aboutsummaryrefslogtreecommitdiffstats
path: root/config/pfblockerng/pfblockerng.inc
Commit message (Collapse)AuthorAgeFilesLines
* Update pfblockerng.incBBcan1772016-03-201-171/+389
| | | | | | | | | | | | | | | | | | | | | | * Add TLSv1.1 to cURL SSL Options * Improve 'Max daily download failure threshold' feature * Improve function pfbng_text_area_decode() - add $mode variable to account for '#' comment lines in DNSBL Suppression Alias * Improve dnsbl_suppression() function * Implement 'Advanced Outbound Firewall Rules' customization options. * Implement 'Advanced In/Outbound Firewall Rules' - Invert Source/Destination options * Implement 'Advanced In/Outbound Firewall Rules' - Gateway options * 'Advanced In/Outbound Firewall Rules' - Force any Invert Source/Destination Alias to use 'Alias Native' settings * Allow Loopback and RFC1918 addresses in any Alias Custom List. * Improve GZIP archive extraction function * Re-factor Tracker IDs. (Convert all unique Alias details (via ascii table number) and return a 10 digit tracker ID) If a duplicate Tracker ID is found, default to a pre-determined Tracker ID format starting with '1700000010' * When DNSBL is enabled, but all Aliases/Feeds are 'Disabled', clear existing DNSBL Unbound Database properly. * Improve Proofpoint/Emerging Threats IQRisk integrations * Improve DNSBL domain name parser * Force all DNSBL domains to lowercase * Check for Firewall Rules 'created' tag, before attempting to unset * Improve 'Kill States' feature - Collect all 'pfB_' Rules that are 'Block/Reject' and do not have bypass states enabled * Improve 'Kill States' feature - Collect any 'Permit' Customlist IPs to suppress * Add Input Validation for Header/Label field - Whitespace, special or International characters not allowed
* Update pfblockerng.incBBcan1772015-12-201-7/+11
| | | * Mod to DNSBL Reload (Background function call)
* Update pfblockerng.incBBcan1772015-12-191-8/+16
| | | | | | * Fix 'Match Outbound' rule variable name * Remove duplicate Alexa variable as its already in pfb_global() * Determine if a DNSBL background reload is running before updating DNSBL * Change "${cmd}" variable name to "{$cmd}"
* pfBNG - mod to pfblockerng.incBBcan1772015-12-141-1/+1
| | | | * Add string separator "|"
* pfBNG - update to pfblockerng.incBBcan1772015-12-141-1/+1
|
* pfBNG - update pfblockerng.incBBcan1772015-12-141-2/+2
|
* pfBlockerNG - ModsBBcan1772015-12-131-6/+9
|
* Add missing variable to pfb_global()doktornotor2015-12-041-0/+1
|
* pfblockerng - add bunch of missing includesdoktornotor2015-11-231-1/+3
|
* pfBlockerNG - Minor fixesBBcan1772015-11-221-7/+7
|
* pfBlockerNG - Fix textBBcan1772015-11-221-1/+1
|
* pfBlockerNG - Improve download failure functionBBcan1772015-11-221-2/+9
|
* pfBlockerNG v2.0BBcan1772015-11-151-1935/+3719
|
* pfBlockerNG modsBBcan1772015-08-301-48/+1
|
* pfBlockerNG v1.09 Maxmind Cron Task and addedit_stringBBcan1772015-05-251-1/+5
| | | | | | | | The cron comparison function must skip the hour comparison for the Maxmind Cron task due to the hour being randomized (0-23). Add "addedit_string" to XML files. This will give description to the config backups.
* pfBlockerNG v1.09 Fix variable nameBBcan1772015-05-231-1/+1
| | | | Was previously fixed by Renato, but PR reverted that...
* pfBlockerNG v1.09 Code Style ChangesBBcan1772015-05-231-237/+237
|
* pfBlockerNG v1.09BBcan1772015-05-231-244/+563
|
* Stop copying countrycodes tarball and also fix a typo on array key name ↵Renato Botelho2015-04-271-2/+1
| | | | s/ccdif/ccdir/
* pfBlockerNG: Do not delete countrycodes.tar.bz2 since it's part of the ↵Renato Botelho2015-04-271-4/+3
| | | | package and will be missed during port removal on 2.3+
* Add run_depends and port_category to pfBlockerNG, also teach it to deal with ↵Renato Botelho2015-04-231-3/+11
| | | | non-PBI paths
* pfBlockerNG - Mods - Create Suppression FileBBcan1772015-03-171-1/+4
| | | | | -Previous version would not clear old suppression file when Alias is empty.
