* major rewrite * add support for multiple chains * add mac whitelisting * add support for multiple ssh daemons in parallel * add an ipset report engine * add mail notifications * add suspend/resume functions * add a cron wrapper to set an ipset related auto-timer for automatic blocklist updates * add a list wrapper to add/remove blocklist sources * add 19.x and Turris OS 5.x compatibility code * sources stored in an external compressed json file (/etc/banip/banip.sources.gz) * change Country/ASN download sources (faster/more reliable) * fix DHCPv6/icmpv6 issues Signed-off-by: Dirk Brenken <dev@brenken.org>
16 lines
450 B
Text
16 lines
450 B
Text
config banip 'global'
|
|
option ban_enabled '0'
|
|
option ban_debug '0'
|
|
option ban_mail_enabled '0'
|
|
option ban_monitor_enabled '0'
|
|
option ban_logsrc_enabled '0'
|
|
option ban_logdst_enabled '0'
|
|
option ban_autodetect '1'
|
|
option ban_autoblacklist '1'
|
|
option ban_autowhitelist '1'
|
|
option ban_nice '0'
|
|
option ban_maxqueue '4'
|
|
option ban_global_settype 'src+dst'
|
|
option ban_target_src 'DROP'
|
|
option ban_target_dst 'REJECT'
|
|
option ban_loglimit '100'
|