Browse Source
banip: release 0.7.0
* major rewrite * add support for multiple chains * add mac whitelisting * add support for multiple ssh daemons in parallel * add an ipset report engine * add mail notifications * add suspend/resume functions * add a cron wrapper to set an ipset related auto-timer for automatic blocklist updates * add a list wrapper to add/remove blocklist sources * add 19.x and Turris OS 5.x compatibility code * sources stored in an external compressed json file (/etc/banip/banip.sources.gz) * change Country/ASN download sources (faster/more reliable) * fix DHCPv6/icmpv6 issues Signed-off-by: Dirk Brenken <dev@brenken.org>lilik-openwrt-22.03
Dirk Brenken
4 years ago
No known key found for this signature in database
GPG Key ID: 9D71CD547BFAE684
11 changed files with 2492 additions and 997 deletions
Split View
Diff Options
-
+10 -4net/banip/Makefile
-
+316 -67net/banip/files/README.md
-
+12 -222net/banip/files/banip.conf
-
+249 -0net/banip/files/banip.countries
-
+7 -8net/banip/files/banip.hotplug
-
+266 -28net/banip/files/banip.init
-
+0 -0net/banip/files/banip.maclist
-
+84 -0net/banip/files/banip.mail
-
+11 -10net/banip/files/banip.service
-
+1358 -658net/banip/files/banip.sh
-
+179 -0net/banip/files/banip.sources
+ 10
- 4
net/banip/Makefile
View File
+ 316
- 67
net/banip/files/README.md
View File
+ 12
- 222
net/banip/files/banip.conf
View File
| @ -1,226 +1,16 @@ | |||
| config banip 'global' | |||
| option ban_enabled '0' | |||
| option ban_basever '0.3' | |||
| option ban_automatic '1' | |||
| option ban_realtime 'false' | |||
| option ban_log_src '0' | |||
| option ban_log_dst '0' | |||
| config banip 'extra' | |||
| option ban_debug '0' | |||
| option ban_mail_enabled '0' | |||
| option ban_monitor_enabled '0' | |||
| option ban_logsrc_enabled '0' | |||
| option ban_logdst_enabled '0' | |||
| option ban_autodetect '1' | |||
| option ban_autoblacklist '1' | |||
| option ban_autowhitelist '1' | |||
| option ban_nice '0' | |||
| option ban_maxqueue '4' | |||
| config source 'whitelist' | |||
| option ban_src '/etc/banip/banip.whitelist' | |||
| option ban_src_6 '/etc/banip/banip.whitelist' | |||
| option ban_src_desc 'Always allow these IPs (IPv4/IPv6)' | |||
| option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3}(\/[0-9]{1,2})?)([[:space:]]|$)/{print \"add whitelist \"\$1}' | |||
| option ban_src_rset_6 '/^([0-9a-fA-F]{0,4}:){1,7}[0-9a-fA-F]{0,4}(:\/[0-9]{1,2})?([[:space:]]|$)/{print \"add whitelist_6 \"\$1}' | |||
| option ban_src_settype 'net' | |||
| option ban_src_ruletype 'src+dst' | |||
| option ban_src_on '1' | |||
| option ban_src_on_6 '0' | |||
| config source 'blacklist' | |||
| option ban_src '/etc/banip/banip.blacklist' | |||
| option ban_src_6 '/etc/banip/banip.blacklist' | |||
| option ban_src_desc 'Always deny these IPs (IPv4/IPv6)' | |||
| option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3}(\/[0-9]{1,2})?)([[:space:]]|$)/{print \"add blacklist \"\$1}' | |||
| option ban_src_rset_6 '/^([0-9a-fA-F]{0,4}:){1,7}[0-9a-fA-F]{0,4}(:\/[0-9]{1,2})?([[:space:]]|$)/{print \"add blacklist_6 \"\$1}' | |||
| option ban_src_settype 'net' | |||
| option ban_src_ruletype 'src+dst' | |||
| option ban_src_on '0' | |||
| option ban_src_on_6 '0' | |||
| config source 'bogon' | |||
| option ban_src 'https://www.team-cymru.org/Services/Bogons/fullbogons-ipv4.txt' | |||
| option ban_src_6 'https://www.team-cymru.org/Services/Bogons/fullbogons-ipv6.txt' | |||
| option ban_src_desc 'Bogon prefixes, plus prefixes that have been allocated to RIRs but not yet assigned to ISPs (IPv4/IPv6)' | |||
| option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3}(\/[0-9]{1,2})?)([[:space:]]|$)/{print \"add bogon \"\$1}' | |||
| option ban_src_rset_6 '/^([0-9a-fA-F]{0,4}:){1,7}[0-9a-fA-F]{0,4}(:\/[0-9]{1,2})?([[:space:]]|$)/{print \"add bogon_6 \"\$1}' | |||
| option ban_src_settype 'net' | |||
| option ban_src_ruletype 'src+dst' | |||
| option ban_src_on '0' | |||
| option ban_src_on_6 '0' | |||
| config source 'DoH' | |||
| option ban_src 'https://raw.githubusercontent.com/dibdot/DoH-IP-blocklists/master/doh-ipv4.txt' | |||
| option ban_src_6 'https://raw.githubusercontent.com/dibdot/DoH-IP-blocklists/master/doh-ipv6.txt' | |||
| option ban_src_desc 'List of public DoH providers (DNS over HTTPS) (IPv4/IPv6)' | |||
| option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3}(\/[0-9]{1,2})?)([[:space:]]|$)/{print \"add DoH \"\$1}' | |||
