You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

224 lines
11 KiB

  1. # banIP configuration, for further information
  2. # see 'https://github.com/openwrt/packages/blob/master/net/banip/files/README.md'
  3. config banip 'global'
  4. option ban_enabled '0'
  5. option ban_automatic '1'
  6. option ban_fetchutil 'uclient-fetch'
  7. option ban_iface 'wan'
  8. config banip 'extra'
  9. option ban_debug '0'
  10. option ban_backup '0'
  11. option ban_maxqueue '8'
  12. config source 'whitelist'
  13. option ban_src '/etc/banip/banip.whitelist'
  14. option ban_src_6 '/etc/banip/banip.whitelist'
  15. option ban_src_desc 'Always allow these IPs (IPv4/IPv6)'
  16. option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3}(\/[0-9]{1,2})?)([[:space:]]|$)/{print \"add whitelist \"\$1}'
  17. option ban_src_rset_6 '/^([0-9a-fA-F]{0,4}:){1,7}[0-9a-fA-F]{0,4}(:\/[0-9]{1,2})?([[:space:]]|$)/{print \"add whitelist_6 \"\$1}'
  18. option ban_src_settype 'net'
  19. option ban_src_ruletype 'src+dst'
  20. option ban_src_on '1'
  21. option ban_src_on_6 '0'
  22. config source 'blacklist'
  23. option ban_src '/etc/banip/banip.blacklist'
  24. option ban_src_6 '/etc/banip/banip.blacklist'
  25. option ban_src_desc 'Always deny these IPs (IPv4/IPv6)'
  26. option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3}(\/[0-9]{1,2})?)([[:space:]]|$)/{print \"add blacklist \"\$1}'
  27. option ban_src_rset_6 '/^([0-9a-fA-F]{0,4}:){1,7}[0-9a-fA-F]{0,4}(:\/[0-9]{1,2})?([[:space:]]|$)/{print \"add blacklist_6 \"\$1}'
  28. option ban_src_settype 'net'
  29. option ban_src_ruletype 'src+dst'
  30. option ban_src_on '0'
  31. option ban_src_on_6 '0'
  32. config source 'bogon'
  33. option ban_src 'https://www.team-cymru.org/Services/Bogons/fullbogons-ipv4.txt'
  34. option ban_src_6 'https://www.team-cymru.org/Services/Bogons/fullbogons-ipv6.txt'
  35. option ban_src_desc 'Bogon prefixes, plus prefixes that have been allocated to RIRs but not yet assigned to ISPs (IPv4/IPv6)'
  36. option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3}(\/[0-9]{1,2})?)([[:space:]]|$)/{print \"add bogon \"\$1}'
  37. option ban_src_rset_6 '/^([0-9a-fA-F]{0,4}:){1,7}[0-9a-fA-F]{0,4}(:\/[0-9]{1,2})?([[:space:]]|$)/{print \"add bogon_6 \"\$1}'
  38. option ban_src_settype 'net'
  39. option ban_src_ruletype 'src+dst'
  40. option ban_src_on '0'
  41. option ban_src_on_6 '0'
  42. config source 'tor'
  43. option ban_src 'https://check.torproject.org/exit-addresses'
  44. option ban_src_desc 'List of Tor Exit Nodes (IPv4)'
  45. option ban_src_rset '/^(ExitAddress ([0-9]{1,3}\.){3}[0-9]{1,3})([[:space:]]|$)/{print \"add tor \"\$2}'
  46. option ban_src_settype 'ip'
  47. option ban_src_ruletype 'src'
  48. option ban_src_on '0'
  49. option ban_src_on_6 '0'
  50. config source 'threat'
  51. option ban_src 'https://rules.emergingthreats.net/fwrules/emerging-Block-IPs.txt'
  52. option ban_src_desc 'Emerging Threats (IPv4)'
  53. option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3}(\/[0-9]{1,2})?)([[:space:]]|$)/{print \"add threat \"\$1}'
  54. option ban_src_settype 'net'
  55. option ban_src_ruletype 'src'
  56. option ban_src_on '0'
  57. config source 'debl'
  58. option ban_src 'https://www.blocklist.de/downloads/export-ips_all.txt'
  59. option ban_src_6 'https://www.blocklist.de/downloads/export-ips_all.txt'
  60. option ban_src_desc 'Fail2ban reporting service (IPv4/IPv6)'
  61. option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3})([[:space:]]|$)/{print \"add debl \"\$1}'
  62. option ban_src_rset_6 '/^([0-9a-fA-F]{0,4}:){1,7}[0-9a-fA-F]{0,4}(:\/[0-9]{1,2})?([[:space:]]|$)/{print \"add debl_6 \"\$1}'
  63. option ban_src_settype 'ip'
  64. option ban_src_ruletype 'src'
  65. option ban_src_on '0'
  66. option ban_src_on_6 '0'
  67. config source 'myip'
  68. option ban_src 'https://www.myip.ms/files/blacklist/general/latest_blacklist.txt'
  69. option ban_src_6 'https://www.myip.ms/files/blacklist/general/latest_blacklist.txt'
  70. option ban_src_desc 'IP blacklist provided by myip.ms (IPv4/IPv6)'
