userdoc:tt_firewall_external_block_list

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
userdoc:tt_firewall_external_block_list [2019/08/23 15:03]
abelbeck [Updating *.netset Blocklists]
userdoc:tt_firewall_external_block_list [2021/10/15 14:46] (current)
abelbeck [Updating *.netset Blocklists]
Line 10: Line 10:
  
 !!Note: AstLinux 1.3.7!! updated ''reload-blocklist-netset'' with ''asterisk'', ''custom'' and ''customv6'' netsets. !!Note: AstLinux 1.3.7!! updated ''reload-blocklist-netset'' with ''asterisk'', ''custom'' and ''customv6'' netsets.
 +
 +!!Note: AstLinux 1.4.4!! updated ''reload-blocklist-netset'' with ''apiban'' netset.
 ===== Enable *.netset Blocklists ===== ===== Enable *.netset Blocklists =====
  
Line 52: Line 54:
 !!Tip ->!! The ''custom'' netset will use ''iprange'' to aggregate IPs and look up DNS if needed. !!Tip ->!! The ''custom'' netset will use ''iprange'' to aggregate IPs and look up DNS if needed.
  
-For example, you can create you own ''custom'' "ssh" blocklist using blocklist_de_ssh, bi_sshd_0_1d and bi_sshd_1_7d:+For example, you can create you own ''custom'' blocklist using [[https://abuse.ch/|abuse.ch]] blocklists:
  
 +  # 'custom' Blocklist by https://abuse.ch/
   BLOCKLIST_CUSTOM_URLS="   BLOCKLIST_CUSTOM_URLS="
-  https://iplists.firehol.org/files/blocklist_de_ssh.ipset +  https://feodotracker.abuse.ch/downloads/ipblocklist.txt 
-  https://iplists.firehol.org/files/bi_sshd_0_1d.ipset +  https://sslbl.abuse.ch/blacklist/sslipblacklist.txt
-  https://iplists.firehol.org/files/bi_sshd_1_7d.ipset+
   "   "
 +
 +!!Warning ->!! Don't miss the closing double-quote.
  
 This variable can be added directly into the ''/mnt/kd/rc.conf.d/user.conf'' file, or edited via the Network tab -> Advanced Configuration: User System Variables. This variable can be added directly into the ''/mnt/kd/rc.conf.d/user.conf'' file, or edited via the Network tab -> Advanced Configuration: User System Variables.
  
 +In order to apply ''user.conf'' settings changes, using the Edit tab:
 +
 +{{:userdoc:edit-tab-reload-restart-apply.png?nolink|Apply user.conf variables}}
 +
 +Or use the CLI command:
 +
 +  gen-rc-conf
 +
 +\\
 +!!Note: AstLinux 1.4.4 or later!! adds support for a new netset: ''apiban''.
 +
 +''apiban'' -> REST API for sharing IP addresses sending unwanted SIP traffic. Requires an API Key via https://apiban.org/.\\
 +
 +After receiving your API Key via email, copy it to a newly created ''/mnt/kd/apiban.conf'' file.
 \\ \\
 ===== File format for  *.netset Files ===== ===== File format for  *.netset Files =====
  • userdoc/tt_firewall_external_block_list.1566590594.txt.gz
  • Last modified: 2019/08/23 15:03
  • by abelbeck