| option ban_src_rset_6 '/^([0-9a-fA-F]{0,4}:){1,7}[0-9a-fA-F]{0,4}(:\/[0-9]{1,2})?([[:space:]]|$)/{print \"add DoH_6 \"\$1}' | |||
| option ban_src_settype 'net' | |||
| option ban_src_ruletype 'src+dst' | |||
| option ban_src_on '0' | |||
| option ban_src_on_6 '0' | |||
| config source 'tor' | |||
| option ban_src 'https://check.torproject.org/exit-addresses' | |||
| option ban_src_desc 'List of Tor Exit Nodes (IPv4)' | |||
| option ban_src_rset '/^(ExitAddress ([0-9]{1,3}\.){3}[0-9]{1,3})([[:space:]]|$)/{print \"add tor \"\$2}' | |||
| option ban_src_settype 'ip' | |||
| option ban_src_ruletype 'src' | |||
| option ban_src_on '0' | |||
| option ban_src_on_6 '0' | |||
| config source 'threat' | |||
| option ban_src 'https://rules.emergingthreats.net/fwrules/emerging-Block-IPs.txt' | |||
| option ban_src_desc 'Emerging Threats (IPv4)' | |||
| option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3}(\/[0-9]{1,2})?)([[:space:]]|$)/{print \"add threat \"\$1}' | |||
| option ban_src_settype 'net' | |||
| option ban_src_ruletype 'src' | |||
| option ban_src_on '0' | |||
| config source 'debl' | |||
| option ban_src 'https://www.blocklist.de/downloads/export-ips_all.txt' | |||
| option ban_src_6 'https://www.blocklist.de/downloads/export-ips_all.txt' | |||
| option ban_src_desc 'Fail2ban reporting service (IPv4/IPv6)' | |||
| option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3})([[:space:]]|$)/{print \"add debl \"\$1}' | |||
| option ban_src_rset_6 '/^([0-9a-fA-F]{0,4}:){1,7}[0-9a-fA-F]{0,4}(:\/[0-9]{1,2})?([[:space:]]|$)/{print \"add debl_6 \"\$1}' | |||
| option ban_src_settype 'ip' | |||
| option ban_src_ruletype 'src' | |||
| option ban_src_on '0' | |||
| option ban_src_on_6 '0' | |||
| config source 'myip' | |||
| option ban_src 'https://www.myip.ms/files/blacklist/general/latest_blacklist.txt' | |||
| option ban_src_6 'https://www.myip.ms/files/blacklist/general/latest_blacklist.txt' | |||
| option ban_src_desc 'IP blacklist provided by myip.ms (IPv4/IPv6)' | |||
| option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3})([[:space:]]|$)/{print \"add myip \"\$1}' | |||
| option ban_src_rset_6 '/^([0-9a-fA-F]{0,4}:){1,7}[0-9a-fA-F]{0,4}(:\/[0-9]{1,2})?([[:space:]]|$)/{print \"add myip_6 \"\$1}' | |||
| option ban_src_settype 'ip' | |||
| option ban_src_ruletype 'src' | |||
| option ban_src_on '0' | |||
| option ban_src_on_6 '0' | |||
| config source 'yoyo' | |||
| option ban_src 'https://pgl.yoyo.org/adservers/iplist.php?ipformat=plain&showintro=0&mimetype=plaintext' | |||
| option ban_src_desc 'IP blocklist provided by Peter Lowe (IPv4)' | |||
| option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3})([[:space:]]|$)/{print \"add yoyo \"\$1}' | |||
| option ban_src_settype 'ip' | |||
| option ban_src_ruletype 'src' | |||
| option ban_src_on '0' | |||
| config source 'sslbl' | |||
| option ban_src 'https://sslbl.abuse.ch/blacklist/sslipblacklist.csv' | |||
| option ban_src_desc 'SSL Blacklist by abuse.ch (IPv4)' | |||
| option ban_src_rset 'BEGIN{FS=\",\"}/(([0-9]{1,3}\.){3}[0-9]{1,3},).*/{print \"add sslbl \"\$2}' | |||
| option ban_src_settype 'ip' | |||
| option ban_src_ruletype 'src' | |||
| option ban_src_on '0' | |||
| config source 'ransomware' | |||
| option ban_src 'https://ransomwaretracker.abuse.ch/downloads/RW_IPBL.txt' | |||
| option ban_src_desc 'Ransomware Tracker by abuse.ch (IPv4)' | |||
| option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3})([[:space:]]|$)/{print \"add ransomware \"\$1}' | |||
| option ban_src_settype 'ip' | |||
| option ban_src_ruletype 'src' | |||
| option ban_src_on '0' | |||
| config source 'feodo' | |||
| option ban_src 'https://feodotracker.abuse.ch/downloads/ipblocklist.txt' | |||
| option ban_src_desc 'Feodo Tracker by abuse.ch (IPv4)' | |||
| option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3})([[:space:]]|$)/{print \"add feodo \"\$1}' | |||
| option ban_src_settype 'ip' | |||
| option ban_src_ruletype 'src' | |||
| option ban_src_on '0' | |||
| config source 'dshield' | |||
| option ban_src 'https://feeds.dshield.org/block.txt' | |||
| option ban_src_desc 'Dshield recommended IP blocklist. Contains top 20 attacking class C subnets (IPv4)' | |||
| option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3})([[:space:]]|$)/{print \"add dshield \"\$1 \"/\"\$3}' | |||
| option ban_src_settype 'net' | |||
| option ban_src_ruletype 'src' | |||
| option ban_src_on '0' | |||
| config source 'proxy' | |||
| option ban_src 'https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/proxylists.ipset' | |||
