diff --git a/.etckeeper b/.etckeeper index df8183e..0048a05 100755 --- a/.etckeeper +++ b/.etckeeper @@ -59,12 +59,6 @@ mkdir -p './mail/spamassassin/sa-update-keys/private-keys-v1.d' mkdir -p './modulefiles' mkdir -p './modules-load.d' mkdir -p './named' -mkdir -p './netdata/charts.d' -mkdir -p './netdata/custom-plugins.d' -mkdir -p './netdata/ebpf.d' -mkdir -p './netdata/go.d' -mkdir -p './netdata/python.d' -mkdir -p './netdata/ssl' mkdir -p './netdata/statsd.d' mkdir -p './newrelic-infra/integrations.d' mkdir -p './nginx/conf.d/ganool/nginx/modules' @@ -998,7 +992,6 @@ maybe chmod 0644 'httpd/conf.d/perl.conf.rpmnew' maybe chmod 0644 'httpd/conf.d/php.conf' maybe chmod 0644 'httpd/conf.d/phpmyadmin.conf' maybe chmod 0644 'httpd/conf.d/squid.conf' -maybe chmod 0644 'httpd/conf.d/ssl.conf' maybe chmod 0644 'httpd/conf.d/ssl.conf_disabled' maybe chmod 0644 'httpd/conf.d/userdir.conf' maybe chmod 0644 'httpd/conf.d/welcome.conf' @@ -4206,18 +4199,14 @@ maybe chgrp 'named' 'named.root.key' maybe chmod 0644 'named.root.key' maybe chmod 0644 'netconfig' maybe chmod 0755 'netdata' +maybe chgrp 'netdata' 'netdata/.install-type' maybe chmod 0644 'netdata/.install-type' -maybe chmod 0755 'netdata/charts.d' -maybe chmod 0755 'netdata/custom-plugins.d' -maybe chmod 0755 'netdata/ebpf.d' +maybe chgrp 'netdata' 'netdata/edit-config' maybe chmod 0755 'netdata/edit-config' -maybe chmod 0755 'netdata/go.d' maybe chmod 0755 'netdata/health.d' maybe chmod 0640 'netdata/health.d/ram-usage.conf' maybe chmod 0640 'netdata/health.d/swap-usage.conf' maybe chmod 0644 'netdata/netdata.conf' -maybe chmod 0755 'netdata/python.d' -maybe chmod 0755 'netdata/ssl' maybe chmod 0755 'netdata/statsd.d' maybe chmod 0644 'networks' maybe chmod 0755 'newrelic-infra' diff --git a/aliases.db b/aliases.db index d09db35..ec12a6c 100644 Binary files a/aliases.db and b/aliases.db differ diff --git a/csf/csf.deny b/csf/csf.deny index cc34266..576f0e3 100644 --- a/csf/csf.deny +++ b/csf/csf.deny @@ -864,3 +864,103 @@ 206.189.88.242 # lfd: (PERMBLOCK) 206.189.88.242 (SG/Singapore/-/-/-) has had more than 2 temp blocks in the last 86400 secs - Thu May 25 13:52:42 2023 125.209.73.250 # lfd: (PERMBLOCK) 125.209.73.250 (PK/Pakistan/Punjab/Lahore/125-209-73-250.multi.net.pk) has had more than 2 temp blocks in the last 86400 secs - Thu May 25 13:52:42 2023 14.63.217.28 # lfd: (PERMBLOCK) 14.63.217.28 (KR/South Korea/-/-/-) has had more than 2 temp blocks in the last 86400 secs - Thu May 25 13:52:43 2023 +27.254.235.12 # lfd: (PERMBLOCK) 27.254.235.12 (TH/Thailand/-/-/-) has had more than 2 temp blocks in the last 86400 secs - Thu May 25 18:51:32 2023 +122.219.108.171 # lfd: (PERMBLOCK) 122.219.108.171 (JP/Japan/-/-/171.168/29.108.219.122.in-addr.arpa) has had more than 2 temp blocks in the last 86400 secs - Thu May 25 19:10:44 2023 +39.91.166.21 # lfd: (PERMBLOCK) 39.91.166.21 (CN/China/-/-/-) has had more than 2 temp blocks in the last 86400 secs - Thu May 25 19:12:09 2023 +205.185.116.76 # lfd: (PERMBLOCK) 205.185.116.76 (US/United States/Nevada/Las Vegas/lostbuthappy.net) has had more than 2 temp blocks in the last 86400 secs - Thu May 25 19:12:44 2023 +172.245.81.147 # lfd: (PERMBLOCK) 172.245.81.147 (US/United States/Virginia/Norfolk/172-245-81-147-host.colocrossing.com) has had more than 2 temp blocks in the last 86400 secs - Thu May 25 19:12:45 2023 +43.133.177.228 # lfd: (PERMBLOCK) 43.133.177.228 (JP/Japan/Tokyo/Tokyo/-) has had more than 2 temp blocks in the last 86400 secs - Thu May 25 19:13:14 2023 +188.190.158.192 # lfd: (PERMBLOCK) 188.190.158.192 (RU/Russia/Samara Oblast/Zhigulevsk/-) has had more than 2 temp blocks in the last 86400 secs - Thu May 25 19:16:00 2023 +43.153.86.185 # lfd: (PERMBLOCK) 43.153.86.185 (US/United States/California/-/-) has had more than 2 temp blocks in the last 86400 secs - Thu May 25 19:19:10 2023 +5.161.192.197 # lfd: (PERMBLOCK) 5.161.192.197 (US/United States/-/-/static.197.192.161.5.clients.your-server.de) has had more than 2 temp blocks in the last 86400 secs - Thu May 25 19:40:12 2023 +203.146.57.198 # lfd: (PERMBLOCK) 203.146.57.198 (TH/Thailand/-/-/-) has had more than 2 temp blocks in the last 86400 secs - Thu May 25 19:40:13 2023 +41.190.158.22 # lfd: (PERMBLOCK) 41.190.158.22 (UG/Uganda/Kampala District/Kampala/-) has had more than 2 temp blocks in the last 86400 secs - Thu May 25 21:18:59 2023 +47.88.51.243 # lfd: (PERMBLOCK) 47.88.51.243 (US/United States/California/San Mateo/-) has had more than 2 temp blocks in the last 86400 secs - Thu May 25 23:31:37 2023 +84.54.115.115 # lfd: (PERMBLOCK) 84.54.115.115 (UZ/Uzbekistan/Tashkent/Tashkent/-) has had more than 2 temp blocks in the last 86400 secs - Thu May 25 23:32:57 2023 +129.144.44.148 # lfd: (PERMBLOCK) 129.144.44.148 (US/United States/Virginia/Ashburn/oc-129-144-44-148.compute.oraclecloud.com) has had more than 2 temp blocks in the last 86400 secs - Thu May 25 23:35:27 2023 +109.73.34.66 # lfd: (PERMBLOCK) 109.73.34.66 (RU/Russia/-/-/-) has had more than 2 temp blocks in the last 86400 secs - Thu May 25 23:36:22 2023 +89.252.140.21 # lfd: (PERMBLOCK) 89.252.140.21 (TR/Turkey/Istanbul/Istanbul/-) has had more than 2 temp blocks in the last 86400 secs - Thu May 25 23:36:42 2023 +80.91.223.178 # lfd: (PERMBLOCK) 80.91.223.178 (DE/Germany/-/-/expansehost.de) has had more than 2 temp blocks in the last 86400 secs - Thu May 25 23:38:03 2023 +47.242.158.245 # lfd: (PERMBLOCK) 47.242.158.245 (HK/Hong Kong/Central and Western District/Central/-) has had more than 2 temp blocks in the last 86400 secs - Thu May 25 23:40:43 2023 +179.228.113.249 # lfd: (PERMBLOCK) 179.228.113.249 (BR/Brazil/Sao Paulo/São Paulo/179-228-113-249.user.vivozap.com.br) has had more than 2 temp blocks in the last 86400 secs - Thu May 25 23:40:43 2023 +200.142.111.62 # lfd: (PERMBLOCK) 200.142.111.62 (BR/Brazil/Rio de Janeiro/Rio de Janeiro/mvx-200-142-111-62.mundivox.com) has had more than 2 temp blocks in the last 86400 secs - Thu May 25 23:48:59 2023 +101.33.80.197 # lfd: (PERMBLOCK) 101.33.80.197 (KR/South Korea/Seoul/Seoul/-) has had more than 2 temp blocks in the last 86400 secs - Fri May 26 01:46:06 2023 +103.83.80.82 # lfd: (PERMBLOCK) 103.83.80.82 (IN/India/Madhya Pradesh/Mhow/-) has had more than 2 temp blocks in the last 86400 secs - Fri May 26 05:26:56 2023 +178.128.29.253 # lfd: (PERMBLOCK) 178.128.29.253 (SG/Singapore/-/-/-) has had more than 2 temp blocks in the last 86400 secs - Fri May 26 05:46:08 2023 +85.173.245.55 # lfd: (PERMBLOCK) 85.173.245.55 (RU/Russia/-/-/-) has had more than 2 temp blocks in the last 86400 secs - Fri May 26 10:11:46 2023 +177.153.51.203 # lfd: (PERMBLOCK) 177.153.51.203 (BR/Brazil/-/-/k9vpn.vps-kinghost.net) has had more than 2 temp blocks in the last 86400 secs - Fri May 26 10:53:00 2023 +198.11.183.22 # lfd: (PERMBLOCK) 198.11.183.22 (US/United States/California/-/-) has had more than 2 temp blocks in the last 86400 secs - Fri May 26 12:40:15 2023 +177.91.249.180 # lfd: (PERMBLOCK) 177.91.249.180 (PE/Peru/Lima/Lima/-) has had more than 2 temp blocks in the last 86400 secs - Fri May 