#Peerguardian lists update

* Detects if kernel modules are needed and loads them if necessary. pgl is based on the Linux kernel netfilter framework and iptables. Its origins lie in targeting aggressive IPs while you use P2P. It blocks connections to and from hosts specified in huge blocklists (thousands or millions of IP ranges). * A watchdog monitors the IP block daemon and restarts blockcontrol if necessary. With this PeerGuardian manages multiple IP blacklists and creates IPTables. PeerGuardian is a privacy oriented firewall application. * Check the status and test the IP block daemon. If you are on a public LAN, you probably want to disable this feature. * Allow all LAN traffic and the DNS server automatically. * Handle your iptables rules: use a default setup, easily allow all traffic on specific ports and use an allow list, or add your own sophisticated iptables rules. * Remove lines by keyword from the blocklists. Or let cron do this automatically on a regular basis.

#Peerguardian lists update

* Update your blocklist from online sources and local blocklists. The packages are MoBlock, NFBlock, blockcontrol and mobloquer. Printf ' Remove comments, ipv6 address etc.Description : moblock-deb provides packages related to IP blocking software, similar to PeerGuardian: In order to protect your privacy internet traffic is blocked based on large lists of IP address ranges. # script-extension categorys with ip-collection from # by 5p9 # blall = alle categorys with IPs from the last 48h # blssh = attack ssh from the last 48h # blbf = attack webserver bruteforce from the last 48h # blbadip= ips over 5000 attacks from the last 5 month # blbots = RFI- REG- BadBot IRC attackts from the last 48h # !!! HINT !!! # if blall.txt active then disable openbl and # all others single categorys blssh,blbf,blbadip and blbots !!! #get list from - all.txt over 32000 ip! very larg! #printf ' Get files: blacklistede' #wget -O - > /etc/sysconfig/blacklistblall #cat /etc/sysconfig/blacklistblall > /etc/sysconfig/blacklist #get list from - ssh.txt #printf ' Get files: blacklistede' #wget -O - > /etc/sysconfig/blacklistblssh #cat /etc/sysconfig/blacklistblssh > /etc/sysconfig/blacklist #get list from - bruteforce webserver.txt #printf ' Get files: blacklistede' #wget -O - > /etc/sysconfig/blacklistblbf #cat /etc/sysconfig/blacklistblbf > /etc/sysconfig/blacklist #get list from - strongip.txt #printf ' Get files: blacklistede' #wget -O - > /etc/sysconfig/blacklistblbadip #cat /etc/sysconfig/blacklistblbadip > /etc/sysconfig/blacklist #get list from - bots.txt #printf ' Get files: blacklistede' #wget -O - > /etc/sysconfig/blacklistblbots #cat /etc/sysconfig/blacklistblbots > /etc/sysconfig/blacklist #check amount of lines before sorting and cleanup printf ' Amount of line %s ' `cat /etc/sysconfig/blacklist | wc -lĬat /etc/sysconfig/blacklist | sort | uniq > /etc/sysconfig/blacklisttmp Wget -O - > /etc/sysconfig/blacklistopenblĬat /etc/sysconfig/blacklistopenbl > /etc/sysconfig/blacklist #get list from openbl printf ' Get files: openbl' Wget -O -no-check-certificate =badips > /etc/sysconfig/blacklistzeusĬat /etc/sysconfig/blacklistzeus > /etc/sysconfig/blacklist #get list from zeustracker printf ' Get files: zeus' Printf ' Amount of line %s ' `cat /etc/sysconfig/blacklist | wc -l Wget -O - > /etc/sysconfig/blacklistmalc0deĬat /etc/sysconfig/blacklistmalc0de > /etc/sysconfig/blacklist

#get list from malc0de printf ' Get files: malc0de' #!/bin/bash - # by burningpenguin: scriptblacklistip # add blocked IPs to the firewall to not be accessed from green/blue # initial version # usage # extend by adding this section per blacklist url #get list from ?service? # printf ' Get files: ?service?' # wget -O - http:?url? > /etc/sysconfig/blacklisttmp # cat /etc/sysconfig/blacklisttmp > /etc/sysconfig/blacklist #empty temp file