| option ban_src_desc 'List of Open Proxies (IPv4)' | |||
| option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3})([[:space:]]|$)/{print \"add proxy \"\$1}' | |||
| option ban_src_settype 'ip' | |||
| option ban_src_ruletype 'src' | |||
| option ban_src_on '0' | |||
| config source 'iblocklist' | |||
| option ban_src 'https://list.iblocklist.com/?list=dgxtneitpuvgqqcpfulq&fileformat=cidr&archiveformat=gz' | |||
| option ban_src_desc 'Contains advertising trackers and a short list of bad/intrusive porn sites (IPv4)' | |||
| option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3}(\/[0-9]{1,2})?)([[:space:]]|$)/{print \"add iblocklist \"\$1}' | |||
| option ban_src_settype 'net' | |||
| option ban_src_ruletype 'src' | |||
| option ban_src_on '0' | |||
| config source 'drop' | |||
| option ban_src 'https://www.spamhaus.org/drop/drop.txt' | |||
| option ban_src_6 'https://www.spamhaus.org/drop/dropv6.txt' | |||
| option ban_src_desc 'Spamhaus drop compilation (IPv4/IPv6)' | |||
| option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3}(\/[0-9]{1,2})?)([[:space:]]|$)/{print \"add drop \"\$1}' | |||
| option ban_src_rset_6 '/^([0-9a-fA-F]{0,4}:){1,7}[0-9a-fA-F]{0,4}(:\/[0-9]{1,2})?([[:space:]]|$)/{print \"add drop_6 \"\$1}' | |||
| option ban_src_settype 'net' | |||
| option ban_src_ruletype 'src' | |||
| option ban_src_on '0' | |||
| option ban_src_on_6 '0' | |||
| config source 'edrop' | |||
| option ban_src 'https://www.spamhaus.org/drop/edrop.txt' | |||
| option ban_src_desc 'Spamhaus edrop compilation (IPv4)' | |||
| option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3}(\/[0-9]{1,2})?)([[:space:]]|$)/{print \"add edrop \"\$1}' | |||
| option ban_src_settype 'net' | |||
| option ban_src_ruletype 'src' | |||
| option ban_src_on '0' | |||
| config source 'firehol1' | |||
| option ban_src 'https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/firehol_level1.netset' | |||
| option ban_src_desc 'Firehol Level 1 compilation. Contains bogons, spamhaus drop and edrop, dshield and malware lists (IPv4)' | |||
| option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3}(\/[0-9]{1,2})?)([[:space:]]|$)/{print \"add firehol1 \"\$1}' | |||
| option ban_src_settype 'net' | |||
| option ban_src_ruletype 'src' | |||
| option ban_src_on '0' | |||
| config source 'firehol2' | |||
| option ban_src 'https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/firehol_level2.netset' | |||
| option ban_src_desc 'Firehol Level 2 compilation. Contains blocklists that track attacks, during the last 48 hours (IPv4)' | |||
| option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3}(\/[0-9]{1,2})?)([[:space:]]|$)/{print \"add firehol2 \"\$1}' | |||
| option ban_src_settype 'net' | |||
| option ban_src_ruletype 'src' | |||
| option ban_src_on '0' | |||
| config source 'firehol3' | |||
| option ban_src 'https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/firehol_level3.netset' | |||
| option ban_src_desc 'Firehol Level 3 compilation. Contains blocklists that track attacks, spyware and viruses (IPv4)' | |||
| option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3}(\/[0-9]{1,2})?)([[:space:]]|$)/{print \"add firehol3 \"\$1}' | |||
| option ban_src_settype 'net' | |||
| option ban_src_ruletype 'src' | |||
| option ban_src_on '0' | |||
| config source 'firehol4' | |||
| option ban_src 'https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/firehol_level4.netset' | |||
| option ban_src_desc 'Firehol Level 4 compilation. May include a large number of false positives (IPv4)' | |||
| option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3}(\/[0-9]{1,2})?)([[:space:]]|$)/{print \"add firehol4 \"\$1}' | |||
| option ban_src_settype 'net' | |||
| option ban_src_ruletype 'src' | |||
| option ban_src_on '0' | |||
| config source 'country' | |||
| option ban_src 'https://stat.ripe.net/data/country-resource-list/data.json?resource=' | |||
| option ban_src_6 'https://stat.ripe.net/data/country-resource-list/data.json?resource=' | |||
| option ban_src_desc 'Build a dynamic IPSet by country iso codes based on RIPE data (IPv4/IPv6)' | |||
| option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3}(\/[0-9]{1,2})?)([[:space:]]|$)/{print \"add country \"\$1}' | |||
| option ban_src_rset_6 '/^([0-9a-fA-F]{0,4}:){1,7}[0-9a-fA-F]{0,4}(:\/[0-9]{1,2})?([[:space:]]|$)/{print \"add country_6 \"\$1}' | |||
| list ban_src_cat 'de' | |||