26 12:49:56 2023 +47.241.168.127 # lfd: (PERMBLOCK) 47.241.168.127 (SG/Singapore/-/-/-) has had more than 2 temp blocks in the last 86400 secs - Fri May 26 12:53:27 2023 +193.36.85.72 # lfd: (PERMBLOCK) 193.36.85.72 (DE/Germany/Hesse/Frankfurt am Main/-) has had more than 2 temp blocks in the last 86400 secs - Fri May 26 12:53:27 2023 +8.210.66.162 # lfd: (PERMBLOCK) 8.210.66.162 (HK/Hong Kong/Central and Western District/Central/-) has had more than 2 temp blocks in the last 86400 secs - Fri May 26 12:55:37 2023 +83.55.2.164 # lfd: (PERMBLOCK) 83.55.2.164 (ES/Spain/Leon/Ponferrada/164.red-83-55-2.dynamicip.rima-tde.net) has had more than 2 temp blocks in the last 86400 secs - Fri May 26 14:03:13 2023 +202.52.50.234 # lfd: (PERMBLOCK) 202.52.50.234 (ID/Indonesia/-/-/-) has had more than 2 temp blocks in the last 86400 secs - Fri May 26 14:14:54 2023 +177.22.87.228 # lfd: (PERMBLOCK) 177.22.87.228 (BR/Brazil/Rio Grande do Sul/Espumoso/177-22-87-228.triway.net.br) has had more than 2 temp blocks in the last 86400 secs - Fri May 26 15:17:15 2023 +185.45.195.108 # lfd: (PERMBLOCK) 185.45.195.108 (US/United States/California/Los Angeles/-) has had more than 2 temp blocks in the last 86400 secs - Fri May 26 16:39:27 2023 +104.248.176.159 # lfd: (PERMBLOCK) 104.248.176.159 (US/United States/California/Santa Clara/-) has had more than 2 temp blocks in the last 86400 secs - Fri May 26 20:35:43 2023 +47.245.106.105 # lfd: (PERMBLOCK) 47.245.106.105 (SG/Singapore/-/-/-) has had more than 2 temp blocks in the last 86400 secs - Fri May 26 20:42:48 2023 +193.114.140.202 # lfd: (PERMBLOCK) 193.114.140.202 (AU/Australia/New South Wales/Sydney/193-114-140-202.tpgi.com.au) has had more than 2 temp blocks in the last 86400 secs - Fri May 26 20:42:49 2023 +194.242.57.121 # lfd: (PERMBLOCK) 194.242.57.121 (DE/Germany/North Rhine-Westphalia/Düsseldorf/vmi1187940.contaboserver.net) has had more than 2 temp blocks in the last 86400 secs - Fri May 26 22:02:30 2023 +102.22.146.178 # lfd: (PERMBLOCK) 102.22.146.178 (RW/Rwanda/Kigali/Kigali/-) has had more than 2 temp blocks in the last 86400 secs - Fri May 26 22:35:08 2023 +47.245.106.72 # lfd: (PERMBLOCK) 47.245.106.72 (SG/Singapore/-/-/-) has had more than 2 temp blocks in the last 86400 secs - Sat May 27 04:51:01 2023 +104.131.181.4 # lfd: (PERMBLOCK) 104.131.181.4 (US/United States/New Jersey/Clifton/-) has had more than 2 temp blocks in the last 86400 secs - Sat May 27 10:23:09 2023 +188.166.209.108 # lfd: (PERMBLOCK) 188.166.209.108 (SG/Singapore/-/-/-) has had more than 2 temp blocks in the last 86400 secs - Sat May 27 10:23:10 2023 +187.95.146.42 # lfd: (PERMBLOCK) 187.95.146.42 (BR/Brazil/Parana/Curitiba/-) has had more than 2 temp blocks in the last 86400 secs - Sat May 27 11:32:00 2023 +47.245.106.0/24 # lfd: (NETBLOCK) 47.245.106.0/24 (SG/Singapore/-/-/-) has had more than 2 blocks in the last 86400 secs - Sat May 27 15:38:06 2023 +189.144.69.112 # lfd: (PERMBLOCK) 189.144.69.112 (MX/Mexico/Mexico City/Gustavo Adolfo Madero/dsl-189-144-69-112-dyn.prod-infinitum.com.mx) has had more than 2 temp blocks in the last 86400 secs - Sat May 27 17:49:32 2023 +185.133.225.62 # lfd: (PERMBLOCK) 185.133.225.62 (IQ/Iraq/Baghdad/Baghdad/-) has had more than 2 temp blocks in the last 86400 secs - Sat May 27 17:51:33 2023 +138.68.49.191 # lfd: (PERMBLOCK) 138.68.49.191 (US/United States/California/Santa Clara/-) has had more than 2 temp blocks in the last 86400 secs - Sat May 27 17:59:33 2023 +207.154.206.212 # lfd: (PERMBLOCK) 207.154.206.212 (DE/Germany/Hesse/Frankfurt am Main/-) has had more than 2 temp blocks in the last 86400 secs - Sat May 27 20:22:41 2023 +47.52.39.76 # lfd: (PERMBLOCK) 47.52.39.76 (HK/Hong Kong/Central and Western District/Central/-) has had more than 2 temp blocks in the last 86400 secs - Sat May 27 20:22:41 2023 +185.209.228.186 # lfd: (PERMBLOCK) 185.209.228.186 (DE/Germany/North Rhine-Westphalia/Düsseldorf/vmi1049141.contaboserver.net) has had more than 2 temp blocks in the last 86400 secs - Sat May 27 20:43:48 2023 +194.60.87.212 # lfd: (PERMBLOCK) 194.60.87.212 (DE/Germany/North Rhine-Westphalia/Düsseldorf/vmi1159373.contaboserver.net) has had more than 2 temp blocks in the last 86400 secs - Sat May 27 20:49:18 2023 +160.251.73.32 # lfd: (PERMBLOCK) 160.251.73.32 (JP/Japan/-/-/v160-251-73-32.oooz.static.cnode.io) has had more than 2 temp blocks in the last 86400 secs - Sun May 28 05:06:16 2023 +149.129.241.21 # lfd: (PERMBLOCK) 149.129.241.21 (ID/Indonesia/Jakarta/Jakarta/-) has had more than 2 temp blocks in the last 86400 secs - Sun May 28 05:07:26 2023 +46.101.116.114 # lfd: (PERMBLOCK) 46.101.116.114 (DE/Germany/Hesse/Frankfurt am Main/-) has had more than 2 temp blocks in the last 86400 secs - Sun May 28 09:26:24 2023 +5.112.0.58 # lfd: (PERMBLOCK) 5.112.0.58 (IR/Iran/Tehran/Tehran/-) has had more than 2 temp blocks in the last 86400 secs - Sun May 28 09:35:35 2023 +149.127.189.62 # lfd: (PERMBLOCK) 149.127.189.62 (SG/Singapore/-/-/-) has had more than 2 temp blocks in the last 86400 secs - Sun May 28 09:41:20 2023 +47.250.146.23 # lfd: (PERMBLOCK) 47.250.146.23 (MY/Malaysia/Kuala Lumpur/Kuala Lumpur/-) has had more than 2 temp blocks in the last 86400 secs - Sun May 28 12:25:50 2023 +165.227.59.243 # lfd: (PERMBLOCK) 165.227.59.243 (US/United States/California/Santa Clara/-) has had more than 2 temp blocks in the last 86400 secs - Sun May 28 12:40:41 2023 +186.4.235.4 # lfd: (PERMBLOCK) 186.4.235.4 (EC/Ecuador/Provincia de Pichincha/Quito/studium.ec) has had more than 2 temp blocks in the last 86400 secs - Sun May 28 15:34:23 2023 +85.234.37.158 # lfd: (PERMBLOCK) 85.234.37.158 (RU/Russia/Penza Oblast/Penza/-) has had more than 2 temp blocks in the last 86400 secs - Sun May 28 15:35:43 2023 +31.210.211.114 # lfd: (PERMBLOCK) 31.210.211.114 (RU/Russia/Voronezh Oblast/Voronezh/-) has had more than 2 temp blocks in the last 86400 secs - Sun May 28 23:41:51 2023 +128.199.127.220 # lfd: (PERMBLOCK) 128.199.127.220 (SG/Singapore/-/-/-) has had more than 2 temp blocks in the last 86400 secs - Sun May 28 23:43:02 2023 +128.199.97.155 # lfd: (PERMBLOCK) 128.199.97.155 (SG/Singapore/-/-/-) has had more than 2 temp blocks in the last 86400 secs - Sun May 28 23:47:11 2023 +223.226.34.245 # lfd: (PERMBLOCK) 223.226.34.245 (IN/India/Uttar Pradesh/Lucknow/-) has had more than 2 temp blocks in the last 86400 secs - Mon May 29 00:02:29 2023 +193.19.97.193 # lfd: (PERMBLOCK) 193.19.97.193 (PS/Palestine/Gaza/Gaza/-) has had more than 2 temp blocks in the last 86400 secs - Mon May 29 01:18:56 2023 +8.219.211.18 # lfd: (PERMBLOCK) 8.219.211.18 (SG/Singapore/-/-/-) has had more than 2 temp blocks in the last 86400 secs - Mon May 29 05:23:48 2023 +45.232.244.122 # lfd: (PERMBLOCK) 45.232.244.122 (BR/Brazil/Paraíba/Esperanca/-) has had more than 2 temp blocks in the last 86400 secs - Mon May 29 05:31:24 2023 +200.43.231.2 # lfd: (PERMBLOCK) 200.43.231.2 (AR/Argentina/Misiones/Obera/-) has had more than 2 temp blocks in the last 86400 secs - Mon May 29 05:31:24 2023 +8.219.201.169 # lfd: (PERMBLOCK) 8.219.201.169 (SG/Singapore/-/-/-) has had more than 2 temp blocks in the last 86400 secs - Mon May 29 07:57:01 2023 +188.166.58.179 # lfd: (PERMBLOCK) 188.166.58.179 (NL/Netherlands/North Holland/Amsterdam/-) has had more than 2 temp blocks in the last 86400 secs - Mon May 29 09:00:02 2023 +128.199.142.148 # lfd: (PERMBLOCK) 128.199.142.148 (SG/Singapore/-/-/-) has had more than 2 temp blocks in the last 86400 secs - Mon May 29 19:56:32 2023 +188.166.5.84 # lfd: (PERMBLOCK) 188.166.5.84 (NL/Netherlands/North Holland/Amsterdam/-) has had more than 2 temp blocks in the last 86400 secs - Tue May 30 03:44:29 2023 +160.251.19.168 # lfd: (PERMBLOCK) 160.251.19.168 (JP/Japan/-/-/v160-251-19-168.q91i.static.cnode.io) has had more than 2 temp blocks in the last 86400 secs - Tue May 30 03:50:15 2023 +8.208.87.174 # lfd: (PERMBLOCK) 8.208.87.174 (GB/United Kingdom/England/London/-) has had more than 2 temp blocks in the last 86400 secs - Tue May 30 07:07:52 2023 +185.252.29.218 # lfd: (PERMBLOCK) 185.252.29.218 (IR/Iran/-/-/-) has had more than 2 temp blocks in the last 86400 secs - Tue May 30 07:07:53 2023 +102.36.230.165 # lfd: (PERMBLOCK) 102.36.230.165 (NG/Nigeria/Lagos/Lagos/-) has had more than 2 temp blocks in the last 86400 secs - Tue May 30 13:11:44 2023 +79.9.37.49 # lfd: (PERMBLOCK) 79.9.37.49 (IT/Italy/Province of Parma/Parma/host-79-9-37-49.business.telecomitalia.it) has had more than 2 temp blocks in the last 86400 secs - Tue May 30 15:01:59 2023 +109.198.110.170 # lfd: (PERMBLOCK) 109.198.110.170 (RU/Russia/Sverdlovsk Oblast/Nizhny Tagil/170.110.198.109.convex-tagil.ru) has had more than 2 temp blocks in the last 86400 secs - Tue May 30 18:30:22 2023 +200.88.200.227 # lfd: (PERMBLOCK) 200.88.200.227 (DO/Dominican Republic/Provincia de Santo Domingo/Santo Domingo Este/-) has had more than 2 temp blocks in the last 86400 secs - Tue May 30 18:30:23 2023 +88.208.209.234 # lfd: (PERMBLOCK) 88.208.209.234 (GB/United Kingdom/-/-/ticco.co.uk) has had more than 2 temp blocks in the last 86400 secs - Tue May 30 18:48:59 2023 +103.91.44.214 # lfd: (PERMBLOCK) 103.91.44.214 (ID/Indonesia/-/-/ip-44-214.cyberlink.co.id) has had more than 2 temp blocks in the last 86400 secs - Tue May 30 19:08:41 2023 +197.5.145.121 # lfd: (PERMBLOCK) 197.5.145.121 (TN/Tunisia/-/-/-) has had more than 2 temp blocks in the last 86400 secs - Tue May 30 20:36:58 2023 +157.245.34.250 # lfd: (PERMBLOCK) 157.245.34.250 (GB/United Kingdom/England/Enfield/-) has had more than 2 temp blocks in the last 86400 secs - Wed May 31 02:13:15 2023 +105.174.38.254 # lfd: (PERMBLOCK) 105.174.38.254 (AO/Angola/Luanda Province/Luanda/-) has had more than 2 temp blocks in the last 86400 secs - Wed May 31 03:21:21 2023 +5.255.107.104 # lfd: (PERMBLOCK) 5.255.107.104 (NL/Netherlands/Limburg/Horn/-) has had more than 2 temp blocks in the last 86400 secs - Wed May 31 06:00:00 2023 +62.74.140.248 # lfd: (PERMBLOCK) 62.74.140.248 (GR/Greece/Central Macedonia/Thessaloniki/dyn248.igoum1.nas.panafonet.gr) has had more than 2 temp blocks in the last 86400 secs - Wed May 31 08:36:54 2023 +203.130.0.240 # lfd: (PERMBLOCK) 203.130.0.240 (PK/Pakistan/Sindh/Karachi/-) has had more than 2 temp blocks in the last 86400 secs - Wed May 31 17:20:41 2023 +78.135.83.248 # lfd: (PERMBLOCK) 78.135.83.248 (TR/Turkey/Istanbul/Istanbul/fortuitousshop.com) has had more than 2 temp blocks in the last 86400 secs - Wed May 31 18:03:45 2023 +195.50.143.234 # lfd: (PERMBLOCK) 195.50.143.234 (DE/Germany/North Rhine-Westphalia/Hürth/-) has had more than 2 temp blocks in the