bogdan/zira-etc
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

saving uncommitted changes in /etc prior to dnf run

Browse Source
This commit is contained in:
Bogdan Stoica
2023-08-10 11:58:05 +03:00
parent 2d84c3580c
commit b9d544b9c6
199 changed files with 5119 additions and 120 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
csf/changelog.txt
View File

@@ -1,5 +1,15 @@
ChangeLog:
14.19 - Switch to using iptables-nft if it exists in /usr/sbin/iptables-nft
Added IO::Handle::clearerr() call before reading data from a log file
Added "Require all granted" to the MESSENGER .htaccess file
Added UID/GID rules to IPv6 if enabled
Modified dovecot regex to look for "failed: Connection reset by peer"
14.18 - Added port 853 for DoT to all new installs
Added exe wpt-panopticon on cPanel servers to csf.pignore

2
csf/csf.allow
View File

@@ -164,3 +164,5 @@ tcp:in:d=5666:s=194.63.143.34 # file.rocks
86.127.21.14 # Manually allowed: 86.127.21.14 (RO/Romania/Dolj/Craiova/86-127-21-14.rdsnet.ro) - Mon Jan 23 16:40:32 2023
86.126.37.205 # Manually allowed: 86.126.37.205 (RO/Romania/Dolj/Craiova/-) - Sat Apr 8 19:07:42 2023
79.118.105.18 # Manually allowed: 79.118.105.18 (RO/Romania/Dolj/Craiova/79-118-105-18.rdsnet.ro) - Sat Jul 22 10:35:41 2023
84.232.178.85 # Manually allowed: 84.232.178.85 (RO/Romania/Constanta/Mangalia/84.232.178.85.constanta.rdsnet.ro) - Wed Jul 26 16:09:22 2023