* pfBlockerNG - (c)2015 ModsBBcan1772015-03-171-1/+1
|
* pfBlockerNG - Mods for Nano Aliastables ro/rwBBcan1772015-02-221-3/+11
| | | | Add RW/RO commands for Aliastables Archiving for Nano/Ramdisk Installs.
* Revert "pfBlockerNG - Mod to IPv4 CIDR Regex"BBcan1772015-02-191-1/+1
| | | | This reverts commit e49ea2af46ed44cd955c1f4513b66ca984c2fc8a.
* Revert "pfBlockerNG - Fix missing Start Hour code"BBcan1772015-02-191-4/+2
| | | | This reverts commit 7a9603b71a68fd1edec153151ce78eff7a17b05f.
* pfBlockerNG - Fix missing Start Hour codeBBcan1772015-02-191-2/+4
|
* pfBlockerNG - Mod to IPv4 CIDR RegexBBcan1772015-02-171-1/+1
|
* pfBlockerNG - Mods to inc file.BBcan1772015-02-161-4/+4
| | | | | Move the unlink_if_exists outside of the if statement, as it needs to be called independently.
* pfBlockerNG - Fix Aliastable issue on Nano/Ramdisk InstallationsBBcan1772015-02-161-23/+78
| | | | | | | | | | | | | 1. On Nano/Ramdisk Installations, the /var/db/aliastables folder gets deleted on reboot. This causes a 60 second delay per alias. This PR archives the /var/db/aliastable/pfB_*.txt files to the pfBNG pbi /etc folder. On reboot the contents of this archive are restored. 2. Remove the previous Fetch Timeout code. 3. Improve the IPv6 Regex code. 4. Minor text improvements 5. Add conf_mount RW/RO to the sh script. 6. Add the aliastables() function to restore the aliastables files on reboot.
* pfBlockerNG - Redmine #4410 fix, Skip comment linesBBcan1772015-02-111-26/+36
| | | | | Add functionality to skip lines beginning with a comment (#) when querying for IP Addresses.
* pfBlockerNG - Improve Suppression and IPv6 RegexBBcan1772015-02-101-55/+60
| | | | | | 1) Add 0.0.0.0/32 to Regex for Suppression. 2) Improve IPv4 Regex validation. 3) Move Cron Define/Apply function to last step.
* pfBlockerNG - Cosmetic ChangesBBcan1772015-02-101-48/+48
|
* pfBlockerNG - Remove previously used cc folder referenceBBcan1772015-02-051-1/+2
| | | | | | | | | - Missed removing the /cc folder reference in pfblockerng.xml. No Version bump is required as this is only required for new installations. The countrycodes.tar.bz2 file is provided as a backup in case the user has a download failure from MaxMind Inc. Website.
* pfBlockerNG - Fix Force Cron FunctionBBcan1772015-02-031-14/+23
| | | | | | | | | Changes: 1) When the User selects "Force Cron" and "no updates" are required, the function doesn't complete properly, and didn't restore the Cron Task. 2) XMLRPC Sync add Maxmind "Annonymous Proxy and Satellite Providers"
* pfBlockerNG - Fix Cron Update process and other improvementsBBcan1772015-02-031-3/+0
| | | | | | | | | | | Changes: 1) Add missing $pfbfolder variable to Cron Update function 2) Modify how the include files get loaded. 3) Reputation Tab only requires IPv4, simplify code to use IPv4 only for this function. 4) Update geoipupdate.sh to use the New PBI folder location and remove Archive folders after MaxMind Update process
* pfBlockerNG - Relocated MaxMind FolderBBcan1772015-02-011-14/+30
| | | | | | | | | | | | | | | | | | | Changes - 1) Relocate MaxMind folder from /var/db to /usr/pbi Folder. Nano and Ramdisk Installations have the /var/db folder wiped on Reboot. 2) Add code to support MaxMind "Anonymous Proxy and Satellite Providers" to inc file. 3) Move $pfb_alias_lists_all below the conditional "IF" statements. 4) Improve Header Name Validation. 5) Install/De-install - Changes to support MaxMind "Anonymous Proxy and Satellite Providers" configuration. Delete previously used Folder location, and remove MaxMind Working files after Installation is completed.
