1
0
mirror of https://github.com/mail-in-a-box/mailinabox.git synced 2025-06-09 19:10:54 +00:00

Commit Graph

  • f02acfe0c5 fixed typo ChiefGyk 2016-06-30 08:56:43 -0400
  • 795ca8a2e0 removed redundant dialog.sh ChiefGyk 2016-06-30 08:30:00 -0400
  • 0d69474688 updated added tor exit node being optional ChiefGyk 2016-06-30 08:29:22 -0400
  • 6556da1e65 removed geoblocks, made tor exit node blocking optional during setup via yes/no dialog which will comment out the appropriate line in /etc/cron.daily/blacklist. Rearranged some code, deleted some files and clutter. ChiefGyk 2016-06-30 08:20:47 -0400
  • c478125269 Update README.md Alon Ganon 2016-06-29 21:43:36 -0400
  • 88365d43ac polished, more finalized, from now on minor features added (lists, new countries), but the foundation I believe is complete ChiefGyk 2016-06-29 21:37:56 -0400
  • 52410106e9 replaced iptables-persistent with another iptables-persistent in /etc/init.d, this one also will save ipsets and allow persistence upon reboot. Cleaned up some code, changed debconf variables at iptables-persistent install to false. Still installs iptable-persistant through apt, just to get rid of all the foundation work for it to run, but is quickly replaced. ChiefGyk 2016-06-29 21:35:37 -0400
  • 6ee8852a67 removed apt installing iptables-persistent, now manually adding it ChiefGyk 2016-06-29 21:28:20 -0400
  • 4645806675 readme tweaks and other fixes ChiefGyk 2016-06-29 21:20:24 -0400
  • 67e40c07b8 moved persistence to front, pulled iptables-persistence from another github and forked it. Using that in /etc/init.d/iptables-persistent so it handles ipset as well to make things easier. Also allows you to load and save much easier for both iptables and ipset. ChiefGyk 2016-06-29 21:07:11 -0400
  • a1698f82ef ipset persistence, and fixes ChiefGyk 2016-06-29 20:50:33 -0400
  • 84040e56f8 fixes ChiefGyk 2016-06-29 20:14:07 -0400
  • b66ab07ea0 fixed a bug with unable to reload network interface ChiefGyk 2016-06-29 19:56:01 -0400
  • 3d7f9bdbea Merge 8a06d0aa8b into 82903cd09e Michael Kroes 2016-06-29 23:42:10 +0000
  • c15aa078b7 added #!/bin/bash to install.sh ChiefGyk 2016-06-29 19:09:17 -0400
  • 8316782cdb removing unneccessary clutter ChiefGyk 2016-06-29 18:52:00 -0400
  • 835c8e0d74 Merge branch '2.2' ChiefGyk 2016-06-29 18:37:42 -0400
  • 86a504713e added dshield ChiefGyk 2016-06-29 18:36:55 -0400
  • 9b3a158b72 Added Dshield, to automatically block the top 20 malicious IP blocks each day. It is merged into blacklist which will run in cron.daily. So ipset blocks the majority of addresses from lists, and IPTables does the blocks. ChiefGyk 2016-06-29 18:33:09 -0400
  • 66a542d666 dialog fix ChiefGyk 2016-06-29 18:27:01 -0400
  • b9a9b46707 merging dshield and blacklist cron together ChiefGyk 2016-06-29 18:23:46 -0400
  • fe8acc8e44 trying to get the blacklist and dshield merged ChiefGyk 2016-06-29 18:13:18 -0400
  • 4286eff0bd changing IPtable settings ChiefGyk 2016-06-29 17:55:36 -0400
  • 06f4a1d55c changing IPtable settings ChiefGyk 2016-06-29 17:54:21 -0400
  • 10aef791d7 dshield ChiefGyk 2016-06-29 17:49:54 -0400
  • 7dffae1cb3 Closing China, calls you 'Mr.Trump' ChiefGyk 2016-06-29 16:01:08 -0400
  • 61780b8ae7 added optional geoblock lists that update weekly for China, and Korea as they create a lot of spam. They are added via IPtables as they are added in blocks. ChiefGyk 2016-06-29 15:39:41 -0400
  • d5df6ff09d added geo-blocking ChiefGyk 2016-06-29 15:24:29 -0400
  • adf7ca25ea added ability to optionally block Korean and/or Chinese IP address blocks towards the end via a dialog box. ChiefGyk 2016-06-29 15:23:13 -0400
  • aca54c66bf fixing stuff ChiefGyk 2016-06-29 15:00:35 -0400
  • 345fd9e787 added do nothing option to dialog ChiefGyk 2016-06-29 14:53:23 -0400
