projects / feed / packages.git / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | patch | inline | side by side (parent: 533b1b9)
banip: Block UDP ports for HTTP/3
authorJuan Orti Alcaine <jorti@pm.me>
Sat, 25 Jan 2025 15:58:35 +0000 (16:58 +0100)
committerDirk Brenken <dev@brenken.org>
Sat, 25 Jan 2025 18:36:40 +0000 (19:36 +0100)
Block HTTP/3 by including UDP in the feeds that have the 80 443 ports in
their flag.

Signed-off-by: Juan Orti Alcaine <jorti@pm.me>
net/banip/Makefile patch | blob | history
net/banip/files/README.md patch | blob | history
net/banip/files/banip.feeds patch | blob | history

diff --git a/net/banip/Makefile b/net/banip/Makefile
index de1701a09aa0aaf82e50c600623ffbe50eb2c57b..452927c82d8dd4f14f7d77c918bc5971b6ee632b 100644 (file)
--- a/net/banip/Makefile
+++ b/net/banip/Makefile
@@ -6,7 +6,7 @@ include $(TOPDIR)/rules.mk
 
 PKG_NAME:=banip
 PKG_VERSION:=1.5.0
-PKG_RELEASE:=3
+PKG_RELEASE:=4
 PKG_LICENSE:=GPL-3.0-or-later
 PKG_MAINTAINER:=Dirk Brenken <dev@brenken.org>
 
diff --git a/net/banip/files/README.md b/net/banip/files/README.md
index 3d5df24cdeca06da2a9cdc653aef7d9074b025d1..5a8294239af0c4e00c0f70de472fc2dd17df04ca 100644 (file)
--- a/net/banip/files/README.md
+++ b/net/banip/files/README.md
@@ -15,57 +15,57 @@ IP address blocking is commonly used to protect against brute force attacks, pre
   * LAN-FWD chain applies to local packets going out to the internet (not your router)  
   The listed standard assignments can be changed to your needs under the 'Feed/Set Settings' config tab.  
 
-| Feed                | Focus                          | Inbound | Outbound | Proto/Port   | Information                                                  |
-| :------------------ | :----------------------------- | :-----: | :------: | :----------: | :----------------------------------------------------------- |
-| adaway              | adaway IPs                     |         |    x     | tcp: 80, 443 | [Link](https://github.com/dibdot/banIP-IP-blocklists)        |
-| adguard             | adguard IPs                    |         |    x     | tcp: 80, 443 | [Link](https://github.com/dibdot/banIP-IP-blocklists)        |
-| adguardtrackers     | adguardtracker IPs             |         |    x     | tcp: 80, 443 | [Link](https://github.com/dibdot/banIP-IP-blocklists)        |
-| antipopads          | antipopads IPs                 |         |    x     | tcp: 80, 443 | [Link](https://github.com/dibdot/banIP-IP-blocklists)        |
-| asn                 | ASN segments                   |    x    |          |              | [Link](https://asn.ipinfo.app)                               |
-| backscatterer       | backscatterer IPs              |    x    |          |              | [Link](https://www.uceprotect.net/en/index.php)              |
-| becyber             | malicious attacker IPs         |    x    |          |              | [Link](https://github.com/duggytuxy/malicious_ip_addresses)  |
-| binarydefense       | binary defense banlist         |    x    |          |              | [Link](https://iplists.firehol.org/?ipset=bds_atif)          |
-| bogon               | bogon prefixes                 |    x    |          |              | [Link](https://team-cymru.com)                               |
-| bruteforceblock     | bruteforceblocker IPs          |    x    |          |              | [Link](https://danger.rulez.sk/index.php/bruteforceblocker/) |
-| country             | country blocks                 |    x    |          |              | [Link](https://www.ipdeny.com/ipblocks)                      |
-| cinsscore           | suspicious attacker IPs        |    x    |          |              | [Link](https://cinsscore.com/#list)                          |
-| debl                | fail2ban IP blacklist          |    x    |          |              | [Link](https://www.blocklist.de)                             |
-| doh                 | public DoH-Provider            |         |    x     | tcp: 80, 443 | [Link](https://github.com/dibdot/DoH-IP-blocklists)          |
-| drop                | spamhaus drop compilation      |    x    |          |              | [Link](https://www.spamhaus.org)                             |
-| dshield             | dshield IP blocklist           |    x    |          |              | [Link](https://www.dshield.org)                              |
-| etcompromised       | ET compromised hosts           |    x    |          |              | [Link](https://iplists.firehol.org/?ipset=et_compromised)    |
-| feodo               | feodo tracker                  |    x    |          |              | [Link](https://feodotracker.abuse.ch)                        |
-| firehol1            | firehol level 1 compilation    |    x    |          |              | [Link](https://iplists.firehol.org/?ipset=firehol_level1)    |
