| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
| |
* Mod copyright
|
|
|
| |
* Mod copyright
|
|
|
| |
* Mod copyright
|
|
|
| |
* Implement 'Advanced Outbound Firewall Rules' customization options
|
|
|
| |
* Implement 'Advanced Outbound Firewall Rules' customization options
|
|
|
| |
* Implement 'Advanced Outbound Firewall Rules' customization options
|
|
|
| |
* Add Threat IOC lookups to 'safeweb.norton.com' and 'Google SafeBrowsing'
|
|
|
|
| |
* Add TLSv1.1 to cURL SSL Options
* Upgrade existing 'Advanced Outbound Firewall Rules' variables to new variable format
|
|
|
| |
* Implement 'Advanced Outbound Firewall Rules' customization options (Used when IPs are found in DNSBL Feeds)
|
|
|
|
|
|
| |
* Improve dnsbl_suppression() function to account for '#' Comment lines in custom list
* Improve DNSBL Suppression to also suppress any CNAMES associated with domain name
Hardcode drill command with @8.8.8.8 (May have to add option in future to allow user to override DNS server entry)
* Improve Proofpoint/Emerging Threats IQRisk integrations
|
| |
|
|
|
| |
* Improve Proofpoint/Emerging Threats IQRisk integrations
|
|
|
|
|
| |
* Improve 'Max daily download failure threshold' feature
* Implement 'Advanced Outbound Firewall Rules' customization options.
* Fix broken URL for Proofpoint/Emerging Threats IQRisk
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Add TLSv1.1 to cURL SSL Options
* Improve 'Max daily download failure threshold' feature
* Improve function pfbng_text_area_decode() - add $mode variable to account for '#' comment lines in DNSBL Suppression Alias
* Improve dnsbl_suppression() function
* Implement 'Advanced Outbound Firewall Rules' customization options.
* Implement 'Advanced In/Outbound Firewall Rules' - Invert Source/Destination options
* Implement 'Advanced In/Outbound Firewall Rules' - Gateway options
* 'Advanced In/Outbound Firewall Rules' - Force any Invert Source/Destination Alias to use 'Alias Native' settings
* Allow Loopback and RFC1918 addresses in any Alias Custom List.
* Improve GZIP archive extraction function
* Re-factor Tracker IDs. (Convert all unique Alias details (via ascii table number) and return a 10 digit tracker ID)
If a duplicate Tracker ID is found, default to a pre-determined Tracker ID format starting with '1700000010'
* When DNSBL is enabled, but all Aliases/Feeds are 'Disabled', clear existing DNSBL Unbound Database properly.
* Improve Proofpoint/Emerging Threats IQRisk integrations
* Improve DNSBL domain name parser
* Force all DNSBL domains to lowercase
* Check for Firewall Rules 'created' tag, before attempting to unset
* Improve 'Kill States' feature - Collect all 'pfB_' Rules that are 'Block/Reject' and do not have bypass states enabled
* Improve 'Kill States' feature - Collect any 'Permit' Customlist IPs to suppress
* Add Input Validation for Header/Label field - Whitespace, special or International characters not allowed
|
|
|
|
| |
* Bump to version 2.0.5
* Improve 'Max daily download failure threshold' feature
|
|
|
| |
* Mod to DNSBL Reload (Background function call)
|
|
|
| |
Bump version
|
|
|
| |
* Remove extra whitespace
|
|
|
|
| |
* Add log size settings (5000 & 10000 lines) for limited storage installations.
* Add Paypal link
|
|
|
|
| |
* Add Header()
* Improve query for active pfBNG running tasks
|
|
|
|
| |
* Fix dShield URL
* Add tcpiputils to DNSBL Domain threat lookup
|
|
|
| |
* Add $pfb['ccdir'] explicitly due to file caching issue.
|
|
|
|
|
|
| |
* Fix 'Match Outbound' rule variable name
* Remove duplicate Alexa variable as its already in pfb_global()
* Determine if a DNSBL background reload is running before updating DNSBL
* Change "${cmd}" variable name to "{$cmd}"
|
|
|
|
| |
* Add string separator "|"
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
and execute permissions
|
|
|
|
|
|
|
|
| |
The cron comparison function must skip the hour comparison for the
Maxmind Cron task due to the hour being randomized (0-23).
Add "addedit_string" to XML files. This will give description to the
config backups.
|
|
|
|
| |
Was previously fixed by Renato, but PR reverted that...
|
| |
|
| |
|
|
|
|
| |
s/ccdif/ccdir/
|
|
|
|
| |
package and will be missed during port removal on 2.3+
|
|
|
|
| |
non-PBI paths
|