9 double checking lists ChiefGyk 2016-06-29 09:05:39 -0400
  • a931ec80ad rewrote blacklist with more lists, and ipset ChiefGyk 2016-06-29 08:52:17 -0400
  • 74e5dba3ba testing all lists ChiefGyk 2016-06-29 08:24:43 -0400
  • 619e1a7265 added some bad url list ChiefGyk 2016-06-29 08:18:00 -0400
  • 957f3a9b08 removed some lists for testing ChiefGyk 2016-06-29 08:14:21 -0400
  • 4f9b926dba used xargs to make it a bit easier for script, had it make /etc/iptables then copy blocklist.txt to there, which the cron.daily will continuously read from for it's lists ChiefGyk 2016-06-29 08:06:54 -0400
  • 1b17b25e9e added mishing back slash for lists ChiefGyk 2016-06-29 07:48:47 -0400
  • b04bcf1d47 added a bunch of filters for email/webmail servers ChiefGyk 2016-06-29 07:45:48 -0400
  • 3249a55f3a added API info to users page template schlypel 2016-06-29 13:35:42 +0200
  • b58fb54725 added API info to aliases page template schlypel 2016-06-29 13:34:54 +0200
  • b4154ad1bd removed unneeded sudo ChiefGyk 2016-06-29 07:28:45 -0400
  • 6c808a5654 fixed unneccessary sudo, added part to load global variables. ChiefGyk 2016-06-29 07:26:34 -0400
  • ffe7efef96 Add HSTS to the control panel headers Michael Kroes 2016-06-29 08:33:41 +0200
  • dff698425d updated readme ChiefGyk 2016-06-28 19:02:02 -0400
  • 409cbbe014 updated readme ChiefGyk 2016-06-28 18:59:58 -0400
  • 688ab401e2 updated readme ChiefGyk 2016-06-28 18:58:46 -0400
  • 9d814940f9 Made script check to see if you are running as root ChiefGyk 2016-06-28 18:54:47 -0400
  • 2bdae89d24 polished and finalized, removed two last lines in blocklist.sh. They were redundant. ChiefGyk 2016-06-28 16:26:52 -0400
  • b65dc98966 made executable ChiefGyk 2016-06-28 16:24:11 -0400
  • bddddcb3fd removed unnecessary lines ChiefGyk 2016-06-28 16:21:45 -0400
  • d27cb57d0c moved blocklist installation to its own script, and moved it to the end of the installation, even after the first user so it can setup all the iptables after everything has been setup ChiefGyk 2016-06-28 16:19:59 -0400
  • f054128a65 added script ChiefGyk 2016-06-28 16:12:16 -0400
  • f14a41f4b7 Initial commit Alon Ganon 2016-06-28 16:08:58 -0400
  • d52f11710c fixed iptables-persistent saving in the cron.daily for sync-fail2ban ChiefGyk 2016-06-28 16:02:43 -0400
  • 89274c6411 automated the iptables-persistent installation so it doesn't require user interaction ChiefGyk 2016-06-28 15:57:04 -0400
  • 273078b03e added IPTables persistence and for it to save changes ChiefGyk 2016-06-28 15:38:11 -0400
  • ce35ef3382 Merge 41ecc4aab8 into 82903cd09e Alon Ganon 2016-06-28 17:32:59 +0000
  • 41ecc4aab8 Adds Fail2ban jails for nginx-http-auth, nginx-badbots, and owncloud, also needed to add original author credit to nginxjails ChiefGyk 2016-06-28 13:32:53 -0400
  • d46176a3c3 forgot to switch branches before submitting commits ChiefGyk 2016-06-28 13:30:38 -0400
  • 484c9f2dbe blocklist added to upstream master of 0.18c ChiefGyk 2016-06-28 13:00:21 -0400
  • 5ed8803cc1 RKHunter added during installation and setup for cronjobs ChiefGyk 2016-06-28 12:46:27 -0400
  • 23f2b1688f reset ChiefGyk 2016-06-28 12:31:21 -0400
