From 7b73cb7639bc44cb23bfd9f56d1585b6a4591775 Mon Sep 17 00:00:00 2001 From: Carlos Ferreira Date: Fri, 14 Dec 2018 19:02:21 +0100 Subject: [PATCH 1/3] Switch to AbuseIPDB API v2 --- config/action.d/abuseipdb.conf | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/config/action.d/abuseipdb.conf b/config/action.d/abuseipdb.conf index dfc81665..22e998b2 100644 --- a/config/action.d/abuseipdb.conf +++ b/config/action.d/abuseipdb.conf @@ -83,13 +83,10 @@ actioncheck = # wherever you install the helper script. For the PHP helper script, see # # -# --ciphers ecdhe_ecdsa_aes_256_sha is used to workaround a -# "NSS error -12286" from curl as it attempts to connect using -# SSLv3. See https://www.centos.org/forums/viewtopic.php?t=52732 # Tags: See jail.conf(5) man page # Values: CMD # -actionban = lgm=$(printf '%%s\n...' ""); curl --fail --tlsv1.1 --data "key=" --data-urlencode "comment=$lgm" --data "ip=" --data "category=" "https://www.abuseipdb.com/report/json" +actionban = lgm=$(printf '%%s\n...' ""); curl --fail "https://api.abuseipdb.com/api/v2/report" -H "Accept: application/json" -H "Key: " --data-urlencode "comment=$lgm" --data-urlencode "ip=" --data "categories=" # Option: actionunban # Notes.: command executed when unbanning an IP. Take care that the From 7dbd3a07ebde0324a933380b708eb7ac295cfd3e Mon Sep 17 00:00:00 2001 From: "Sergey G. Brester" Date: Thu, 27 Dec 2018 19:52:05 +0100 Subject: [PATCH 2/3] cut comment to limit documented on abuseipdb, additionally use curl in quiet mode --- config/action.d/abuseipdb.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/action.d/abuseipdb.conf b/config/action.d/abuseipdb.conf index 22e998b2..d36cb3a9 100644 --- a/config/action.d/abuseipdb.conf +++ b/config/action.d/abuseipdb.conf @@ -86,7 +86,7 @@ actioncheck = # Tags: See jail.conf(5) man page # Values: CMD # -actionban = lgm=$(printf '%%s\n...' ""); curl --fail "https://api.abuseipdb.com/api/v2/report" -H "Accept: application/json" -H "Key: " --data-urlencode "comment=$lgm" --data-urlencode "ip=" --data "categories=" +actionban = lgm=$(printf '%%.1000s\n...' ""); curl -sSf "https://api.abuseipdb.com/api/v2/report" -H "Accept: application/json" -H "Key: " --data-urlencode "comment=$lgm" --data-urlencode "ip=" --data "categories=" # Option: actionunban # Notes.: command executed when unbanning an IP. Take care that the From 8da9bfb83af4804a92f229f8d09c9ed0298835b1 Mon Sep 17 00:00:00 2001 From: sebres Date: Fri, 7 Jun 2019 14:47:43 +0200 Subject: [PATCH 3/3] Update ChangeLog (gh-2302, rebased to 0.10) --- ChangeLog | 1 + 1 file changed, 1 insertion(+) diff --git a/ChangeLog b/ChangeLog index 63e5e4a5..3ce9b1ca 100644 --- a/ChangeLog +++ b/ChangeLog @@ -42,6 +42,7 @@ ver. 0.10.5-dev-1 (20??/??/??) - development edition message, see gh-2431) * fixed read of included config-files (`.local` overwrites options of `.conf` for config-files included with before/after) +* `action.d/abuseipdb.conf`: switched to use AbuseIPDB API v2 (gh-2302) * `action.d/helpers-common.conf`: rewritten grep arguments, now options `-wF` used to match only whole words and fixed string (not as pattern), gh-2298 * `filter.d/sshd.conf`: