changeset 186:5e274dfc4b39 puppet-3.6

Update firewall blacklisting * Remove old IPs that probably aren't bothering us any more * Add a new IP that's abusing the bdstrike contact form (but no others)
author IBBoard <dev@ibboard.co.uk>
date Tue, 08 Jan 2019 20:13:18 +0000
parents 78dc899775b7
children 6c260427a94c
files manifests/templates.pp
diffstat 1 files changed, 3 insertions(+), 15 deletions(-) [+]
line wrap: on
line diff
--- a/manifests/templates.pp	Fri Dec 14 20:07:09 2018 +0000
+++ b/manifests/templates.pp	Tue Jan 08 20:13:18 2019 +0000
@@ -93,22 +93,10 @@
 		proto => tcp,
 		action => accept,
 	}
+	# Block a spammer hitting our contact forms (also on StopForumSpam list A LOT)
 	firewall { '099 Blacklist spammers 1':
-		source => '146.0.229.80/28',
-		dport => [465, 25],
-		proto => tcp,
-		action => 'reject',
-	}
-	firewall { '099 Blacklist spammers 2':
-		source => '89.43.62.0/24',
-		dport => [465, 25],
-		proto => tcp,
-		action => 'reject',
-	}
-	# German server that did 5000+ HEAD requests in <10 days to "/" on one site
-	firewall { '099 Blacklist spammers 3':
-		source => '78.47.182.152',
-		dport => [465, 25],
+		source => '107.181.78.172',
+		dport => [80, 443],
 		proto => tcp,
 		action => 'reject',
 	}