  71. option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3})([[:space:]]|$)/{print \"add myip \"\$1}'
  72. option ban_src_rset_6 '/^([0-9a-fA-F]{0,4}:){1,7}[0-9a-fA-F]{0,4}(:\/[0-9]{1,2})?([[:space:]]|$)/{print \"add myip_6 \"\$1}'
  73. option ban_src_settype 'ip'
  74. option ban_src_ruletype 'src'
  75. option ban_src_on '0'
  76. option ban_src_on_6 '0'
  77. config source 'yoyo'
  78. option ban_src 'http://pgl.yoyo.org/adservers/iplist.php?ipformat=plain&showintro=0&mimetype=plaintext'
  79. option ban_src_desc 'IP blocklist provided by Peter Lowe (IPv4)'
  80. option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3})([[:space:]]|$)/{print \"add yoyo \"\$1}'
  81. option ban_src_settype 'ip'
  82. option ban_src_ruletype 'src'
  83. option ban_src_on '0'
  84. config source 'zeus'
  85. option ban_src 'https://zeustracker.abuse.ch/blocklist.php?download=ipblocklist'
  86. option ban_src_desc 'Zeus Tracker by abuse.ch (IPv4)'
  87. option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3})([[:space:]]|$)/{print \"add zeus \"\$1}'
  88. option ban_src_settype 'ip'
  89. option ban_src_ruletype 'src'
  90. option ban_src_on '0'
  91. config source 'sslbl'
  92. option ban_src 'https://sslbl.abuse.ch/blacklist/sslipblacklist.csv'
  93. option ban_src_desc 'SSL Blacklist by abuse.ch (IPv4)'
  94. option ban_src_rset 'BEGIN{FS=\",\"}/^(([0-9]{1,3}\.){3}[0-9]{1,3},).*/{print \"add sslbl \"\$1}'
  95. option ban_src_settype 'ip'
  96. option ban_src_ruletype 'src'
  97. option ban_src_on '0'
  98. config source 'ransomware'
  99. option ban_src 'https://ransomwaretracker.abuse.ch/downloads/RW_IPBL.txt'
  100. option ban_src_desc 'Ransomware Tracker by abuse.ch (IPv4)'
  101. option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3})([[:space:]]|$)/{print \"add ransomware \"\$1}'
  102. option ban_src_settype 'ip'
  103. option ban_src_ruletype 'src'
  104. option ban_src_on '0'
  105. config source 'feodo'
  106. option ban_src 'https://feodotracker.abuse.ch/downloads/ipblocklist.txt'
  107. option ban_src_desc 'Feodo Tracker by abuse.ch (IPv4)'
  108. option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3})([[:space:]]|$)/{print \"add feodo \"\$1}'
  109. option ban_src_settype 'ip'
  110. option ban_src_ruletype 'src'
  111. option ban_src_on '0'
  112. config source 'dshield'
  113. option ban_src 'http://feeds.dshield.org/block.txt'
  114. option ban_src_desc 'Dshield recommended IP blocklist. Contains top 20 attacking class C subnets (IPv4)'
  115. option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3})([[:space:]]|$)/{print \"add dshield \"\$1 \"/\"\$3}'
  116. option ban_src_settype 'net'
  117. option ban_src_ruletype 'src'
  118. option ban_src_on '0'
  119. config source 'proxy'
  120. option ban_src 'https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/proxylists.ipset'
  121. option ban_src_desc 'List of Open Proxies (IPv4)'
  122. option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3})([[:space:]]|$)/{print \"add proxy \"\$1}'
  123. option ban_src_settype 'ip'
  124. option ban_src_ruletype 'src'
  125. option ban_src_on '0'
  126. config source 'iblocklist'
  127. option ban_src 'http://list.iblocklist.com/?list=dgxtneitpuvgqqcpfulq&fileformat=cidr&archiveformat=gz'
  128. option ban_src_desc 'Contains advertising trackers and a short list of bad/intrusive porn sites (IPv4)'
  129. option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3}(\/[0-9]{1,2})?)([[:space:]]|$)/{print \"add iblocklist \"\$1}'
  130. option ban_src_settype 'net'
  131. option ban_src_ruletype 'src'
  132. option ban_src_on '0'
  133. config source 'drop'
  134. option ban_src 'https://www.spamhaus.org/drop/drop.txt'
  135. option ban_src_6 'https://www.spamhaus.org/drop/dropv6.txt'
  136. option ban_src_desc 'Spamhaus drop compilation (IPv4/IPv6)'
  137. option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3}(\/[0-9]{1,2})?)([[:space:]]|$)/{print \"add drop \"\$1}'