-| firehol2            | firehol level 2 compilation    |    x    |          |              | [Link](https://iplists.firehol.org/?ipset=firehol_level2)    |
-| firehol3            | firehol level 3 compilation    |    x    |          |              | [Link](https://iplists.firehol.org/?ipset=firehol_level3)    |
-| firehol4            | firehol level 4 compilation    |    x    |          |              | [Link](https://iplists.firehol.org/?ipset=firehol_level4)    |
-| greensnow           | suspicious server IPs          |    x    |          |              | [Link](https://greensnow.co)                                 |
-| hagezi              | Threat IP blocklist            |         |    x     | tcp: 80, 443 | [Link](https://github.com/hagezi/dns-blocklists)             |
-| ipblackhole         | blackhole IPs                  |    x    |          |              | [Link](https://github.com/BlackHoleMonster/IP-BlackHole)     |
-| ipsum               | malicious IPs                  |    x    |          |              | [Link](https://github.com/stamparm/ipsum)                    |
-| ipthreat            | hacker and botnet TPs          |    x    |          |              | [Link](https://ipthreat.net)                                 |
-| myip                | real-time IP blocklist         |    x    |          |              | [Link](https://myip.ms)                                      |
-| nixspam             | iX spam protection             |    x    |          |              | [Link](http://www.nixspam.org)                               |
-| oisdbig             | OISD-big IPs                   |         |    x     | tcp: 80, 443 | [Link](https://github.com/dibdot/banIP-IP-blocklists)        |
-| oisdnsfw            | OISD-nsfw IPs                  |         |    x     | tcp: 80, 443 | [Link](https://github.com/dibdot/banIP-IP-blocklists)        |
-| oisdsmall           | OISD-small IPs                 |         |    x     | tcp: 80, 443 | [Link](https://github.com/dibdot/banIP-IP-blocklists)        |
-| pallebone           | curated IP blocklist           |    x    |          |              | [Link](https://github.com/pallebone/StrictBlockPAllebone)    |
-| proxy               | open proxies                   |    x    |          |              | [Link](https://iplists.firehol.org/?ipset=proxylists)        |
-| stevenblack         | stevenblack IPs                |         |    x     | tcp: 80, 443 | [Link](https://github.com/dibdot/banIP-IP-blocklists)        |
-| threat              | emerging threats               |    x    |          |              | [Link](https://rules.emergingthreats.net)                    |
-| threatview          | malicious IPs                  |    x    |          |              | [Link](https://threatview.io)                                |
-| tor                 | tor exit nodes                 |    x    |          |              | [Link](https://www.dan.me.uk)                                |
-| turris              | turris sentinel blocklist      |    x    |          |              | [Link](https://view.sentinel.turris.cz)                      |
-| uceprotect1         | spam protection level 1        |    x    |          |              | [Link](https://www.uceprotect.net/en/index.php)              |
-| uceprotect2         | spam protection level 2        |    x    |          |              | [Link](https://www.uceprotect.net/en/index.php)              |
-| uceprotect3         | spam protection level 3        |    x    |          |              | [Link](https://www.uceprotect.net/en/index.php)              |
-| urlhaus             | urlhaus IDS IPs                |    x    |          |              | [Link](https://urlhaus.abuse.ch)                             |
-| urlvir              | malware related IPs            |    x    |          |              | [Link](https://iplists.firehol.org/?ipset=urlvir)            |
-| webclient           | malware related IPs            |    x    |          |              | [Link](https://iplists.firehol.org/?ipset=firehol_webclient) |
-| voip                | VoIP fraud blocklist           |    x    |          |              | [Link](https://voipbl.org)                                   |
-| vpn                 | vpn IPs                        |    x    |          |              | [Link](https://github.com/X4BNet/lists_vpn)                  |
-| vpndc               | vpn datacenter IPs             |    x    |          |              | [Link](https://github.com/X4BNet/lists_vpn)                  |
-| yoyo                | yoyo IPs                       |         |    x     | tcp: 80, 443 | [Link](https://github.com/dibdot/banIP-IP-blocklists)        |