  • 1b825f9bc4 fixing window size ChiefGyk 2016-06-29 14:50:12 -0400
  • ee41ba2366 fixing window size ChiefGyk 2016-06-29 14:49:25 -0400
  • c563970355 added dialog and blocks for korea as well as China ChiefGyk 2016-06-29 14:45:36 -0400
  • 8efe6c933f added Malware Domain list and ZeusTracker ChiefGyk 2016-06-29 14:18:43 -0400
  • 1437f7c891 dialog for china and korea ChiefGyk 2016-06-29 13:49:22 -0400
  • a8eb27dc3f added malware domain list and zeus tracker ChiefGyk 2016-06-29 13:09:33 -0400
  • 097adec5d2 polish ChiefGyk 2016-06-29 12:37:46 -0400
  • 162f580e68 moved the comments around so it looked nicer on my other computer ChiefGyk 2016-06-29 12:34:17 -0400
  • 324f5666f2 removed an unneeded line ChiefGyk 2016-06-29 12:31:59 -0400
  • a0185aca95 typo ChiefGyk 2016-06-29 11:54:32 -0400
  • 3824d20faa fixed comments in script ChiefGyk 2016-06-29 11:53:07 -0400
  • 02b014527b added link to original project ChiefGyk 2016-06-29 11:48:26 -0400
  • 5a40ff0bc6 updated readme ChiefGyk 2016-06-29 11:35:24 -0400
  • 9ed4952474 updated readme ChiefGyk 2016-06-29 11:31:08 -0400
  • 1edd94ba39 added persistence by adding a couple lines to /etc/network/interfaces. It will automatically load at start, save each time the cron.daily runs, so if you need to reboot the ipset is loaded again. ChiefGyk 2016-06-29 11:14:03 -0400
  • 33bcd10278 fixing persistence with ipset ChiefGyk 2016-06-29 11:01:53 -0400
  • 4f0096c3c2 somes code fixes and lines added for fixes ChiefGyk 2016-06-29 10:18:56 -0400
  • ef5f90e02c changed name from blocklist to blacklist to keep more uniform ChiefGyk 2016-06-29 09:38:08 -0400
  • 39644bd29e Now using ipset, added more lists, resarched and looked around for how to script it better. Now all will be able to wget from wizcraft (blocked my VPS, but not local machine so I suspect IP blocks are blocked from them), however there seems to be a lot of overlap of the addresses so I don't think it will be an issue. Averages around ~47,000 IP addresses as opposed to the original couple thousand just from blocklist.de. Does not require Fail2Ban to work just iptables, and of course iptables-persistent to keep changes. ChiefGyk 2016-06-29 09:32:16 -0400
  • 022752d0bb polished ChiefGyk 2016-06-29 09:18:24 -0400
  • ed8881afc9 double checking lists ChiefGyk 2016-06-29 09:05:39 -0400
  • a931ec80ad rewrote blacklist with more lists, and ipset ChiefGyk 2016-06-29 08:52:17 -0400
  • 74e5dba3ba testing all lists ChiefGyk 2016-06-29 08:24:43 -0400
  • 619e1a7265 added some bad url list ChiefGyk 2016-06-29 08:18:00 -0400
  • 957f3a9b08 removed some lists for testing ChiefGyk 2016-06-29 08:14:21 -0400
  • 4f9b926dba used xargs to make it a bit easier for script, had it make /etc/iptables then copy blocklist.txt to there, which the cron.daily will continuously read from for it's lists ChiefGyk 2016-06-29 08:06:54 -0400
  • 1b17b25e9e added mishing back slash for lists ChiefGyk 2016-06-29 07:48:47 -0400
  • b04bcf1d47 added a bunch of filters for email/webmail servers ChiefGyk 2016-06-29 07:45:48 -0400
  • 3249a55f3a added API info to users page template schlypel 2016-06-29 13:35:42 +0200
  • b58fb54725 added API info to aliases page template schlypel 2016-06-29 13:34:54 +0200
  • b4154ad1bd removed unneeded sudo ChiefGyk 2016-06-29 07:28:45 -0400
  • 6c808a5654 fixed unneccessary sudo, added part to load global variables. ChiefGyk 2016-06-29 07:26:34 -0400
  • ffe7efef96 Add HSTS to the control panel headers Michael Kroes 2016-06-29 08:33:41 +0200
  • dff698425d updated readme ChiefGyk 2016-06-28 19:02:02 -0400
  • 409cbbe014 updated readme ChiefGyk 2016-06-28 18:59:58 -0400
  • 688ab401e2 updated readme ChiefGyk 2016-06-28 18:58:46 -0400
  • 9d814940f9 Made script check to see if you are running as root ChiefGyk 2016-06-28 18:54:47 -0400