46
csf/csf.deny
View File

@@ -15,29 +15,6 @@
# tcp/udp|in/out|s/d=port,port,...|s/d=ip
#
# See readme.txt for more information regarding advanced port filtering
45.195.250.47 # lfd: (PERMBLOCK) 45.195.250.47 (MU/Mauritius/-/-/-) has had more than 2 temp blocks in the last 86400 secs - Mon Apr 3 22:54:52 2023
217.133.27.74 # lfd: (PERMBLOCK) 217.133.27.74 (IT/Italy/Province of Treviso/Milan/217-133-27-74.static.clienti.tiscali.it) has had more than 2 temp blocks in the last 86400 secs - Tue Apr 4 04:29:37 2023
207.180.211.160 # lfd: (PERMBLOCK) 207.180.211.160 (DE/Germany/Bavaria/Nuremberg/ip-160-211-180-207.static.contabo.net) has had more than 2 temp blocks in the last 86400 secs - Tue Apr 4 08:11:31 2023
159.223.184.117 # lfd: (PERMBLOCK) 159.223.184.117 (US/United States/New Jersey/North Bergen/-) has had more than 2 temp blocks in the last 86400 secs - Tue Apr 4 08:11:32 2023
5.56.132.113 # lfd: (PERMBLOCK) 5.56.132.113 (IR/Iran/Tehran/Tehran/asiatech.dn-server.com) has had more than 2 temp blocks in the last 86400 secs - Tue Apr 4 08:48:54 2023
2.229.116.68 # lfd: (PERMBLOCK) 2.229.116.68 (IT/Italy/Province of Perugia/Perugia/2-229-116-68.ip196.fastwebnet.it) has had more than 2 temp blocks in the last 86400 secs - Tue Apr 4 10:02:36 2023
194.116.190.166 # lfd: (PERMBLOCK) 194.116.190.166 (TR/Turkey/Izmir/Izmir/vm1123345.stark-industries.solutions) has had more than 2 temp blocks in the last 86400 secs - Tue Apr 4 10:10:47 2023
178.176.174.82 # lfd: 178.176.174.82 (RU/Russia/Mariy-El Republic/Yoshkar-Ola/-), 5 distributed SMTP Logins on account [madalin@club3d.ro] in the last 300 secs - Tue Apr 4 10:11:57 2023
178.176.174.106 # lfd: 178.176.174.106 (RU/Russia/Mariy-El Republic/Yoshkar-Ola/-), 5 distributed SMTP Logins on account [madalin@club3d.ro] in the last 300 secs - Tue Apr 4 10:11:57 2023
178.176.174.0/24 # lfd: (NETBLOCK) 178.176.174.0/24 (RU/Russia/Mariy-El Republic/Yoshkar-Ola/-) has had more than 2 blocks in the last 86400 secs - Tue Apr 4 10:11:57 2023
178.176.175.76 # lfd: 178.176.175.76 (RU/Russia/Mariy-El Republic/Yoshkar-Ola/-), 5 distributed SMTP Logins on account [madalin@club3d.ro] in the last 300 secs - Tue Apr 4 10:11:58 2023
178.176.174.144 # lfd: 178.176.174.144 (RU/Russia/Mariy-El Republic/Yoshkar-Ola/-), 5 distributed SMTP Logins on account [madalin@club3d.ro] in the last 300 secs - Tue Apr 4 10:11:58 2023
188.162.199.119 # lfd: 188.162.199.119 (RU/Russia/Mariy-El Republic/Yoshkar-Ola/client.yota.ru), 5 distributed SMTP Logins on account [madalin@club3d.ro] in the last 300 secs - Tue Apr 4 11:49:56 2023
188.162.43.118 # lfd: 188.162.43.118 (RU/Russia/Mariy-El Republic/Yoshkar-Ola/client.yota.ru), 5 distributed SMTP Logins on account [madalin@club3d.ro] in the last 300 secs - Tue Apr 4 11:49:56 2023
188.162.43.135 # lfd: 188.162.43.135 (RU/Russia/Mariy-El Republic/Volzhsk/client.yota.ru), 5 distributed SMTP Logins on account [madalin@club3d.ro] in the last 300 secs - Tue Apr 4 11:49:56 2023
188.162.43.0/24 # lfd: (NETBLOCK) 188.162.43.0/24 (RU/Russia/Mariy-El Republic/Yoshkar-Ola/-) has had more than 2 blocks in the last 86400 secs - Tue Apr 4 11:49:57 2023
47.75.96.96 # lfd: (PERMBLOCK) 47.75.96.96 (HK/Hong Kong/Central and Western District/Central/-) has had more than 2 temp blocks in the last 86400 secs - Tue Apr 4 12:15:59 2023
