Commit Graph

55 Commits

Author SHA1 Message Date
Pawel Krawczyk
f3443ae787 it's not Python... fix if syntax 2015-07-11 08:24:38 +01:00
Pawel Krawczyk
048ecb0e3b add support for iblocklist.com 2015-07-09 15:43:22 +01:00
Pawel Krawczyk
f31e9e35eb example from iptables 2015-07-09 15:16:27 +01:00
Pawel Krawczyk
75facf667a add comment on formatting 2015-07-09 14:54:42 +01:00
Pawel Krawczyk
480715f44c fix IP regexp to support CIDR subnets and split src,dst into two separate rules
sent by Pierre Gaufillet
2015-06-02 10:15:44 +01:00
Pawel Krawczyk
75cee0fdfe only log if "log" option given 2015-05-18 15:50:15 +01:00
Pawel Krawczyk
173f4db0f9 add "nolog" option 2015-05-18 15:49:01 +01:00
Pawel Krawczyk
f0ba9ab2fe typo 2015-01-12 13:46:59 +00:00
Pawel Krawczyk
307f13539d truncate set name to avoid iptables v1.4.7: Maximum prefix length 29 for --log-prefix
manually handle compressed file only if no --compressed option was used
2015-01-12 13:45:28 +00:00
Pawel Krawczyk
c526a31504 do not display error messages from which 2015-01-12 10:57:11 +00:00
Pawel Krawczyk
ec88385487 fix compressed file name 2015-01-09 13:04:33 +00:00
Pawel Krawczyk
831330ef85 typo 2015-01-09 13:01:48 +00:00
Pawel Krawczyk
bb1c726836 handle compressed content from blocklist.de 2015-01-09 13:00:46 +00:00
Pawel Krawczyk
3d8e2052c3 add badips.com 2015-01-09 12:16:57 +00:00
Pawel Krawczyk
22f51c76b4 make executable 2015-01-09 12:12:48 +00:00
Pawel Krawczyk
bfaa812561 mention Dropbear rule 2015-01-08 23:57:08 +00:00
Pawel Krawczyk
8e5f1da414 add OpenWRT documentation 2015-01-08 23:51:24 +00:00
Pawel Krawczyk
09a513c4c5 add OpenWRT script 2015-01-08 23:44:22 +00:00
Pawel Krawczyk
9dee5ec650 obsolete semicolon 2015-01-08 23:41:14 +00:00
Pawel Krawczyk
22a2b771db reword warning on bogons, add info about daily updates 2015-01-07 11:23:22 +00:00
Pawel Krawczyk
3647c11f66 add OSSEC and manual-blacklist 2015-01-07 11:17:58 +00:00
Pawel Krawczyk
cf891f6bea add sample output 2015-01-07 11:04:43 +00:00
Pawel Krawczyk
37a5283b5d OpenWRT curl doesn't support --compressed 2015-01-07 10:58:42 +00:00
Pawel Krawczyk
660d661551 merged with blacklist.sh 2015-01-07 10:57:16 +00:00
Pawel Krawczyk
f2b54af727 install into proper chains 2015-01-07 10:57:00 +00:00
Pawel Krawczyk
097a52fcad update docs 2015-01-07 10:51:47 +00:00
Pawel Krawczyk
86c3690499 chmod +x 2015-01-07 10:30:05 +00:00
Pawel Krawczyk
f672ccfc60 add OSSEC active response script 2015-01-07 10:29:52 +00:00
Pawel Krawczyk
1d865b2111 make rules stateless to catch existing connections 2015-01-07 10:13:25 +00:00
Pawel Krawczyk
84567f1845 make rules stateless so that new blacklist entry works for existing connections as well 2015-01-06 10:19:16 +00:00
Pawel Krawczyk
3aa2bc36b8 use random name for temp set 2014-12-31 17:39:05 +00:00
Pawel Krawczyk
9a4ceabb01 only create set if it does not exist 2014-12-31 17:34:16 +00:00
Pawel Krawczyk
e974b64c5a mute warning messages when set already exists 2014-12-30 16:08:32 +00:00
Pawel Krawczyk
2b119b9b22 initialize a manual-blacklist set 2014-12-23 12:20:16 +00:00
Pawel Krawczyk
751c0dc403 attempt to create the original set to ensure it exists before swap operation
otherwise it will crash on the very first run on new systems
2014-12-01 12:35:04 +00:00
Pawel Krawczyk
1680830f91 do not destroy temp set on init 2014-11-26 10:34:51 +00:00
Pawel Krawczyk
642905d0ff delete right file name 2014-11-26 10:27:09 +00:00
Pawel Krawczyk
20af55299c wc bug and file name bug 2014-11-26 10:25:03 +00:00
Pawel Krawczyk
4e6da933fa append, not overwrite 2014-11-26 10:21:19 +00:00
Pawel Krawczyk
9678b0d259 use ipset restore feature for faster loads 2014-11-26 10:19:50 +00:00
Pawel Krawczyk
eb5c563fb0 cosmetic 2014-11-24 22:44:55 +00:00
Pawel Krawczyk
ca1ed35f92 forwarding_rule and --compressed not supported 2014-11-24 22:38:37 +00:00
Pawel Krawczyk
b719780fe7 reference input_rule and forward_rule
silence ipset duplicates and curl
2014-11-24 22:36:07 +00:00
Pawel Krawczyk
5a325d5f2b less verbose 2014-11-13 11:33:00 +00:00
Pawel Krawczyk
ede2ed56d6 less verbose 2014-11-13 11:28:42 +00:00
Pawel Krawczyk
f7c09e47af test for no binary 2014-10-02 11:11:35 +01:00
Pawel Krawczyk
edd054d63e use which to find binaries 2014-10-02 11:09:25 +01:00
Pawel Krawczyk
35f142aa4b it does not use uci 2014-10-02 10:59:14 +01:00
Pawel Krawczyk
b1a820f6e1 formatting 2014-10-01 12:47:21 +01:00
Pawel Krawczyk
0c65b715c9 add Linux script 2014-10-01 12:46:26 +01:00