  • 2bdae89d24 polished and finalized, removed two last lines in blocklist.sh. They were redundant. ChiefGyk 2016-06-28 16:26:52 -0400
  • b65dc98966 made executable ChiefGyk 2016-06-28 16:24:11 -0400
  • bddddcb3fd removed unnecessary lines ChiefGyk 2016-06-28 16:21:45 -0400
  • d27cb57d0c moved blocklist installation to its own script, and moved it to the end of the installation, even after the first user so it can setup all the iptables after everything has been setup ChiefGyk 2016-06-28 16:19:59 -0400
  • f054128a65 added script ChiefGyk 2016-06-28 16:12:16 -0400
  • f14a41f4b7 Initial commit Alon Ganon 2016-06-28 16:08:58 -0400
  • d52f11710c fixed iptables-persistent saving in the cron.daily for sync-fail2ban ChiefGyk 2016-06-28 16:02:43 -0400
  • 89274c6411 automated the iptables-persistent installation so it doesn't require user interaction ChiefGyk 2016-06-28 15:57:04 -0400
  • 273078b03e added IPTables persistence and for it to save changes ChiefGyk 2016-06-28 15:38:11 -0400
  • ce35ef3382 Merge 41ecc4aab8 into 82903cd09e Alon Ganon 2016-06-28 17:32:59 +0000
  • 41ecc4aab8 Adds Fail2ban jails for nginx-http-auth, nginx-badbots, and owncloud, also needed to add original author credit to nginxjails ChiefGyk 2016-06-28 13:32:53 -0400
  • d46176a3c3 forgot to switch branches before submitting commits ChiefGyk 2016-06-28 13:30:38 -0400
  • 484c9f2dbe blocklist added to upstream master of 0.18c ChiefGyk 2016-06-28 13:00:21 -0400
  • 5ed8803cc1 RKHunter added during installation and setup for cronjobs ChiefGyk 2016-06-28 12:46:27 -0400
  • 23f2b1688f reset ChiefGyk 2016-06-28 12:31:21 -0400
  • c05312664d Merge branch 'master' of https://github.com/mail-in-a-box/mailinabox ChiefGyk 2016-06-28 12:03:55 -0400
  • 3a1313144b moved blocklist script locally within installation ChiefGyk 2016-06-27 09:38:14 -0400
  • 406f991be3 fixed error in my script copying nginx-badbots ChiefGyk 2016-06-27 09:30:01 -0400
  • 20bf710b28 removed some more clutter from jail.local ChiefGyk 2016-06-27 09:21:29 -0400
  • 82903cd09e Merge pull request #857 from biermeester/master Joshua Tauberer 2016-06-27 06:17:16 -0400
  • 299486f0fb Merge fab931c12b into fb14e30feb Michael Kroes 2016-06-27 10:06:51 +0000
  • fb14e30feb Remove owncloud log configuration from initial setup and only apply it during the configuration updates. This applies to both the timezone and the log format Michael Kroes 2016-06-27 05:19:12 +0200
  • d9ac321f25 Owncloud needs more time to detect blocks. It doesn't respond as fast as the other services. Also owncloud logs UTC (since latest update) even though the timezone is not UTC. Also to detect a block, we get a timeout instead of a refused) Michael Kroes 2016-06-26 14:17:12 +0200
  • bf5e9200f8 Update owncloud url to use webdav and increase http timeout Michael Kroes 2016-06-26 13:26:42 +0200
  • 7f89d7cb82 added line for rkhunter to first update when installed. ChiefGyk 2016-06-27 04:32:06 -0400
  • b76c9330c5 some fixes to fail2ban filters and jail.local ChiefGyk 2016-06-27 04:13:56 -0400
  • 5265839681 made rkhunter create a local file per suggestions ChiefGyk 2016-06-27 04:10:39 -0400
  • 3701676304 fixed miab-munin.conf ChiefGyk 2016-06-27 04:01:51 -0400
  • 187b28dc51 committed a fix for owncloud filter. Lack of caffeine caused me to enter a wrong part of my script ChiefGyk 2016-06-27 03:58:30 -0400
  • fab931c12b Remove owncloud log configuration from initial setup and only apply it during the configuration updates. This applies to both the timezone and the log format Michael Kroes 2016-06-27 05:19:12 +0200
  • cb35e6dd96 extended owncloud filter find time ChiefGyk 2016-06-26 20:06:53 -0400
  • fd457e187c fixed some issues with warnings due to there not being a variable set for PKGMG=DPKG ChiefGyk 2016-06-26 19:53:30 -0400