211.195.100.243 # lfd: (PERMBLOCK) 211.195.100.243 (KR/South Korea/Gyeonggi-do/Paju/-) has had more than 2 temp blocks in the last 86400 secs - Tue Apr 4 12:15:59 2023
91.234.124.6 # lfd: (PERMBLOCK) 91.234.124.6 (PL/Poland/Silesia/Sosnicowice/6.124.234.91.ip4.krucznet.com.pl) has had more than 2 temp blocks in the last 86400 secs - Tue Apr 4 12:43:36 2023
186.23.211.154 # lfd: (PERMBLOCK) 186.23.211.154 (AR/Argentina/Buenos Aires/Buenos Aires/cpe-186-23-211-154.telecentro-reversos.com.ar) has had more than 2 temp blocks in the last 86400 secs - Tue Apr 4 13:10:26 2023
178.176.175.0/24 # lfd: (NETBLOCK) 178.176.175.0/24 (RU/Russia/Mariy-El Republic/Yoshkar-Ola/-) has had more than 2 blocks in the last 86400 secs - Tue Apr 4 13:30:43 2023
185.174.172.44 # lfd: (PERMBLOCK) 185.174.172.44 (NL/Netherlands/North Holland/Amsterdam/free.hyperhost.name) has had more than 2 temp blocks in the last 86400 secs - Tue Apr 4 13:48:10 2023
188.40.183.10 # lfd: (PERMBLOCK) 188.40.183.10 (DE/Germany/-/-/static.10.183.40.188.clients.your-server.de) has had more than 2 temp blocks in the last 86400 secs - Tue Apr 4 13:53:55 2023
188.166.252.132 # lfd: (PERMBLOCK) 188.166.252.132 (SG/Singapore/-/-/-) has had more than 2 temp blocks in the last 86400 secs - Tue Apr 4 13:53:56 2023
188.162.199.0/24 # lfd: (NETBLOCK) 188.162.199.0/24 (RU/Russia/Mariy-El Republic/Yoshkar-Ola/-) has had more than 2 blocks in the last 86400 secs - Tue Apr 4 15:07:33 2023
191.96.57.205 # lfd: (PERMBLOCK) 191.96.57.205 (SG/Singapore/-/-/-) has had more than 2 temp blocks in the last 86400 secs - Tue Apr 4 16:35:16 2023
@@ -1014,3 +991,26 @@ fe80::8e6:3998:39c:ed5e # lfd: (PERMBLOCK) fe80::8e6:3998:39c:ed5e (Unknown) has
fe80::10b7:2e24:ed8c:a327 # lfd: (PERMBLOCK) fe80::10b7:2e24:ed8c:a327 (Unknown) has had more than 2 temp blocks in the last 86400 secs - Sun Jun 25 02:58:17 2023
fe80::832:e5eb:59f9:5603 # lfd: (PERMBLOCK) fe80::832:e5eb:59f9:5603 (Unknown) has had more than 2 temp blocks in the last 86400 secs - Mon Jun 26 00:05:49 2023
fe80::14c6:839:7770:36d # lfd: (PERMBLOCK) fe80::14c6:839:7770:36d (Unknown) has had more than 2 temp blocks in the last 86400 secs - Mon Jun 26 19:51:46 2023
fe80::8a0:163e:ca63:49d4 # lfd: (PERMBLOCK) fe80::8a0:163e:ca63:49d4 (Unknown) has had more than 2 temp blocks in the last 86400 secs - Thu Jun 29 06:45:26 2023
fe80::1c83:d21a:69de:3dff # lfd: (PERMBLOCK) fe80::1c83:d21a:69de:3dff (Unknown) has had more than 2 temp blocks in the last 86400 secs - Tue Jul 4 03:42:09 2023
fe80::cae:ae39:e610:9339 # lfd: (PERMBLOCK) fe80::cae:ae39:e610:9339 (Unknown) has had more than 2 temp blocks in the last 86400 secs - Tue Jul 4 10:19:35 2023
fe80::1497:32a7:c88d:d093 # lfd: (PERMBLOCK) fe80::1497:32a7:c88d:d093 (Unknown) has had more than 2 temp blocks in the last 86400 secs - Thu Jul 6 14:26:16 2023
fe80::145d:ad6f:97a6:bef1 # lfd: (PERMBLOCK) fe80::145d:ad6f:97a6:bef1 (Unknown) has had more than 2 temp blocks in the last 86400 secs - Fri Jul 7 09:42:14 2023
fe80::1466:983a:ff7d:1982 # lfd: (PERMBLOCK) fe80::1466:983a:ff7d:1982 (Unknown) has had more than 2 temp blocks in the last 86400 secs - Fri Jul 7 17:22:41 2023
fe80::1454:cb1b:c62:387d # lfd: (PERMBLOCK) fe80::1454:cb1b:c62:387d (Unknown) has had more than 2 temp blocks in the last 86400 secs - Mon Jul 10 08:03:23 2023
fe80::c74:414b:5b84:dd07 # lfd: (PERMBLOCK) fe80::c74:414b:5b84:dd07 (Unknown) has had more than 2 temp blocks in the last 86400 secs - Wed Jul 12 08:45:31 2023