* Temporary fix to add Range to Cidr functionBBcan1772015-01-271-2/+97
| | | | | | | Some IBlock lists have an issue with the existing Range to CIDR function. The Stilez Range to CIDR Function does not exhibit this behaviour. Once the existing Range to CIDR function is fixed/or replaced with the Stilez Function, this PR can be reverted.
* Mods to INC file.BBcan1772014-12-201-85/+129
| | | | | | | | | | | | | | | | | | | | | | - Move $pfb['cc'] Variable to global array - Edit log_error texts. - Maxmind Update Cron task changes. Cron tasks are now launched via a php script using the 'dc' Argument. - Re-work of the XMLRPC Sync code. - Previous code did not validate IP addresses or Port. - Previous code did not use the "Replication Target" Hosts enabled checkbox setting in Replication Target Lines. - Add htmlspecialchars() to the Password entry - Previous code did not use the correct user - defined "Protocol" entry. - Previous code did not use the $username entry. - Remove the 'post Sync' Host Target code execution as this can collide with a Cron Task or User Forced Update. - Allow user to skip the sync of the "General Tab" Settings. - Clean up all the log_error() texts.. To make the system.log easier to read.
* Mods to inc and log fileBBcan1772014-12-181-11/+0
| | | | | | - Remove un-necessary code in de-install function of inc file. - Remove check for logfile extension as other file extensions can now be deleted in log browser.
* Mods to inc file.BBcan1772014-12-181-18/+22
| | | | | | - Remove redundant $row['format'] variable - When "Keep Settings" is enabled and a full uninstall is performed, the widget does not uninstall cleanly. These changes fix this issue.
* Revert "Mods to inc file"BBcan1772014-12-181-22/+18
| | | | This reverts commit 161032f05e1819550a32735d60c7b71994b1d9ef.
* Mods to inc fileBBcan1772014-12-181-18/+22
| | | | | | - remove redundant $row['format'] variable - When "Keep" Settings is enabled and a full uninstall is performed, the widget doesn't uninstall cleanly. These changes fix this issue.
* Mods to pfblockerng.php, .inc, _sync, _v4 and _v6 files.BBcan1772014-12-151-14/+23
| | | | | | | | | | | | | | | | | | | | | | pfblockerng.inc - - Remove redundant ['action'] argument in if() statements. - If no interfaces are selected, defined empty variable and Array. - Separate "Skip & Hold" List download functionality into its own ['state'] process. This allows more fine grain control of each individual list in an Alias. - Remove argument for empty Interfaces in the Rules Re-order process. pfblockerng_sync.xml - - Fix broken link in sync file. pfblockerng_v4lists.xml and _v6 - - Separate "Skip & Hold" List download functionality into its own ['state'] process. This allows more fine grain control of each individual list in an Alias. - Minor Text improvements.
* Mods to inc, Alerts and Log FilesBBcan1772014-12-101-7/+7
| | | | | | | | - Mod the 'Global Enable Log' if() statement in the .inc file - Use correct Folder Paths in Log Browser - Check if syslog array exists in Alerts Tab.
* Mods to .inc fileBBcan1772014-12-091-52/+59
| | | | | | | | | - Added IPv4 Filter Array to filter out Whitespaces, Loopback Addresses (27/8), 0.0.0.0 and any leading zeros in each IPv4 octet. - Edits to IPv4/6 Regex Definitions. - Changed isset() to !empty()
* Revert "Mods to .inc file"BBcan1772014-12-091-59/+52
| | | | This reverts commit f433c8da1a68f5684a2fb43950c8d3ea6d7c396a.
* Mods to .inc fileBBcan1772014-12-091-52/+59
| | | | | | | | | - Added IPv4 Filter Array to filter out Whitespaces, Loopback Addresses (27/8), 0.0.0.0 and and Leading zeros in each IPv4 octet. - Edits to IPv4/6 Regex definitions. - Changed isset() to !empty()
* Code EnhancementsBBcan1772014-12-071-26/+22
|
* pkg_config.10.xml Edits and Associated pkg filesBBcan1772014-11-301-0/+2456
| | | | | Edits for pkg_config.10.xml All Associated files for pkg pfBlockerNG
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-22 06:51:57 +0000