| option ban_src_settype 'net' | |||
| option ban_src_ruletype 'src' | |||
| option ban_src_on '0' | |||
| option ban_src_on_6 '0' | |||
| config source 'asn' | |||
| option ban_src 'https://stat.ripe.net/data/announced-prefixes/data.json?resource=' | |||
| option ban_src_6 'https://stat.ripe.net/data/announced-prefixes/data.json?resource=' | |||
| option ban_src_desc 'Build a dynamic IPSet by ASN numbers based on RIPE data (IPv4/IPv6)' | |||
| option ban_src_rset '/^(([0-9]{1,3}\.){3}[0-9]{1,3}(\/[0-9]{1,2})?)([[:space:]]|$)/{print \"add asn \"\$1}' | |||
| option ban_src_rset_6 '/^([0-9a-fA-F]{0,4}:){1,7}[0-9a-fA-F]{0,4}(:\/[0-9]{1,2})?([[:space:]]|$)/{print \"add asn_6 \"\$1}' | |||
| list ban_src_cat '32934' | |||
| option ban_src_settype 'net' | |||
| option ban_src_ruletype 'src' | |||
| option ban_src_on '0' | |||
| option ban_src_on_6 '0' | |||
| option ban_global_settype 'src+dst' | |||
| option ban_target_src 'DROP' | |||
| option ban_target_dst 'REJECT' | |||
| option ban_loglimit '100' | |||
+ 249
- 0
net/banip/files/banip.countries
View File
| @ -0,0 +1,249 @@ | |||
| tw;Taiwan | |||
| af;Afghanistan | |||
| al;Albania | |||
| dz;Algeria | |||
| as;American Samoa | |||
| ad;Andorra | |||
| ao;Angola | |||
| ai;Anguilla | |||
| aq;Antarctica | |||
| ag;Antigua & Barbuda | |||
| ar;Argentina | |||
| am;Armenia | |||
| aw;Aruba | |||
| au;Australia | |||
| at;Austria | |||
| az;Azerbaijan | |||
| bs;Bahamas | |||
| bh;Bahrain | |||
| bd;Bangladesh | |||
| bb;Barbados | |||
| by;Belarus | |||
| be;Belgium | |||
| bz;Belize | |||
| bj;Benin | |||
| bm;Bermuda | |||
| bt;Bhutan | |||
| bo;Bolivia | |||
| bq;Caribbean Netherlands | |||
| ba;Bosnia | |||
| bw;Botswana | |||
| bv;Bouvet Island | |||
| br;Brazil | |||
| io;British Indian Ocean Territory | |||
| vg;British Virgin Islands | |||
| bn;Brunei | |||
| bg;Bulgaria | |||
| bf;Burkina Faso | |||
| bi;Burundi | |||
| cv;Cape Verde | |||
| kh;Cambodia | |||
| cm;Cameroon | |||
| ca;Canada | |||
| ky;Cayman Islands | |||
| cf;Central African Republic | |||
| td;Chad | |||
| cl;Chile | |||
| cn;China | |||
| hk;Hong Kong | |||
| mo;Macau | |||
| cx;Christmas Island | |||
| cc;Cocos (Keeling) Islands | |||
| co;Colombia | |||
| km;Comoros | |||
| cg;Congo - Brazzaville | |||
| ck;Cook Islands | |||
| cr;Costa Rica | |||
| hr;Croatia | |||
| cu;Cuba | |||
| cw;Curaçao | |||
| cy;Cyprus | |||
| cz;Czechia | |||
| ci;Côte d’Ivoire | |||
| kp;North Korea | |||
| cd;Congo - Kinshasa | |||
| dk;Denmark | |||
| dj;Djibouti | |||
| dm;Dominica | |||
| do;Dominican Republic | |||
| ec;Ecuador | |||
| eg;Egypt | |||
| sv;El Salvador | |||
| gq;Equatorial Guinea | |||
| er;Eritrea | |||
| ee;Estonia | |||
| sz;Eswatini | |||
| et;Ethiopia | |||
| fk;Falkland Islands | |||
| fo;Faroe Islands | |||
| fj;Fiji | |||
| fi;Finland | |||
| fr;France | |||
| gf;French Guiana | |||
| pf;French Polynesia | |||
| tf;French Southern Territories | |||
| ga;Gabon | |||
| gm;Gambia | |||
| ge;Georgia | |||
| de;Germany | |||
| gh;Ghana | |||
| gi;Gibraltar | |||
| gr;Greece | |||
| gl;Greenland | |||
| gd;Grenada | |||
| gp;Guadeloupe | |||
| gu;Guam | |||
| gt;Guatemala | |||
| gg;Guernsey | |||
| gn;Guinea | |||
| gw;Guinea-Bissau | |||
| gy;Guyana | |||
| ht;Haiti | |||
| hm;Heard & McDonald Islands | |||
| va;Vatican City | |||
| hn;Honduras | |||
| hu;Hungary | |||
| is;Iceland | |||
| in;India | |||
| id;Indonesia | |||
| ir;Iran | |||
| iq;Iraq | |||
| ie;Ireland | |||
| im;Isle of Man | |||
| il;Israel | |||
| it;Italy | |||
| jm;Jamaica | |||
| jp;Japan | |||
| je;Jersey | |||
| jo;Jordan | |||
| kz;Kazakhstan | |||
| ke;Kenya | |||
| ki;Kiribati | |||
| kw;Kuwait | |||
| kg;Kyrgyzstan | |||
| la;Laos | |||
| lv;Latvia | |||
| lb;Lebanon | |||
| ls;Lesotho | |||
| lr;Liberia | |||
| ly;Libya | |||
| li;Liechtenstein | |||
| lt;Lithuania | |||
| lu;Luxembourg | |||
| mg;Madagascar | |||
| mw;Malawi | |||
| my;Malaysia | |||
| mv;Maldives | |||
| ml;Mali | |||
| mt;Malta | |||
| mh;Marshall Islands | |||
| mq;Martinique | |||
| mr;Mauritania | |||
| mu;Mauritius | |||
| yt;Mayotte | |||
| mx;Mexico | |||
| fm;Micronesia | |||
| mc;Monaco | |||
| mn;Mongolia | |||
| me;Montenegro | |||
| ms;Montserrat | |||
| ma;Morocco | |||
| mz;Mozambique | |||
| mm;Myanmar | |||
| na;Namibia | |||
| nr;Nauru | |||
| np;Nepal | |||
| nl;Netherlands | |||
| nc;New Caledonia | |||
| nz;New Zealand | |||
| ni;Nicaragua | |||
| ne;Niger | |||
| ng;Nigeria | |||
| nu;Niue | |||
| nf;Norfolk Island | |||