  • c05312664d Merge branch 'master' of https://github.com/mail-in-a-box/mailinabox ChiefGyk 2016-06-28 12:03:55 -0400
  • 3a1313144b moved blocklist script locally within installation ChiefGyk 2016-06-27 09:38:14 -0400
  • 406f991be3 fixed error in my script copying nginx-badbots ChiefGyk 2016-06-27 09:30:01 -0400
  • 20bf710b28 removed some more clutter from jail.local ChiefGyk 2016-06-27 09:21:29 -0400
  • 82903cd09e Merge pull request #857 from biermeester/master Joshua Tauberer 2016-06-27 06:17:16 -0400
  • 299486f0fb Merge fab931c12b into fb14e30feb Michael Kroes 2016-06-27 10:06:51 +0000
  • fb14e30feb Remove owncloud log configuration from initial setup and only apply it during the configuration updates. This applies to both the timezone and the log format Michael Kroes 2016-06-27 05:19:12 +0200
  • d9ac321f25 Owncloud needs more time to detect blocks. It doesn't respond as fast as the other services. Also owncloud logs UTC (since latest update) even though the timezone is not UTC. Also to detect a block, we get a timeout instead of a refused) Michael Kroes 2016-06-26 14:17:12 +0200
  • bf5e9200f8 Update owncloud url to use webdav and increase http timeout Michael Kroes 2016-06-26 13:26:42 +0200
  • 7f89d7cb82 added line for rkhunter to first update when installed. ChiefGyk 2016-06-27 04:32:06 -0400
  • b76c9330c5 some fixes to fail2ban filters and jail.local ChiefGyk 2016-06-27 04:13:56 -0400
  • 5265839681 made rkhunter create a local file per suggestions ChiefGyk 2016-06-27 04:10:39 -0400
  • 3701676304 fixed miab-munin.conf ChiefGyk 2016-06-27 04:01:51 -0400
  • 187b28dc51 committed a fix for owncloud filter. Lack of caffeine caused me to enter a wrong part of my script ChiefGyk 2016-06-27 03:58:30 -0400
  • fab931c12b Remove owncloud log configuration from initial setup and only apply it during the configuration updates. This applies to both the timezone and the log format Michael Kroes 2016-06-27 05:19:12 +0200
  • cb35e6dd96 extended owncloud filter find time ChiefGyk 2016-06-26 20:06:53 -0400
  • fd457e187c fixed some issues with warnings due to there not being a variable set for PKGMG=DPKG ChiefGyk 2016-06-26 19:53:30 -0400
  • ab3fbad0b8 a couple minor changes to Fail2Ban #870 fixed a couple variables, copied owncloud.conf fail2ban from my own owncloud 9 server for my own business. Though it is commented out ChiefGyk 2016-06-26 13:37:21 -0400
  • 933668f156 had rkhunter --propupd run before configs were changed. Fixed for #869, also added a crontab for RKHunter to automatically run daily at 4:15AM ChiefGyk 2016-06-26 12:57:54 -0400
  • e0b333843a had rkhunter --propupd run before configs were changed. Fixed for #869 ChiefGyk 2016-06-26 12:48:26 -0400
  • 4f4ec5436a added RKHunter to system.sh on lines 122-134 per #869 and made it run everytime apt launches to install or update. This should help prevent rootkits. I also added a config to whitelist certain things ChiefGyk 2016-06-26 12:44:39 -0400
  • 994727d2cd added script which automatically adds IP addresses which have been reported to be attacking other servers. It will update the IPTables automatically everyday, as well as perform the initial run the first day. As mentioned in #864 on the origin ChiefGyk 2016-06-26 11:06:40 -0400