+| Feed                | Focus                          | Inbound | Outbound | Proto/Port        | Information                                                  |
+| :------------------ | :----------------------------- | :-----: | :------: | :---------------: | :----------------------------------------------------------- |
+| adaway              | adaway IPs                     |         |    x     | tcp, udp: 80, 443 | [Link](https://github.com/dibdot/banIP-IP-blocklists)        |
+| adguard             | adguard IPs                    |         |    x     | tcp, udp: 80, 443 | [Link](https://github.com/dibdot/banIP-IP-blocklists)        |
+| adguardtrackers     | adguardtracker IPs             |         |    x     | tcp, udp: 80, 443 | [Link](https://github.com/dibdot/banIP-IP-blocklists)        |
+| antipopads          | antipopads IPs                 |         |    x     | tcp, udp: 80, 443 | [Link](https://github.com/dibdot/banIP-IP-blocklists)        |
+| asn                 | ASN segments                   |    x    |          |                   | [Link](https://asn.ipinfo.app)                               |
+| backscatterer       | backscatterer IPs              |    x    |          |                   | [Link](https://www.uceprotect.net/en/index.php)              |
+| becyber             | malicious attacker IPs         |    x    |          |                   | [Link](https://github.com/duggytuxy/malicious_ip_addresses)  |
+| binarydefense       | binary defense banlist         |    x    |          |                   | [Link](https://iplists.firehol.org/?ipset=bds_atif)          |
+| bogon               | bogon prefixes                 |    x    |          |                   | [Link](https://team-cymru.com)                               |
+| bruteforceblock     | bruteforceblocker IPs          |    x    |          |                   | [Link](https://danger.rulez.sk/index.php/bruteforceblocker/) |
+| country             | country blocks                 |    x    |          |                   | [Link](https://www.ipdeny.com/ipblocks)                      |
+| cinsscore           | suspicious attacker IPs        |    x    |          |                   | [Link](https://cinsscore.com/#list)                          |
+| debl                | fail2ban IP blacklist          |    x    |          |                   | [Link](https://www.blocklist.de)                             |
+| doh                 | public DoH-Provider            |         |    x     | tcp, udp: 80, 443 | [Link](https://github.com/dibdot/DoH-IP-blocklists)          |
+| drop                | spamhaus drop compilation      |    x    |          |                   | [Link](https://www.spamhaus.org)                             |
+| dshield             | dshield IP blocklist           |    x    |          |                   | [Link](https://www.dshield.org)                              |
+| etcompromised       | ET compromised hosts           |    x    |          |                   | [Link](https://iplists.firehol.org/?ipset=et_compromised)    |
+| feodo               | feodo tracker                  |    x    |          |                   | [Link](https://feodotracker.abuse.ch)                        |
+| firehol1            | firehol level 1 compilation    |    x    |          |                   | [Link](https://iplists.firehol.org/?ipset=firehol_level1)    |
+| firehol2            | firehol level 2 compilation    |    x    |          |                   | [Link](https://iplists.firehol.org/?ipset=firehol_level2)    |
+| firehol3            | firehol level 3 compilation    |    x    |          |                   | [Link](https://iplists.firehol.org/?ipset=firehol_level3)    |
+| firehol4            | firehol level 4 compilation    |    x    |          |                   | [Link](https://iplists.firehol.org/?ipset=firehol_level4)    |
+| greensnow           | suspicious server IPs          |    x    |          |                   | [Link](https://greensnow.co)                                 |
+| hagezi              | Threat IP blocklist            |         |    x     | tcp, udp: 80, 443 | [Link](https://github.com/hagezi/dns-blocklists)             |
+| ipblackhole         | blackhole IPs                  |    x    |          |                   | [Link](https://github.com/BlackHoleMonster/IP-BlackHole)     |
+| ipsum               | malicious IPs                  |    x    |          |                   | [Link](https://github.com/stamparm/ipsum)                    |
+| ipthreat            | hacker and botnet TPs          |    x    |          |                   | [Link](https://ipthreat.net)                                 |
+| myip                | real-time IP blocklist         |    x    |          |                   | [Link](https://myip.ms)                                      |