| mp;Northern Mariana Islands | |||
| no;Norway | |||
| om;Oman | |||
| pk;Pakistan | |||
| pw;Palau | |||
| pa;Panama | |||
| pg;Papua New Guinea | |||
| py;Paraguay | |||
| pe;Peru | |||
| ph;Philippines | |||
| pn;Pitcairn Islands | |||
| pl;Poland | |||
| pt;Portugal | |||
| pr;Puerto Rico | |||
| qa;Qatar | |||
| kr;South Korea | |||
| md;Moldova | |||
| ro;Romania | |||
| ru;Russia | |||
| rw;Rwanda | |||
| re;Réunion | |||
| bl;St. Barthélemy | |||
| sh;St. Helena | |||
| kn;St. Kitts & Nevis | |||
| lc;St. Lucia | |||
| mf;St. Martin | |||
| pm;St. Pierre & Miquelon | |||
| vc;St. Vincent & Grenadines | |||
| ws;Samoa | |||
| sm;San Marino | |||
| st;São Tomé & Príncipe | |||
| sa;Saudi Arabia | |||
| sn;Senegal | |||
| rs;Serbia | |||
| sc;Seychelles | |||
| sl;Sierra Leone | |||
| sg;Singapore | |||
| sx;Sint Maarten | |||
| sk;Slovakia | |||
| si;Slovenia | |||
| sb;Solomon Islands | |||
| so;Somalia | |||
| za;South Africa | |||
| gs;South Georgia & South Sandwich Islands | |||
| ss;South Sudan | |||
| es;Spain | |||
| lk;Sri Lanka | |||
| ps;Palestine | |||
| sd;Sudan | |||
| sr;Suriname | |||
| sj;Svalbard & Jan Mayen | |||
| se;Sweden | |||
| ch;Switzerland | |||
| sy;Syria | |||
| tj;Tajikistan | |||
| th;Thailand | |||
| mk;North Macedonia | |||
| tl;Timor-Leste | |||
| tg;Togo | |||
| tk;Tokelau | |||
| to;Tonga | |||
| tt;Trinidad & Tobago | |||
| tn;Tunisia | |||
| tr;Turkey | |||
| tm;Turkmenistan | |||
| tc;Turks & Caicos Islands | |||
| tv;Tuvalu | |||
| ug;Uganda | |||
| ua;Ukraine | |||
| ae;United Arab Emirates | |||
| gb;United Kingdom | |||
| tz;Tanzania | |||
| um;U.S. Outlying Islands | |||
| vi;U.S. Virgin Islands | |||
| us;United States | |||
| uy;Uruguay | |||
| uz;Uzbekistan | |||
| vu;Vanuatu | |||
| ve;Venezuela | |||
| vn;Vietnam | |||
| wf;Wallis & Futuna | |||
| eh;Western Sahara | |||
| ye;Yemen | |||
| zm;Zambia | |||
| zw;Zimbabwe | |||
| ax;Åland Islands | |||
+ 7
- 8
net/banip/files/banip.hotplug
View File
| @ -1,15 +1,14 @@ | |||
| #!/bin/sh | |||
| # | |||
| [ "${ACTION}" != "add" ] && exit 0 | |||
| ban_iface="wan" | |||
| [ -r "/lib/functions/network.sh" ] && { . "/lib/functions/network.sh"; network_find_wan ban_iface; } | |||
| [ "${INTERFACE}" != "${ban_iface}" ] && exit 0 | |||
| ban_pidfile="/var/run/banip.pid" | |||
| ban_enabled="$(/etc/init.d/banip enabled; printf "%u" "${?}")" | |||
| if [ "${ban_enabled}" = "0" ] && [ ! -s "${ban_pidfile}" ] | |||
| if [ "${ban_enabled}" = "0" ] && [ "${ACTION}" = "add" ] && [ -n "${INTERFACE}" ] | |||
| then | |||
| /etc/init.d/banip refresh | |||
| ban_ifaces="$(uci_get banip global ban_ifaces)" | |||
| if [ ! -s "${ban_pidfile}" ] && [ -n "$(printf "%s\n" "${ban_ifaces}" | grep -F "${INTERFACE}")" ] | |||
| then | |||
| /etc/init.d/banip refresh | |||
| fi | |||
| fi | |||
| exit 0 | |||
+ 266
- 28
net/banip/files/banip.init
View File
+ 0
- 0
net/banip/files/banip.maclist
View File
+ 84
- 0
net/banip/files/banip.mail
View File
| @ -0,0 +1,84 @@ | |||
| #!/bin/sh | |||
| # send mail script for banIP notifications | |||
| # written by Dirk Brenken (dev@brenken.org) | |||
| # | |||
| # This is free software, licensed under the GNU General Public License v3. | |||
| # | |||
| # (s)hellcheck exceptions | |||
| # shellcheck disable=1091,2030,2031,2034,2039,2086,2129,2140,2143,2154,2181,2183,2188 | |||
| export LC_ALL=C | |||
| export PATH="/usr/sbin:/usr/bin:/sbin:/bin" | |||
| set -o pipefail | |||
| if [ -r "/lib/functions.sh" ] | |||
| then | |||
| . "/lib/functions.sh" | |||
| ban_debug="$(uci_get banip global ban_debug "0")" | |||
| ban_loglimit="$(uci_get banip global ban_loglimit "100")" | |||
| ban_mailsender="$(uci_get banip global ban_mailsender "no-reply@banIP")" | |||
| ban_mailreceiver="$(uci_get banip global ban_mailreceiver)" | |||
| ban_mailtopic="$(uci_get banip global ban_mailtopic "banIP notification")" | |||
| ban_mailprofile="$(uci_get banip global ban_mailprofile "ban_notify")" | |||
| fi | |||
| ban_ver="${1}" | |||
| ban_mail="$(command -v msmtp)" | |||
| ban_logger="$(command -v logger)" | |||
| ban_logread="$(command -v logread)" | |||
| ban_rc=1 | |||
| f_log() | |||
| { | |||
| local class="${1}" log_msg="${2}" | |||
| if [ -x "${ban_logger}" ] | |||
| then | |||
| "${ban_logger}" -p "${class}" -t "banIP-${ban_ver%-*}[${$}]" "${log_msg}" | |||
| else | |||
| printf "%s %s %s\n" "${class}" "banIP-${ban_ver%-*}[${$}]" "${log_msg}" | |||
| fi | |||
| } | |||
| if [ -z "${ban_mailreceiver}" ] | |||
