Mercurial > prosody-modules
annotate mod_firewall/scripts/spam-blocklists.pfw @ 5748:dfbced5e54b9
mod_audit_auth: Ignore FAST authentication events by default
FAST is more like a cookie that allows linking new connections to a previous
(e.g. password) authentication. Since we assume that FAST tokens are secure
(not user generated) and not shareable, it reduces a lot of noise by filtering
out uninteresting authentication events.
author | Matthew Wild <mwild1@gmail.com> |
---|---|
date | Fri, 01 Dec 2023 11:34:52 +0000 |
parents | d84757f9adcb |
children |
rev | line source |
---|---|
4146
bebc5740fc16
mod_firewall: Add jabberspam-simple-blocklist.pfw and spam-blocklists.pfw
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
1 # This script depends on spam-blocking.pfw also being loaded |
bebc5740fc16
mod_firewall: Add jabberspam-simple-blocklist.pfw and spam-blocklists.pfw
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
2 # Any traffic that is not explicitly blocked or allowed by other |
bebc5740fc16
mod_firewall: Add jabberspam-simple-blocklist.pfw and spam-blocklists.pfw
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
3 # rules will be checked against the JabberSPAM server blocklist |
bebc5740fc16
mod_firewall: Add jabberspam-simple-blocklist.pfw and spam-blocklists.pfw
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
4 |
bebc5740fc16
mod_firewall: Add jabberspam-simple-blocklist.pfw and spam-blocklists.pfw
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
5 %LIST blocklist: https://cdn.jsdelivr.net/gh/jabberspam/blacklist/blacklist.txt |
bebc5740fc16
mod_firewall: Add jabberspam-simple-blocklist.pfw and spam-blocklists.pfw
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
6 |
bebc5740fc16
mod_firewall: Add jabberspam-simple-blocklist.pfw and spam-blocklists.pfw
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
7 ::user/spam_handle_unknown_custom |
bebc5740fc16
mod_firewall: Add jabberspam-simple-blocklist.pfw and spam-blocklists.pfw
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
8 |
bebc5740fc16
mod_firewall: Add jabberspam-simple-blocklist.pfw and spam-blocklists.pfw
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
9 CHECK LIST: blocklist contains $<@from|host> |
bebc5740fc16
mod_firewall: Add jabberspam-simple-blocklist.pfw and spam-blocklists.pfw
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
10 BOUNCE=policy-violation (Your server is blocked due to spam) |
5532
d84757f9adcb
mod_firewall: scripts: spam-blocklists: Check sender and inviter of MUC invitations against blocklist
Matthew Wild <mwild1@gmail.com>
parents:
4146
diff
changeset
|
11 |
d84757f9adcb
mod_firewall: scripts: spam-blocklists: Check sender and inviter of MUC invitations against blocklist
Matthew Wild <mwild1@gmail.com>
parents:
4146
diff
changeset
|
12 ::user/spam_check_muc_invite_custom |
d84757f9adcb
mod_firewall: scripts: spam-blocklists: Check sender and inviter of MUC invitations against blocklist
Matthew Wild <mwild1@gmail.com>
parents:
4146
diff
changeset
|
13 |
d84757f9adcb
mod_firewall: scripts: spam-blocklists: Check sender and inviter of MUC invitations against blocklist
Matthew Wild <mwild1@gmail.com>
parents:
4146
diff
changeset
|
14 # Check the server we received the invitation from |
d84757f9adcb
mod_firewall: scripts: spam-blocklists: Check sender and inviter of MUC invitations against blocklist
Matthew Wild <mwild1@gmail.com>
parents:
4146
diff
changeset
|
15 CHECK LIST: blocklist contains $<@from|host> |
d84757f9adcb
mod_firewall: scripts: spam-blocklists: Check sender and inviter of MUC invitations against blocklist
Matthew Wild <mwild1@gmail.com>
parents:
4146
diff
changeset
|
16 BOUNCE=policy-violation (Your server is blocked due to spam) |
d84757f9adcb
mod_firewall: scripts: spam-blocklists: Check sender and inviter of MUC invitations against blocklist
Matthew Wild <mwild1@gmail.com>
parents:
4146
diff
changeset
|
17 |
d84757f9adcb
mod_firewall: scripts: spam-blocklists: Check sender and inviter of MUC invitations against blocklist
Matthew Wild <mwild1@gmail.com>
parents:
4146
diff
changeset
|
18 # Check the inviter's JID against the blocklist, too |
d84757f9adcb
mod_firewall: scripts: spam-blocklists: Check sender and inviter of MUC invitations against blocklist
Matthew Wild <mwild1@gmail.com>
parents:
4146
diff
changeset
|
19 CHECK LIST: blocklist contains $<{http://jabber.org/protocol/muc#user}x/invite@from|host> |
d84757f9adcb
mod_firewall: scripts: spam-blocklists: Check sender and inviter of MUC invitations against blocklist
Matthew Wild <mwild1@gmail.com>
parents:
4146
diff
changeset
|
20 BOUNCE=policy-violation (Your server is blocked due to spam) |