LILiK
/
openwrt-packages-dist
5
0
Fork 0
Code Issues 0 Pull Requests 0 Projects 0 Releases 0 Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
27171 Commits
1 Branch
46 MiB
Tree: c5ac15a869
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'c5ac15a869'
${ noResults }
openwrt-packages-dist/net/banip/files/banip.conf

16 lines
450 B
Raw Normal View History

banip: new package to block incoming & outgoing ip addresses a new script based package called "banIP" to block incoming & outgoing ip adresses/subnets via ipset. Features: * a shell script which uses ipset and iptables to ban a large number of IP addresses published in various IP blacklists (bogon, firehol etc.) * support blocking by ASN numbers * support blocking by iso country codes * support local white & blacklist (IPv4, IPv6 & CIDR notation) * auto-add unsuccessful ssh login attempts to local blacklist * auto-add the uplink subnet to local whitelist * per source configuration of SRC (incoming) and DST (outgoing) * supports IPv4 & IPv6 Strong LuCI support: * easy interface to track & change all aspects of your ipset configuration on the fly * integrated IPSet-Lookup * integrated RIPE-Lookup * Log-Viewer & online configuration of white- & blacklist LuCI-Screenshots will follow in the second post. Forum discussion: https://forum.openwrt.org/t/banip-new-project-needs-testers-feedback/16985 Signed-off-by: Dirk Brenken <dev@brenken.org>
6 years ago
​
​
banip: release 0.7.0 * major rewrite * add support for multiple chains * add mac whitelisting * add support for multiple ssh daemons in parallel * add an ipset report engine * add mail notifications * add suspend/resume functions * add a cron wrapper to set an ipset related auto-timer for automatic blocklist updates * add a list wrapper to add/remove blocklist sources * add 19.x and Turris OS 5.x compatibility code * sources stored in an external compressed json file (/etc/banip/banip.sources.gz) * change Country/ASN download sources (faster/more reliable) * fix DHCPv6/icmpv6 issues Signed-off-by: Dirk Brenken <dev@brenken.org>
3 years ago
​
​
​
​
​
​
​
banip: update 0.1.1 * remove needless sort step to reduce system load * change maxqueue default in backend and LuCI frontend to '4' to reduce (default) system load * cosmetics Signed-off-by: Dirk Brenken <dev@brenken.org>
5 years ago
banip: release 0.7.0 * major rewrite * add support for multiple chains * add mac whitelisting * add support for multiple ssh daemons in parallel * add an ipset report engine * add mail notifications * add suspend/resume functions * add a cron wrapper to set an ipset related auto-timer for automatic blocklist updates * add a list wrapper to add/remove blocklist sources * add 19.x and Turris OS 5.x compatibility code * sources stored in an external compressed json file (/etc/banip/banip.sources.gz) * change Country/ASN download sources (faster/more reliable) * fix DHCPv6/icmpv6 issues Signed-off-by: Dirk Brenken <dev@brenken.org>
3 years ago
​
​
​
 
  1. config banip 'global'
  2. 	option ban_enabled '0'
  3. 	option ban_debug '0'
  4. 	option ban_mail_enabled '0'
  5. 	option ban_monitor_enabled '0'
  6. 	option ban_logsrc_enabled '0'
  7. 	option ban_logdst_enabled '0'
  8. 	option ban_autodetect '1'
  9. 	option ban_autoblacklist '1'
  10. 	option ban_autowhitelist '1'
  11. 	option ban_nice '0'
  12. 	option ban_maxqueue '4'
  13. 	option ban_global_settype 'src+dst'
  14. 	option ban_target_src 'DROP'
  15. 	option ban_target_dst 'REJECT'
  16. 	option ban_loglimit '100'