| then | |||
| f_log "err" "please set the mail receiver with the 'ban_mailreceiver' option" | |||
| exit ${ban_rc} | |||
| fi | |||
| if [ "${ban_debug}" = "1" ] | |||
| then | |||
| msmtp_debug="--debug" | |||
| fi | |||
| ban_mailhead="From: ${ban_mailsender}\nTo: ${ban_mailreceiver}\nSubject: ${ban_mailtopic}\nReply-to: ${ban_mailsender}\nMime-Version: 1.0\nContent-Type: text/html;charset=utf-8\nContent-Disposition: inline\n\n" | |||
| # info preparation | |||
| # | |||
| sys_info="$(strings /etc/banner 2>/dev/null)" | |||
| ban_info="$(/etc/init.d/banip "status" 2>/dev/null)" | |||
| rep_info="${2}" | |||
| log_info="$("${ban_logread}" -l "${ban_loglimit}" -e "banIP-" 2>/dev/null | awk '{NR=1;max=120;if(length($0)>max+1)while($0){if(NR==1){print substr($0,1,max)}else{print substr($0,1,max)}{$0=substr($0,max+1);NR=NR+1}}else print}')" | |||
| # mail body | |||
| # | |||
| ban_mailtext="<html><body><pre style='display:block;font-family:monospace;font-size:1rem;padding:20;background-color:#f3eee5;white-space:pre'>" | |||
| ban_mailtext="${ban_mailtext}\n<strong>++\n++ System Information ++\n++</strong>\n${sys_info}" | |||
| ban_mailtext="${ban_mailtext}\n\n<strong>++\n++ banIP Status ++\n++</strong>\n${ban_info}" | |||
| if [ -n "${rep_info}" ] | |||
| then | |||
| ban_mailtext="${ban_mailtext}\n\n<strong>++\n++ banIP Report ++\n++</strong>\n${rep_info}" | |||
| fi | |||
| ban_mailtext="${ban_mailtext}\n\n<strong>++\n++ Logfile Information ++\n++</strong>\n${log_info}" | |||
| ban_mailtext="${ban_mailtext}</pre></body></html>" | |||
| # send mail | |||
| # | |||
| if [ -x "${ban_mail}" ] | |||
| then | |||
| printf "%b" "${ban_mailhead}${ban_mailtext}" 2>/dev/null | "${ban_mail}" ${msmtp_debug} -a "${ban_mailprofile}" "${ban_mailreceiver}" >/dev/null 2>&1 | |||
| ban_rc=${?} | |||
| f_log "info" "mail sent to '${ban_mailreceiver}' with rc '${ban_rc}'" | |||
| else | |||
| f_log "err" "msmtp mail daemon not found" | |||
| fi | |||
| exit ${ban_rc} | |||
+ 11
- 10
net/banip/files/banip.service
View File
+ 1358
- 658
net/banip/files/banip.sh
File diff suppressed because it is too large
View File
+ 179
- 0
net/banip/files/banip.sources
View File
| @ -0,0 +1,179 @@ | |||
| { | |||
| "asn": { | |||
| "url_4": "https://asn.ipinfo.app/api/text/list/", | |||
| "url_6": "https://asn.ipinfo.app/api/text/list/", | |||
| "rule_4": "/^(([0-9]{1,3}\\.){3}(1?[0-9][0-9]?|2[0-4][0-9]|25[0-5])(\\/(1?[0-9]|2?[0-9]|3?[0-2]))?)([[:space:]]|$)/{print \"add asn_4 \"$1}", | |||
| "rule_6": "/^(([0-9A-f]{0,4}:){1,7}[0-9A-f]{0,4}:?(\\/(1?[0-2][0-8]|[0-9][0-9]))?)([[:space:]]|$)/{print \"add asn_6 \"$1}", | |||
| "focus": "ASN blocks", | |||
| "descurl": "https://asn.ipinfo.app" | |||
| }, | |||
| "bogon": { | |||
| "url_4": "https://www.team-cymru.org/Services/Bogons/fullbogons-ipv4.txt", | |||
| "url_6": "https://www.team-cymru.org/Services/Bogons/fullbogons-ipv6.txt", | |||
| "rule_4": "/^(([0-9]{1,3}\\.){3}(1?[0-9][0-9]?|2[0-4][0-9]|25[0-5])(\\/(1?[0-9]|2?[0-9]|3?[0-2]))?)([[:space:]]|$)/{print \"add bogon_4 \"$1}", | |||
| "rule_6": "/^(([0-9A-f]{0,4}:){1,7}[0-9A-f]{0,4}:?(\\/(1?[0-2][0-8]|[0-9][0-9]))?)([[:space:]]|$)/{print \"add bogon_6 \"$1}", | |||
| "focus": "Bogon prefixes", | |||
| "descurl": "https://team-cymru.com" | |||
| }, | |||
| "country": { | |||
| "url_4": "https://www.ipdeny.com/ipblocks/data/aggregated/", | |||
| "url_6": "https://www.ipdeny.com/ipv6/ipaddresses/aggregated/", | |||
| "rule_4": "/^(([0-9]{1,3}\\.){3}(1?[0-9][0-9]?|2[0-4][0-9]|25[0-5])(\\/(1?[0-9]|2?[0-9]|3?[0-2]))?)([[:space:]]|$)/{print \"add country_4 \"$1}", | |||
| "rule_6": "/^(([0-9A-f]{0,4}:){1,7}[0-9A-f]{0,4}:?(\\/(1?[0-2][0-8]|[0-9][0-9]))?)([[:space:]]|$)/{print \"add country_6 \"$1}", | |||
| "focus": "Country blocks", | |||
| "descurl": "https://www.ipdeny.com/ipblocks" | |||
| }, | |||
| "darklist": { | |||
| "url_4": "https://darklist.de/raw.php", | |||
| "rule_4": "/^(([0-9]{1,3}\\.){3}(1?[0-9][0-9]?|2[0-4][0-9]|25[0-5])(\\/(1?[0-9]|2?[0-9]|3?[0-2]))?)([[:space:]]|$)/{print \"add darklist_4 \"$1}", | |||
| "focus": "Attacker IP blacklist", | |||
| "descurl": "https://darklist.de" | |||
| }, | |||
| "debl": { | |||
| "url_4": "https://www.blocklist.de/downloads/export-ips_all.txt", | |||
| "url_6": "https://www.blocklist.de/downloads/export-ips_all.txt", | |||
| "rule_4": "/^(([0-9]{1,3}\\.){3}(1?[0-9][0-9]?|2[0-4][0-9]|25[0-5])(\\/(1?[0-9]|2?[0-9]|3?[0-2]))?)([[:space:]]|$)/{print \"add debl_4 \"$1}", | |||
