annotate mod_firewall/scripts/spam-blocklists.pfw @ 5668:ecfd7aece33b

mod_measure_modules: Report module statuses via OpenMetrics Someone in the chat asked about a health check endpoint, which reminded me of mod_http_status, which provides access to module statuses with full details. After that, this idea came about, which seems natural. As noted in the README, it could be used to monitor that critical modules are in fact loaded correctly. As more modules use the status API, the more useful this module and mod_http_status becomes.
author Kim Alvefur <zash@zash.se>
date Fri, 06 Oct 2023 18:34:39 +0200
parents d84757f9adcb
children
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
4146
bebc5740fc16 mod_firewall: Add jabberspam-simple-blocklist.pfw and spam-blocklists.pfw
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
1 # This script depends on spam-blocking.pfw also being loaded
bebc5740fc16 mod_firewall: Add jabberspam-simple-blocklist.pfw and spam-blocklists.pfw
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
2 # Any traffic that is not explicitly blocked or allowed by other
bebc5740fc16 mod_firewall: Add jabberspam-simple-blocklist.pfw and spam-blocklists.pfw
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
3 # rules will be checked against the JabberSPAM server blocklist
bebc5740fc16 mod_firewall: Add jabberspam-simple-blocklist.pfw and spam-blocklists.pfw
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
4
bebc5740fc16 mod_firewall: Add jabberspam-simple-blocklist.pfw and spam-blocklists.pfw
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
5 %LIST blocklist: https://cdn.jsdelivr.net/gh/jabberspam/blacklist/blacklist.txt
bebc5740fc16 mod_firewall: Add jabberspam-simple-blocklist.pfw and spam-blocklists.pfw
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
6
bebc5740fc16 mod_firewall: Add jabberspam-simple-blocklist.pfw and spam-blocklists.pfw
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
7 ::user/spam_handle_unknown_custom
bebc5740fc16 mod_firewall: Add jabberspam-simple-blocklist.pfw and spam-blocklists.pfw
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
8
bebc5740fc16 mod_firewall: Add jabberspam-simple-blocklist.pfw and spam-blocklists.pfw
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
9 CHECK LIST: blocklist contains $<@from|host>
bebc5740fc16 mod_firewall: Add jabberspam-simple-blocklist.pfw and spam-blocklists.pfw
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
10 BOUNCE=policy-violation (Your server is blocked due to spam)
5532
d84757f9adcb mod_firewall: scripts: spam-blocklists: Check sender and inviter of MUC invitations against blocklist
Matthew Wild <mwild1@gmail.com>
parents: 4146
diff changeset
11
d84757f9adcb mod_firewall: scripts: spam-blocklists: Check sender and inviter of MUC invitations against blocklist
Matthew Wild <mwild1@gmail.com>
parents: 4146
diff changeset
12 ::user/spam_check_muc_invite_custom
d84757f9adcb mod_firewall: scripts: spam-blocklists: Check sender and inviter of MUC invitations against blocklist
Matthew Wild <mwild1@gmail.com>
parents: 4146
diff changeset
13
d84757f9adcb mod_firewall: scripts: spam-blocklists: Check sender and inviter of MUC invitations against blocklist
Matthew Wild <mwild1@gmail.com>
parents: 4146
diff changeset
14 # Check the server we received the invitation from
d84757f9adcb mod_firewall: scripts: spam-blocklists: Check sender and inviter of MUC invitations against blocklist
Matthew Wild <mwild1@gmail.com>
parents: 4146
diff changeset
15 CHECK LIST: blocklist contains $<@from|host>
d84757f9adcb mod_firewall: scripts: spam-blocklists: Check sender and inviter of MUC invitations against blocklist
Matthew Wild <mwild1@gmail.com>
parents: 4146
diff changeset
16 BOUNCE=policy-violation (Your server is blocked due to spam)
d84757f9adcb mod_firewall: scripts: spam-blocklists: Check sender and inviter of MUC invitations against blocklist
Matthew Wild <mwild1@gmail.com>
parents: 4146
diff changeset
17
d84757f9adcb mod_firewall: scripts: spam-blocklists: Check sender and inviter of MUC invitations against blocklist
Matthew Wild <mwild1@gmail.com>
parents: 4146
diff changeset
18 # Check the inviter's JID against the blocklist, too
d84757f9adcb mod_firewall: scripts: spam-blocklists: Check sender and inviter of MUC invitations against blocklist
Matthew Wild <mwild1@gmail.com>
parents: 4146
diff changeset
19 CHECK LIST: blocklist contains $<{http://jabber.org/protocol/muc#user}x/invite@from|host>
d84757f9adcb mod_firewall: scripts: spam-blocklists: Check sender and inviter of MUC invitations against blocklist
Matthew Wild <mwild1@gmail.com>
parents: 4146
diff changeset
20 BOUNCE=policy-violation (Your server is blocked due to spam)