last 86400 secs - Wed May 31 19:56:45 2023 +149.129.239.236 # lfd: (PERMBLOCK) 149.129.239.236 (ID/Indonesia/Jakarta/Jakarta/-) has had more than 2 temp blocks in the last 86400 secs - Wed May 31 21:42:49 2023 +37.152.179.194 # lfd: (PERMBLOCK) 37.152.179.194 (IR/Iran/-/-/-) has had more than 2 temp blocks in the last 86400 secs - Wed May 31 21:48:50 2023 +43.133.68.6 # lfd: (PERMBLOCK) 43.133.68.6 (KR/South Korea/Seoul/Seoul/-) has had more than 2 temp blocks in the last 86400 secs - Wed May 31 21:48:51 2023 +43.153.19.25 # lfd: (PERMBLOCK) 43.153.19.25 (US/United States/California/-/-) has had more than 2 temp blocks in the last 86400 secs - Wed May 31 23:52:16 2023 +43.239.249.50 # lfd: (PERMBLOCK) 43.239.249.50 (JP/Japan/Tokyo/Tokyo/-) has had more than 2 temp blocks in the last 86400 secs - Wed May 31 23:57:17 2023 +195.43.6.229 # lfd: (PERMBLOCK) 195.43.6.229 (EG/Egypt/-/-/-) has had more than 2 temp blocks in the last 86400 secs - Thu Jun 1 02:34:28 2023 +27.147.157.237 # lfd: (PERMBLOCK) 27.147.157.237 (BD/Bangladesh/-/-/mail.millenniumbangladesh.com) has had more than 2 temp blocks in the last 86400 secs - Thu Jun 1 06:33:54 2023 +41.223.230.82 # lfd: (PERMBLOCK) 41.223.230.82 (TZ/Tanzania/-/-/admin.tanesco.co.tz) has had more than 2 temp blocks in the last 86400 secs - Thu Jun 1 06:40:25 2023 +194.242.57.232 # lfd: (PERMBLOCK) 194.242.57.232 (DE/Germany/North Rhine-Westphalia/Düsseldorf/vmi1309997.contaboserver.net) has had more than 2 temp blocks in the last 86400 secs - Thu Jun 1 06:41:50 2023 +40.122.67.251 # lfd: (PERMBLOCK) 40.122.67.251 (US/United States/Iowa/Des Moines/-) has had more than 2 temp blocks in the last 86400 secs - Thu Jun 1 06:46:25 2023 +2.56.91.113 # lfd: (PERMBLOCK) 2.56.91.113 (HK/Hong Kong/-/-/hosted-by.ihc.ru) has had more than 2 temp blocks in the last 86400 secs - Thu Jun 1 06:47:25 2023 diff --git a/httpd/conf.d/ssl.conf b/httpd/conf.d/ssl.conf deleted file mode 100644 index d28adf3..0000000 --- a/httpd/conf.d/ssl.conf +++ /dev/null @@ -1,203 +0,0 @@ -# -# When we also provide SSL we have to listen to the -# standard HTTPS port in addition. -# -Listen 443 https - -## -## SSL Global Context -## -## All SSL configuration in this context applies both to -## the main server and all SSL-enabled virtual hosts. -## - -# Pass Phrase Dialog: -# Configure the pass phrase gathering process. -# The filtering dialog program (`builtin' is a internal -# terminal dialog) has to provide the pass phrase on stdout. -SSLPassPhraseDialog exec:/usr/libexec/httpd-ssl-pass-dialog - -# Inter-Process Session Cache: -# Configure the SSL Session Cache: First the mechanism -# to use and second the expiring timeout (in seconds). -SSLSessionCache shmcb:/run/httpd/sslcache(512000) -SSLSessionCacheTimeout 300 - -# -# Use "SSLCryptoDevice" to enable any supported hardware -# accelerators. Use "openssl engine -v" to list supported -# engine names. NOTE: If you enable an accelerator and the -# server does not start, consult the error logs and ensure -# your accelerator is functioning properly. -# -SSLCryptoDevice builtin -#SSLCryptoDevice ubsec - -## -## SSL Virtual Host Context -## - - - -# General setup for the virtual host, inherited from global configuration -#DocumentRoot "/var/www/html" -#ServerName www.example.com:443 - -# Use separate log files for the SSL virtual host; note that LogLevel -# is not inherited from httpd.conf. -ErrorLog logs/ssl_error_log -TransferLog logs/ssl_access_log -LogLevel warn - -# SSL Engine Switch: -# Enable/Disable SSL for this virtual