+| nixspam             | iX spam protection             |    x    |          |                   | [Link](http://www.nixspam.org)                               |
+| oisdbig             | OISD-big IPs                   |         |    x     | tcp, udp: 80, 443 | [Link](https://github.com/dibdot/banIP-IP-blocklists)        |
+| oisdnsfw            | OISD-nsfw IPs                  |         |    x     | tcp, udp: 80, 443 | [Link](https://github.com/dibdot/banIP-IP-blocklists)        |
+| oisdsmall           | OISD-small IPs                 |         |    x     | tcp, udp: 80, 443 | [Link](https://github.com/dibdot/banIP-IP-blocklists)        |
+| pallebone           | curated IP blocklist           |    x    |          |                   | [Link](https://github.com/pallebone/StrictBlockPAllebone)    |
+| proxy               | open proxies                   |    x    |          |                   | [Link](https://iplists.firehol.org/?ipset=proxylists)        |
+| stevenblack         | stevenblack IPs                |         |    x     | tcp, udp: 80, 443 | [Link](https://github.com/dibdot/banIP-IP-blocklists)        |
+| threat              | emerging threats               |    x    |          |                   | [Link](https://rules.emergingthreats.net)                    |
+| threatview          | malicious IPs                  |    x    |          |                   | [Link](https://threatview.io)                                |
+| tor                 | tor exit nodes                 |    x    |          |                   | [Link](https://www.dan.me.uk)                                |
+| turris              | turris sentinel blocklist      |    x    |          |                   | [Link](https://view.sentinel.turris.cz)                      |
+| uceprotect1         | spam protection level 1        |    x    |          |                   | [Link](https://www.uceprotect.net/en/index.php)              |
+| uceprotect2         | spam protection level 2        |    x    |          |                   | [Link](https://www.uceprotect.net/en/index.php)              |
+| uceprotect3         | spam protection level 3        |    x    |          |                   | [Link](https://www.uceprotect.net/en/index.php)              |
+| urlhaus             | urlhaus IDS IPs                |    x    |          |                   | [Link](https://urlhaus.abuse.ch)                             |
+| urlvir              | malware related IPs            |    x    |          |                   | [Link](https://iplists.firehol.org/?ipset=urlvir)            |
+| webclient           | malware related IPs            |    x    |          |                   | [Link](https://iplists.firehol.org/?ipset=firehol_webclient) |
+| voip                | VoIP fraud blocklist           |    x    |          |                   | [Link](https://voipbl.org)                                   |
+| vpn                 | vpn IPs                        |    x    |          |                   | [Link](https://github.com/X4BNet/lists_vpn)                  |
+| vpndc               | vpn datacenter IPs             |    x    |          |                   | [Link](https://github.com/X4BNet/lists_vpn)                  |
+| yoyo                | yoyo IPs                       |         |    x     | tcp, udp: 80, 443 | [Link](https://github.com/dibdot/banIP-IP-blocklists)        |
 
 * Zero-conf like automatic installation & setup, usually no manual changes needed
 * All Sets are handled in a separate nft table/namespace 'banIP'
@@ -261,8 +261,8 @@ Available commands:
                          |              |                       |                       |                       |  185.242.224.0(p)     
     debl_v4              | 13646        | ON: 0                 | -                     | -                     | -                     
     debl_v6              | 131          | ON: 0                 | -                     | -                     | -                     
-    doh_v6               | 1218         | -                     | ON: 0                 | tcp: 80, 443          | -                     
-    doh_v4               | 1756         | -                     | ON: 0                 | tcp: 80, 443          | -                     
+    doh_v6               | 1218         | -                     | ON: 0                 | tcp, udp: 80, 443     | -                     
+    doh_v4               | 1756         | -                     | ON: 0                 | tcp, udp: 80, 443     | -                     
     threat_v4            | 943          | ON: 2                 | -                     | -                     | 45.142.193.0(p), 141.98.