| "rule_6": "/^(([0-9A-f]{0,4}:){1,7}[0-9A-f]{0,4}:?(\\/(1?[0-2][0-8]|[0-9][0-9]))?)([[:space:]]|$)/{print \"add debl_6 \"$1}", | |||
| "focus": "Fail2ban IP blacklist", | |||
| "descurl": "https://www.blocklist.de" | |||
| }, | |||
| "doh": { | |||
| "url_4": "https://raw.githubusercontent.com/dibdot/DoH-IP-blocklists/master/doh-ipv4.txt", | |||
| "url_6": "https://raw.githubusercontent.com/dibdot/DoH-IP-blocklists/master/doh-ipv6.txt", | |||
| "rule_4": "/^(([0-9]{1,3}\\.){3}(1?[0-9][0-9]?|2[0-4][0-9]|25[0-5])(\\/(1?[0-9]|2?[0-9]|3?[0-2]))?)([[:space:]]|$)/{print \"add doh_4 \"$1}", | |||
| "rule_6": "/^(([0-9A-f]{0,4}:){1,7}[0-9A-f]{0,4}:?(\\/(1?[0-2][0-8]|[0-9][0-9]))?)([[:space:]]|$)/{print \"add doh_6 \"$1}", | |||
| "focus": "Public DoH-Provider", | |||
| "descurl": "https://github.com/dibdot/DoH-IP-blocklists" | |||
| }, | |||
| "drop": { | |||
| "url_4": "https://www.spamhaus.org/drop/drop.txt", | |||
| "url_6": "https://www.spamhaus.org/drop/dropv6.txt", | |||
| "rule_4": "/^(([0-9]{1,3}\\.){3}(1?[0-9][0-9]?|2[0-4][0-9]|25[0-5])(\\/(1?[0-9]|2?[0-9]|3?[0-2]))?)([[:space:]]|$)/{print \"add drop_4 \"$1}", | |||
| "rule_6": "/^(([0-9A-f]{0,4}:){1,7}[0-9A-f]{0,4}:?(\\/(1?[0-2][0-8]|[0-9][0-9]))?)([[:space:]]|$)/{print \"add drop_6 \"$1}", | |||
| "focus": "Spamhaus drop compilation", | |||
| "descurl": "https://www.spamhaus.org" | |||
| }, | |||
| "dshield": { | |||
| "url_4": "https://feeds.dshield.org/block.txt", | |||
| "rule_4": "/^(([0-9]{1,3}\\.){3}(1?[0-9][0-9]?|2[0-4][0-9]|25[0-5])(\\/(1?[0-9]|2?[0-9]|3?[0-2]))?)([[:space:]]|$)/{print \"add dshield_4 \"$1 \"/\"$3}", | |||
| "focus": "Dshield IP blocklist", | |||
| "descurl": "https://www.dshield.org" | |||
| }, | |||
| "edrop": { | |||
| "url_4": "https://www.spamhaus.org/drop/edrop.txt", | |||
| "rule_4": "/^(([0-9]{1,3}\\.){3}(1?[0-9][0-9]?|2[0-4][0-9]|25[0-5])(\\/(1?[0-9]|2?[0-9]|3?[0-2]))?)([[:space:]]|$)/{print \"add edrop_4 \"$1}", | |||
| "focus": "Spamhaus edrop compilation", | |||
| "descurl": "https://www.spamhaus.org" | |||
| }, | |||
| "feodo": { | |||
| "url_4": "https://feodotracker.abuse.ch/downloads/ipblocklist.txt", | |||
| "rule_4": "/^(([0-9]{1,3}\\.){3}(1?[0-9][0-9]?|2[0-4][0-9]|25[0-5])(\\/(1?[0-9]|2?[0-9]|3?[0-2]))?)([[:space:]]|$)/{print \"add feodo_4 \"$1}", | |||
| "focus": "Feodo Tracker", | |||
| "descurl": "https://feodotracker.abuse.ch" | |||
| }, | |||
| "firehol1": { | |||
| "url_4": "https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/firehol_level1.netset", | |||
| "rule_4": "/^(([0-9]{1,3}\\.){3}(1?[0-9][0-9]?|2[0-4][0-9]|25[0-5])(\\/(1?[0-9]|2?[0-9]|3?[0-2]))?)([[:space:]]|$)/{print \"add firehol1_4 \"$1}", | |||
| "focus": "Firehol Level 1 compilation", | |||
| "descurl": "https://iplists.firehol.org/?ipset=firehol_level1" | |||
| }, | |||
| "firehol2": { | |||
| "url_4": "https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/firehol_level2.netset", | |||
| "rule_4": "/^(([0-9]{1,3}\\.){3}(1?[0-9][0-9]?|2[0-4][0-9]|25[0-5])(\\/(1?[0-9]|2?[0-9]|3?[0-2]))?)([[:space:]]|$)/{print \"add firehol2_4 \"$1}", | |||
| "focus": "Firehol Level 2 compilation", | |||
| "descurl": "https://iplists.firehol.org/?ipset=firehol_level2" | |||
| }, | |||
| "firehol3": { | |||
| "url_4": "https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/firehol_level3.netset", | |||
| "rule_4": "/^(([0-9]{1,3}\\.){3}(1?[0-9][0-9]?|2[0-4][0-9]|25[0-5])(\\/(1?[0-9]|2?[0-9]|3?[0-2]))?)([[:space:]]|$)/{print \"add firehol3_4 \"$1}", | |||
| "focus": "Firehol Level 3 compilation", | |||
| "descurl": "https://iplists.firehol.org/?ipset=firehol_level3" | |||
| }, | |||
| "firehol4": { | |||
| "url_4": "https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/firehol_level4.netset", | |||
| "rule_4": "/^(([0-9]{1,3}\\.){3}(1?[0-9][0-9]?|2[0-4][0-9]|25[0-5])(\\/(1?[0-9]|2?[0-9]|3?[0-2]))?)([[:space:]]|$)/{print \"add firehol4_4 \"$1}", | |||
| "focus": "Firehol Level 4 compilation", | |||
| "descurl": "https://iplists.firehol.org/?ipset=firehol_level4" | |||
| }, | |||
| "iblockads": { | |||
| "url_4": "https://list.iblocklist.com/?list=dgxtneitpuvgqqcpfulq&fileformat=cidr&archiveformat=gz", | |||
| "rule_4": "/^(([0-9]{1,3}\\.){3}(1?[0-9][0-9]?|2[0-4][0-9]|25[0-5])(\\/(1?[0-9]|2?[0-9]|3?[0-2]))?)([[:space:]]|$)/{print \"add iblockads_4 \"$1}", | |||
| "focus": "Advertising blocklist", | |||
| "descurl": "https://www.iblocklist.com", | |||
| "comp": "gz" | |||
| }, | |||
| "iblockspy": { | |||