  138. option ban_src_rset_6 '/^([0-9a-fA-F]{0,4}:){1,7}[0-9a-fA-F]{0,4}(:\/[0-9]{1,2})?([[:space:]]|$)/{print \"add drop_6 \"\$1}'
  139. option ban_src_settype 'net'
  140. option ban_src_ruletype 'src'
  141. option ban_src_on '0'
  142. option ban_src_on_6 '0'
  143. config source 'edrop'
  144. option ban_src 'https://www.spamhaus.org/drop/edrop.txt'
  145. option ban_src_desc 'Spamhaus edrop compilation (IPv4)'
  146. option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3}(\/[0-9]{1,2})?)([[:space:]]|$)/{print \"add edrop \"\$1}'
  147. option ban_src_settype 'net'
  148. option ban_src_ruletype 'src'
  149. option ban_src_on '0'
  150. config source 'firehol1'
  151. option ban_src 'https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/firehol_level1.netset'
  152. option ban_src_desc 'Firehol Level 1 compilation. Contains bogons, spamhaus drop and edrop, dshield and malware lists (IPv4)'
  153. option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3}(\/[0-9]{1,2})?)([[:space:]]|$)/{print \"add firehol1 \"\$1}'
  154. option ban_src_settype 'net'
  155. option ban_src_ruletype 'src'
  156. option ban_src_on '0'
  157. config source 'firehol2'
  158. option ban_src 'https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/firehol_level2.netset'
  159. option ban_src_desc 'Firehol Level 2 compilation. Contains blocklists that track attacks, during the last 48 hours (IPv4)'
  160. option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3}(\/[0-9]{1,2})?)([[:space:]]|$)/{print \"add firehol2 \"\$1}'
  161. option ban_src_settype 'net'
  162. option ban_src_ruletype 'src'
  163. option ban_src_on '0'
  164. config source 'firehol3'
  165. option ban_src 'https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/firehol_level3.netset'
  166. option ban_src_desc 'Firehol Level 3 compilation. Contains blocklists that track attacks, spyware and viruses (IPv4)'
  167. option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3}(\/[0-9]{1,2})?)([[:space:]]|$)/{print \"add firehol3 \"\$1}'
  168. option ban_src_settype 'net'
  169. option ban_src_ruletype 'src'
  170. option ban_src_on '0'
  171. config source 'firehol4'
  172. option ban_src 'https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/firehol_level4.netset'
  173. option ban_src_desc 'Firehol Level 4 compilation. May include a large number of false positives (IPv4)'
  174. option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3}(\/[0-9]{1,2})?)([[:space:]]|$)/{print \"add firehol4 \"\$1}'
  175. option ban_src_settype 'net'
  176. option ban_src_ruletype 'src'
  177. option ban_src_on '0'
  178. config source 'country'
  179. option ban_src 'https://stat.ripe.net/data/country-resource-list/data.json?resource='
  180. option ban_src_6 'https://stat.ripe.net/data/country-resource-list/data.json?resource='
  181. option ban_src_desc 'Build a dynamic IPSet by country iso codes based on RIPE data (IPv4/IPv6)'
  182. option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3}(\/[0-9]{1,2})?)([[:space:]]|$)/{print \"add country \"\$1}'
  183. option ban_src_rset_6 '/^([0-9a-fA-F]{0,4}:){1,7}[0-9a-fA-F]{0,4}(:\/[0-9]{1,2})?([[:space:]]|$)/{print \"add country_6 \"\$1}'
  184. list ban_src_cat 'de'
  185. option ban_src_settype 'net'
  186. option ban_src_ruletype 'src'
  187. option ban_src_on '0'
  188. option ban_src_on_6 '0'
  189. config source 'asn'
  190. option ban_src 'https://stat.ripe.net/data/announced-prefixes/data.json?resource='
  191. option ban_src_6 'https://stat.ripe.net/data/announced-prefixes/data.json?resource='
  192. option ban_src_desc 'Build a dynamic IPSet by ASN numbers based on RIPE data (IPv4/IPv6)'
  193. option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3}(\/[0-9]{1,2})?)([[:space:]]|$)/{print \"add asn \"\$1}'
  194. option ban_src_rset_6 '/^([0-9a-fA-F]{0,4}:){1,7}[0-9a-fA-F]{0,4}(:\/[0-9]{1,2})?([[:space:]]|$)/{print \"add asn_6 \"\$1}'
  195. list ban_src_cat '32934'
  196. option ban_src_settype 'net'
  197. option ban_src_ruletype 'src'
  198. option ban_src_on '0'
  199. option ban_src_on_6 '0'