                          |              |                       |                       |                       | 10.0(p)               
     turris_v4            | 8017         | ON: 1                 | -                     | -                     | 78.128.113.38         
diff --git a/net/banip/files/banip.feeds b/net/banip/files/banip.feeds
index 28e24accc1712699f806415537464391722d04ee..89a8b3e98a02779e6da575f428bec7f39ffdb231 100644 (file)
--- a/net/banip/files/banip.feeds
+++ b/net/banip/files/banip.feeds
@@ -6,7 +6,7 @@
                "rule_6": "/^(([0-9A-f]{0,4}:){1,7}[0-9A-f]{0,4}:?(\\/(1?[0-2][0-8]|[0-9][0-9]))?)[[:space:]]/{printf \"%s,\\n\",$1}",
                "chain": "out",
                "descr": "adaway IPs",
-               "flag": "tcp 80 443"
+               "flag": "tcp udp 80 443"
        },
        "adguard":{
                "url_4": "https://raw.githubusercontent.com/dibdot/banIP-IP-blocklists/main/adguard-ipv4.txt",
@@ -15,7 +15,7 @@
                "rule_6": "/^(([0-9A-f]{0,4}:){1,7}[0-9A-f]{0,4}:?(\\/(1?[0-2][0-8]|[0-9][0-9]))?)[[:space:]]/{printf \"%s,\\n\",$1}",
                "chain": "out",
                "descr": "adguard IPs",
-               "flag": "tcp 80 443"
+               "flag": "tcp udp 80 443"
        },
        "adguardtrackers":{
                "url_4": "https://raw.githubusercontent.com/dibdot/banIP-IP-blocklists/main/adguardtrackers-ipv4.txt",
@@ -24,7 +24,7 @@
                "rule_6": "/^(([0-9A-f]{0,4}:){1,7}[0-9A-f]{0,4}:?(\\/(1?[0-2][0-8]|[0-9][0-9]))?)[[:space:]]/{printf \"%s,\\n\",$1}",
                "chain": "out",
                "descr": "adguardtracker IPs",
-               "flag": "tcp 80 443"
+               "flag": "tcp udp 80 443"
        },
        "antipopads":{
                "url_4": "https://raw.githubusercontent.com/dibdot/banIP-IP-blocklists/main/antipopads-ipv4.txt",
@@ -33,7 +33,7 @@
                "rule_6": "/^(([0-9A-f]{0,4}:){1,7}[0-9A-f]{0,4}:?(\\/(1?[0-2][0-8]|[0-9][0-9]))?)[[:space:]]/{printf \"%s,\\n\",$1}",
                "chain": "out",
                "descr": "antipopads IPs",
-               "flag": "tcp 80 443"
+               "flag": "tcp udp 80 443"
        },
        "asn":{
                "url_4": "https://asn.ipinfo.app/api/text/list/",
@@ -107,7 +107,7 @@
                "rule_6": "/^(([0-9A-f]{0,4}:){1,7}[0-9A-f]{0,4}:?(\\/(1?[0-2][0-8]|[0-9][0-9]))?)[[:space:]]/{printf \"%s,\\n\",$1}",
                "chain": "out",
                "descr": "public DoH-Provider",
-               "flag": "tcp 80 443"
+               "flag": "tcp udp 80 443"
        },
        "drop":{