fe80::cc0:8cd9:a569:6148 # lfd: (PERMBLOCK) fe80::cc0:8cd9:a569:6148 (Unknown) has had more than 2 temp blocks in the last 86400 secs - Thu Jul 13 08:05:30 2023
fe80::1cea:e20b:e16f:96ec # lfd: (PERMBLOCK) fe80::1cea:e20b:e16f:96ec (Unknown) has had more than 2 temp blocks in the last 86400 secs - Fri Jul 14 00:33:57 2023
fe80::1c16:c253:d19d:f0b6 # lfd: (PERMBLOCK) fe80::1c16:c253:d19d:f0b6 (Unknown) has had more than 2 temp blocks in the last 86400 secs - Fri Jul 14 16:03:14 2023
fe80::c18:ed50:d53e:8d15 # lfd: (PERMBLOCK) fe80::c18:ed50:d53e:8d15 (Unknown) has had more than 2 temp blocks in the last 86400 secs - Fri Jul 14 18:08:30 2023
fe80::833:4a39:2c92:3499 # lfd: (PERMBLOCK) fe80::833:4a39:2c92:3499 (Unknown) has had more than 2 temp blocks in the last 86400 secs - Sun Jul 16 09:39:33 2023
fe80::4ab:87be:fb4e:d8d # lfd: (PERMBLOCK) fe80::4ab:87be:fb4e:d8d (Unknown) has had more than 2 temp blocks in the last 86400 secs - Mon Jul 17 08:50:41 2023
fe80::d5:2dca:f5f8:62ea # lfd: (PERMBLOCK) fe80::d5:2dca:f5f8:62ea (Unknown) has had more than 2 temp blocks in the last 86400 secs - Tue Jul 18 12:13:38 2023
fe80::c98:15a7:9e57:4ff3 # lfd: (PERMBLOCK) fe80::c98:15a7:9e57:4ff3 (Unknown) has had more than 2 temp blocks in the last 86400 secs - Thu Jul 20 10:15:50 2023
fe80::14aa:9d62:4d16:4c73 # lfd: (PERMBLOCK) fe80::14aa:9d62:4d16:4c73 (Unknown) has had more than 2 temp blocks in the last 86400 secs - Thu Jul 20 16:04:02 2023
fe80::18c0:3f4:a2a8:54f # lfd: (PERMBLOCK) fe80::18c0:3f4:a2a8:54f (Unknown) has had more than 2 temp blocks in the last 86400 secs - Mon Jul 24 08:00:38 2023
fe80::cab:d775:47e7:23d9 # lfd: (PERMBLOCK) fe80::cab:d775:47e7:23d9 (Unknown) has had more than 2 temp blocks in the last 86400 secs - Mon Jul 31 22:56:04 2023
fe80::cfb:d8b8:f75b:38a # lfd: (PERMBLOCK) fe80::cfb:d8b8:f75b:38a (Unknown) has had more than 2 temp blocks in the last 86400 secs - Wed Aug 2 08:14:40 2023
fe80::4c8:9f96:c0b9:955e # lfd: (PERMBLOCK) fe80::4c8:9f96:c0b9:955e (Unknown) has had more than 2 temp blocks in the last 86400 secs - Sat Aug 5 12:38:05 2023
fe80::411:a52a:fa4a:882c # lfd: (PERMBLOCK) fe80::411:a52a:fa4a:882c (Unknown) has had more than 2 temp blocks in the last 86400 secs - Sun Aug 6 03:18:20 2023
fe80::87f:abbf:7db0:23a8 # lfd: (PERMBLOCK) fe80::87f:abbf:7db0:23a8 (Unknown) has had more than 2 temp blocks in the last 86400 secs - Sun Aug 6 18:24:30 2023

5
csf/csf.ignore
View File

@@ -47,3 +47,8 @@
188.25.145.26
5.12.16.177
5.12.35.96
5.12.34.105
5.12.34.98
82.77.156.70
;; connection timed out; no servers could be reached

2
csf/csf.pignore
View File

@@ -157,6 +157,8 @@ user:dbus
# vampi
user:vampi
user:opendmarc
user:smiti
user: laser
# wazuh
user:ossec

2
csf/readme.txt
View File

@@ -241,7 +241,7 @@ csf.allow - a list of IP's and CIDR addresses that should always be allowed
through the firewall
csf.deny - a list of IP's and CIDR addresses that should never be allowed
through the firewall
csf.ignore - a list of IP's and CIDR addresses that lfd should ignore and not
csf.ignore - a list of IP's and CIDR addresses that lfd should ignore and
not block if detected
csf.*ignore - various ignore files that list files, users, IP's that lfd
should ignore. See each file for their specific purpose and

2
csf/version.txt
View File

@@ -1 +1 @@
14.18
14.19