| "url_4": "https://list.iblocklist.com/?list=llvtlsjyoyiczbkjsxpf&fileformat=cidr&archiveformat=gz", | |||
| "rule_4": "/^(([0-9]{1,3}\\.){3}(1?[0-9][0-9]?|2[0-4][0-9]|25[0-5])(\\/(1?[0-9]|2?[0-9]|3?[0-2]))?)([[:space:]]|$)/{print \"add iblockspy_4 \"$1}", | |||
| "focus": "Malicious spyware blocklist", | |||
| "descurl": "https://www.iblocklist.com", | |||
| "comp": "gz" | |||
| }, | |||
| "myip": { | |||
| "url_4": "https://myip.ms/files/blacklist/general/latest_blacklist.txt", | |||
| "url_6": "https://myip.ms/files/blacklist/general/latest_blacklist.txt", | |||
| "rule_4": "/^(([0-9]{1,3}\\.){3}(1?[0-9][0-9]?|2[0-4][0-9]|25[0-5])(\\/(1?[0-9]|2?[0-9]|3?[0-2]))?)([[:space:]]|$)/{print \"add myip_4 \"$1}", | |||
| "rule_6": "/^(([0-9A-f]{0,4}:){1,7}[0-9A-f]{0,4}:?(\\/(1?[0-2][0-8]|[0-9][0-9]))?)([[:space:]]|$)/{print \"add myip_6 \"$1}", | |||
| "focus": "Myip Live IP blacklist", | |||
| "descurl": "https://myip.ms" | |||
| }, | |||
| "nixspam": { | |||
| "url_4": "http://www.dnsbl.manitu.net/download/nixspam-ip.dump.gz", | |||
| "rule_4": "/(([0-9]{1,3}\\.){3}(1?[0-9][0-9]?|2[0-4][0-9]|25[0-5])(\\/(1?[0-9]|2?[0-9]|3?[0-2]))?)([[:space:]]|$)/{print \"add nixspam_4 \"$2}", | |||
| "focus": "iX spam protection", | |||
| "descurl": "http://www.nixspam.org", | |||
| "comp": "gz" | |||
| }, | |||
| "proxy": { | |||
| "url_4": "https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/proxylists.ipset", | |||
| "rule_4": "/^(([0-9]{1,3}\\.){3}(1?[0-9][0-9]?|2[0-4][0-9]|25[0-5])(\\/(1?[0-9]|2?[0-9]|3?[0-2]))?)([[:space:]]|$)/{print \"add proxy_4 \"$1}", | |||
| "focus": "Firehol list of open proxies", | |||
| "descurl": "https://iplists.firehol.org/?ipset=proxylists" | |||
| }, | |||
| "sslbl": { | |||
| "url_4": "https://sslbl.abuse.ch/blacklist/sslipblacklist.csv", | |||
| "rule_4": "BEGIN{FS=\",\"}/(([0-9]{1,3}\\.){3}(1?[0-9][0-9]?|2[0-4][0-9]|25[0-5])(\\/(1?[0-9]|2?[0-9]|3?[0-2]))?)/{print \"add sslbl_4 \"$2}", | |||
| "focus": "SSL botnet IP blacklist", | |||
| "descurl": "https://sslbl.abuse.ch" | |||
| }, | |||
| "threat": { | |||
| "url_4": "https://rules.emergingthreats.net/fwrules/emerging-Block-IPs.txt", | |||
| "rule_4": "/^(([0-9]{1,3}\\.){3}(1?[0-9][0-9]?|2[0-4][0-9]|25[0-5])(\\/(1?[0-9]|2?[0-9]|3?[0-2]))?)([[:space:]]|$)/{print \"add threat_4 \"$1}", | |||
| "focus": "Emerging Threats", | |||
| "descurl": "https://rules.emergingthreats.net" | |||
| }, | |||
| "tor": { | |||
| "url_4": "https://lists.fissionrelays.net/tor/exits-ipv4.txt", | |||
| "url_6": "https://lists.fissionrelays.net/tor/exits-ipv6.txt", | |||
| "rule_4": "/^(([0-9]{1,3}\\.){3}(1?[0-9][0-9]?|2[0-4][0-9]|25[0-5])(\\/(1?[0-9]|2?[0-9]|3?[0-2]))?)([[:space:]]|$)/{print \"add tor_4 \"$1}", | |||
| "rule_6": "/^(([0-9A-f]{0,4}:){1,7}[0-9A-f]{0,4}:?(\\/(1?[0-2][0-8]|[0-9][0-9]))?)([[:space:]]|$)/{print \"add tor_6 \"$1}", | |||
| "focus": "Tor exit nodes", | |||
| "descurl": "https://fissionrelays.net/lists" | |||
| }, | |||
| "uceprotect1": { | |||
| "url_4": "http://wget-mirrors.uceprotect.net/rbldnsd-all/dnsbl-1.uceprotect.net.gz", | |||
| "rule_4": "/^(([0-9]{1,3}\\.){3}(1?[0-9][0-9]?|2[0-4][0-9]|25[0-5])(\\/(1?[0-9]|2?[0-9]|3?[0-2]))?)$/{print \"add uceprotect1_4 \"$1}", | |||
| "focus": "Spam protection level 1", | |||
| "descurl": "http://www.uceprotect.net/en/index.php", | |||
| "comp": "gz" | |||
| }, | |||
| "uceprotect2": { | |||
| "url_4": "http://wget-mirrors.uceprotect.net/rbldnsd-all/dnsbl-2.uceprotect.net.gz", | |||
| "rule_4": "BEGIN{IGNORECASE=1}/^(([0-9]{1,3}\\.){3}(1?[0-9][0-9]?|2[0-4][0-9]|25[0-5])(\\/(1?[0-9]|2?[0-9]|3?[0-2]))?)([[:space:]]+NET[[:space:]]+)/{print \"add uceprotect2_4 \"$1}", | |||
| "focus": "Spam protection level 2", | |||
| "descurl": "http://www.uceprotect.net/en/index.php", | |||
| "comp": "gz" | |||
| }, | |||
| "voip": { | |||
| "url_4": "http://www.voipbl.org/update/", | |||
| "rule_4": "/^(([0-9]{1,3}\\.){3}(1?[0-9][0-9]?|2[0-4][0-9]|25[0-5])(\\/(1?[0-9]|2?[0-9]|3?[0-2]))?)([[:space:]]|$)/{print \"add voip_4 \"$1}", | |||
| "focus": "VoIP fraud blocklist", | |||
| "descurl": "http://www.voipbl.org" | |||
| }, | |||
| "yoyo": { | |||
| "url_4": "https://pgl.yoyo.org/adservers/iplist.php?ipformat=plain&showintro=0&mimetype=plaintext", | |||
| "rule_4": "/^(([0-9]{1,3}\\.){3}(1?[0-9][0-9]?|2[0-4][0-9]|25[0-5])(\\/(1?[0-9]|2?[0-9]|3?[0-2]))?)([[:space:]]|$)/{print \"add yoyo_4 \"$1}", | |||
| "focus": "Ad protection blacklist", | |||
| "descurl": "https://pgl.yoyo.org/adservers/" | |||
| } | |||
| } | |||