                "url_4": "https://www.spamhaus.org/drop/drop.txt",
@@ -170,7 +170,7 @@
                "rule_4": "/^127\\./{next}/^(([1-9][0-9]{0,2}\\.){1}([0-9]{1,3}\\.){2}(1?[0-9][0-9]?|2[0-4][0-9]|25[0-5])(\\/(1?[0-9]|2?[0-9]|3?[0-2]))?)$/{printf \"%s,\\n\",$1}",
                "chain": "out",
                "descr": "Threat IP blocklist",
-               "flag": "tcp 80 443"
+               "flag": "tcp udp 80 443"
        },
        "ipblackhole":{
                "url_4": "https://blackhole.s-e-r-v-e-r.pw/blackhole-today",
@@ -213,7 +213,7 @@
                "rule_6": "/^(([0-9A-f]{0,4}:){1,7}[0-9A-f]{0,4}:?(\\/(1?[0-2][0-8]|[0-9][0-9]))?)[[:space:]]/{printf \"%s,\\n\",$1}",
                "chain": "out",
                "descr": "OISD-big IPs",
-               "flag": "tcp 80 443"
+               "flag": "tcp udp 80 443"
        },
        "oisdnsfw":{
                "url_4": "https://raw.githubusercontent.com/dibdot/banIP-IP-blocklists/main/oisdnsfw-ipv4.txt",
@@ -222,7 +222,7 @@
                "rule_6": "/^(([0-9A-f]{0,4}:){1,7}[0-9A-f]{0,4}:?(\\/(1?[0-2][0-8]|[0-9][0-9]))?)[[:space:]]/{printf \"%s,\\n\",$1}",
                "chain": "out",
                "descr": "OISD-nsfw IPs",
-               "flag": "tcp 80 443"
+               "flag": "tcp udp 80 443"
        },
        "oisdsmall":{
                "url_4": "https://raw.githubusercontent.com/dibdot/banIP-IP-blocklists/main/oisdsmall-ipv4.txt",
@@ -231,7 +231,7 @@
                "rule_6": "/^(([0-9A-f]{0,4}:){1,7}[0-9A-f]{0,4}:?(\\/(1?[0-2][0-8]|[0-9][0-9]))?)[[:space:]]/{printf \"%s,\\n\",$1}",
                "chain": "out",
                "descr": "OISD-small IPs",
-               "flag": "tcp 80 443"
+               "flag": "tcp udp 80 443"
        },
        "pallebone":{
                "url_4": "https://raw.githubusercontent.com/pallebone/StrictBlockPAllebone/master/BlockIP.txt",
@@ -252,7 +252,7 @@
                "rule_6": "/^(([0-9A-f]{0,4}:){1,7}[0-9A-f]{0,4}:?(\\/(1?[0-2][0-8]|[0-9][0-9]))?)[[:space:]]/{printf \"%s,\\n\",$1}",
                "chain": "out",
                "descr": "stevenblack IPs",
-               "flag": "tcp 80 443"
+               "flag": "tcp udp 80 443"
        },
        "threat":{
                "url_4": "https://rules.emergingthreats.net/fwrules/emerging-Block-IPs.txt",
@@ -344,6 +344,6 @@
                "rule_6": "/^(([0-9A-f]{0,4}:){1,7}[0-9A-f]{0,4}:?(\\/(1?[0-2][0-8]|[0-9][0-9]))?)[[:space:]]/{printf \"%s,\\n\",$1}",
                "chain": "out",
                "descr": "yoyo IPs",
-               "flag": "tcp 80 443"
+               "flag": "tcp udp 80 443"
        }
 }
Mirror of packages feed