comparison manifests/templates.pp @ 186:5e274dfc4b39 puppet-3.6

Update firewall blacklisting * Remove old IPs that probably aren't bothering us any more * Add a new IP that's abusing the bdstrike contact form (but no others)
author IBBoard <dev@ibboard.co.uk>
date Tue, 08 Jan 2019 20:13:18 +0000
parents 78dc899775b7
children 91d4b88b7568
comparison
equal deleted inserted replaced
185:78dc899775b7 186:5e274dfc4b39
91 source => '66.249.64.0/19', 91 source => '66.249.64.0/19',
92 dport => [80,443], 92 dport => [80,443],
93 proto => tcp, 93 proto => tcp,
94 action => accept, 94 action => accept,
95 } 95 }
96 # Block a spammer hitting our contact forms (also on StopForumSpam list A LOT)
96 firewall { '099 Blacklist spammers 1': 97 firewall { '099 Blacklist spammers 1':
97 source => '146.0.229.80/28', 98 source => '107.181.78.172',
98 dport => [465, 25], 99 dport => [80, 443],
99 proto => tcp,
100 action => 'reject',
101 }
102 firewall { '099 Blacklist spammers 2':
103 source => '89.43.62.0/24',
104 dport => [465, 25],
105 proto => tcp,
106 action => 'reject',
107 }
108 # German server that did 5000+ HEAD requests in <10 days to "/" on one site
109 firewall { '099 Blacklist spammers 3':
110 source => '78.47.182.152',
111 dport => [465, 25],
112 proto => tcp, 100 proto => tcp,
113 action => 'reject', 101 action => 'reject',
114 } 102 }
115 firewall { '099 Blacklist IODC bot': 103 firewall { '099 Blacklist IODC bot':
116 # IODC bot makes too many bad requests, and contact form is broken 104 # IODC bot makes too many bad requests, and contact form is broken