  • 6f1315f93a added missing log location for jail.local ChiefGyk 2016-06-26 11:03:30 -0400
  • 3b1b70ed16 added Fail2ban filters from #866, #767, and #798 on main branch ChiefGyk 2016-06-26 10:57:59 -0400
  • 02e1598aad Owncloud needs more time to detect blocks. It doesn't respond as fast as the other services. Also owncloud logs UTC (since latest update) even though the timezone is not UTC. Also to detect a block, we get a timeout instead of a refused) Michael Kroes 2016-06-26 14:17:12 +0200
  • 4cd56df734 Update owncloud url to use webdav and increase http timeout Michael Kroes 2016-06-26 13:26:42 +0200
  • 5f8173775b Merge remote-tracking branch 'upstream/fail2banjails' into fail2banjails Michael Kroes 2016-06-26 13:11:43 +0200
  • 5f5f00af4a for DANE, the smtp_tls_mandatory_protocols setting seems like it also needs to be set (unlike the cipher settings, this isn't documented to be in addition to the non-mandatory setting) Joshua Tauberer 2016-06-12 09:08:08 -0400
  • 6b73bb5d80 outbound SMTP connections should use the same TLS settings as inbound: drop SSLv2, SSLv3, anonymous ciphers, RC4 Joshua Tauberer 2016-06-12 08:59:53 -0400
  • 3055f9a79c drop SSLv3, RC4 ciphers from SMTP port 25 Joshua Tauberer 2016-06-12 08:50:31 -0400
  • 1c84e0aeb6 Added received mail count to hourly activity overview in mail log management script Rinze 2016-06-10 13:08:57 +0200
  • ae1b56d23f Added POP3 support to mail log management script Rinze 2016-06-10 11:19:03 +0200
  • 946cd63e8e Mail log management script cleanup Rinze 2016-06-10 10:32:32 +0200
  • 01fa8cf72c add fail2ban jails for ownCloud, postfix submission, roundcube, and the Mail-in-a-Box management daemon Michael Kroes 2016-04-13 17:52:13 -0400
  • bdede19659 Merge 7362b2cbc4 into fac8477ba1 Chris Blankenship 2016-06-06 12:26:37 +0000
  • fac8477ba1 Configured Dovecot to log into its own logfile Chris Blankenship 2016-04-26 10:49:25 -0700
  • 61744095a8 Update Roundcube to 1.2.0 aspdye 2016-05-24 08:15:51 +0200
  • d5b38a27e6 run roundcube's database migration script on every update Joshua Tauberer 2016-06-02 07:47:32 -0400
  • 93b70a967c Merge 9047a97e8a into 6666d28c44 Scott Bronson 2016-06-03 07:47:42 +0000
  • 816c560866 Merge 4155b5626d into 6666d28c44 Felix 2016-06-03 07:47:26 +0000
  • 6666d28c44 v0.18c v0.18c Joshua Tauberer 2016-06-02 15:47:45 -0400
  • 66675ff2e9 Dovecot LMTP accepted all mail regardless of whether destination was a user, broken by ae8cd4ef, fixes #852 Joshua Tauberer 2016-06-02 07:42:53 -0400
  • 8fbfc1c0d2 Merge 181c1d226c into 9ee2d946b7 aspdye 2016-05-29 14:23:08 +0000
  • 181c1d226c Update Hash aspdye 2016-05-29 16:23:07 +0200
  • ebd6d0e1bd Update ios-profile.xml aspdye 2016-05-29 16:15:29 +0200
  • cc7aa347e0 Update backend_caldav.php aspdye 2016-05-29 16:12:39 +0200
  • 7706bf2422 Update backend_carddav.php aspdye 2016-05-29 16:12:23 +0200
  • c6e7087b24 Update backend_caldav.php aspdye 2016-05-29 16:10:02 +0200
  • c963c94540 Update owncloud.sh aspdye 2016-05-29 15:55:09 +0200
  • ad295301cb cleanup Joel Kåberg 2016-05-24 20:05:31 +0200