host. -SSLEngine on - -# List the protocol versions which clients are allowed to connect with. -# The OpenSSL system profile is used by default. See -# update-crypto-policies(8) for more details. -#SSLProtocol all -SSLv3 -#SSLProxyProtocol all -SSLv3 - -# User agents such as web browsers are not configured for the user's -# own preference of either security or performance, therefore this -# must be the prerogative of the web server administrator who manages -# cpu load versus confidentiality, so enforce the server's cipher order. -SSLHonorCipherOrder on - -# SSL Cipher Suite: -# List the ciphers that the client is permitted to negotiate. -# See the mod_ssl documentation for a complete list. -# The OpenSSL system profile is configured by default. See -# update-crypto-policies(8) for more details. -SSLCipherSuite PROFILE=SYSTEM -SSLProxyCipherSuite PROFILE=SYSTEM - -# Point SSLCertificateFile at a PEM encoded certificate. If -# the certificate is encrypted, then you will be prompted for a -# pass phrase. Note that restarting httpd will prompt again. Keep -# in mind that if you have both an RSA and a DSA certificate you -# can configure both in parallel (to also allow the use of DSA -# ciphers, etc.) -# Some ECC cipher suites (http://www.ietf.org/rfc/rfc4492.txt) -# require an ECC certificate which can also be configured in -# parallel. -SSLCertificateFile /etc/pki/tls/certs/localhost.crt - -# Server Private Key: -# If the key is not combined with the certificate, use this -# directive to point at the key file. Keep in mind that if -# you've both a RSA and a DSA private key you can configure -# both in parallel (to also allow the use of DSA ciphers, etc.) -# ECC keys, when in use, can also be configured in parallel -SSLCertificateKeyFile /etc/pki/tls/private/localhost.key - -# Server Certificate Chain: -# Point SSLCertificateChainFile at a file containing the -# concatenation of PEM encoded CA certificates which form the -# certificate chain for the server certificate. Alternatively -# the referenced file can be the same as SSLCertificateFile -# when the CA certificates are directly appended to the server -# certificate for convenience. -#SSLCertificateChainFile /etc/pki/tls/certs/server-chain.crt - -# Certificate Authority (CA): -# Set the CA certificate verification path where to find CA -# certificates for client authentication or alternatively one -# huge file containing all of them (file must be PEM encoded) -#SSLCACertificateFile /etc/pki/tls/certs/ca-bundle.crt - -# Client Authentication (Type): -# Client certificate verification type and depth. Types are -# none, optional, require and optional_no_ca. Depth is a -# number which specifies how deeply to verify the certificate -# issuer chain before deciding the certificate is not valid. -#SSLVerifyClient require -#SSLVerifyDepth 10 - -# Access Control: -# With SSLRequire you can do per-directory access control based -# on arbitrary complex boolean expressions containing server -# variable checks and other lookup directives. The syntax is a -# mixture between C and Perl. See the mod_ssl documentation -# for more details. -# -#SSLRequire ( %{SSL_CIPHER} !~ m/^(EXP|NULL)/ \ -# and %{SSL_CLIENT_S_DN_O} eq "Snake Oil, Ltd." \ -# and %{SSL_CLIENT_S_DN_OU} in {"Staff", "CA", "Dev"} \ -# and %{TIME_WDAY} >= 1 and %{TIME_WDAY} <= 5 \ -# and %{TIME_HOUR} >= 8 and %{TIME_HOUR} <= 20 ) \ -# or %{REMOTE_ADDR} =~ m/^192\.76\.162\.[0-9]+$/ -# - -# SSL Engine Options: -# Set various options for the SSL engine. -# o FakeBasicAuth: -# Translate the client X.509 into a Basic Authorisation. This means that -# the standard Auth/DBMAuth methods can be used for access control. The -# user name is the `one line' version of the client's X.509 certificate. -# Note that no password is obtained from the user. Every entry in the user -# file needs this password: `xxj31ZMTZzkVA'. -# o ExportCertData: -# This exports two additional environment variables: SSL_CLIENT_CERT and -# SSL_SERVER_CERT. These contain the PEM-encoded certificates of the -# server (always existing) and the client (only existing when client -# authentication is used). This can be used to import the certificates -# into CGI scripts. -# o StdEnvVars: -# This exports the standard SSL/TLS related `SSL_*' environment variables. -# Per default this exportation is switched off for performance reasons, -# because the extraction step is an expensive operation and is usually -# useless for serving static content. So one usually enables the -# exportation for CGI and SSI requests only. -# o StrictRequire: -# This denies access when "SSLRequireSSL" or "SSLRequire" applied even -# under a "Satisfy any" situation, i.e. when it applies access is denied -# and no other module can change it. -# o OptRenegotiate: -# This enables optimized SSL connection renegotiation handling when SSL -# directives are used in per-directory context. -#SSLOptions +FakeBasicAuth +ExportCertData +StrictRequire - - SSLOptions +StdEnvVars - - - SSLOptions +StdEnvVars - - -# SSL Protocol Adjustments: -# The safe and default but still SSL/TLS standard compliant shutdown -# approach is that mod_ssl sends the close notify alert but doesn't wait for -# the close notify alert from client. When you need a different shutdown -# approach you can use one of the following variables: -# o ssl-unclean-shutdown: -# This forces an unclean shutdown when the connection is closed, i.e. no -# SSL close notify alert is sent or allowed to be received. This violates -# the SSL/TLS standard but is needed for some brain-dead browsers. Use -# this when you receive I/O errors because of the standard approach where -# mod_ssl sends the close notify alert. -# o ssl-accurate-shutdown: -# This forces an accurate shutdown when the connection is closed, i.e. a -# SSL close notify alert is sent and mod_ssl waits for the close notify -# alert of the client. This is 100% SSL/TLS standard compliant, but in -# practice often causes hanging connections with brain-dead browsers. Use -# this only for browsers where you know that their SSL implementation -# works correctly. -# Notice: Most problems of broken clients are also related to the HTTP -# keep-alive facility, so you usually additionally want to disable -# keep-alive for those clients, too. Use variable "nokeepalive" for this. -# Similarly, one has to force some clients to use HTTP/1.0 to workaround -# their broken HTTP/1.1 implementation. Use variables "downgrade-1.0" and -# "force-response-1.0" for this. -BrowserMatch "MSIE [2-5]" \ - nokeepalive ssl-unclean-shutdown \ - downgrade-1.0 force-response-1.0 - -# Per-Server Logging: -# The home of a custom SSL log file. Use this when you want a -# compact non-error SSL logfile on a virtual host basis. -CustomLog logs/ssl_request_log \ - "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b" - - - diff --git a/logrotate.d/named b/logrotate.d/named index 5dcddb5..a7bb1ae 100644 --- a/logrotate.d/named +++ b/logrotate.d/named @@ -17,7 +17,7 @@ create 0644 named named daily rotate 30 - datext + dateext nocompress notifempty sharedscripts