daily

Author: szepeviktor

security/myattackers-ipsets/ipset/censys.ipset

@@ -6,6 +6,9 @@ flush censys
 
 # https://docs.censys.com/docs/opt-out-of-data-collection
 
+# undocumented
+add censys 66.132.153.0/24
+
 # AS398324 - CENSYS-ARIN-01
 add censys 66.132.159.0/24
 add censys 162.142.125.0/24

security/myattackers-ipsets/ipset/shadow-server.ipset

@@ -3,7 +3,7 @@
 #: iptables -w -I myattackers-ipset -m set --match-set shadow-server src -j REJECT
 create shadow-server hash:net family inet hashsize 128 maxelem 128
 flush shadow-server
-#$ for H in scan-{{00..59}{,{a..o}},{60..99}-{0..13}}.shadowserver.org.; do dig +short ${H} A; done \
+#$ for H in scan-{{00..59}{,{a..o}},{60..99}-{0..9},{60..99}-{00..13}}.shadowserver.org.; do dig +short ${H} A; done \
 #$   | iprange | sed -e 's#^#add shadow-server #'
 add shadow-server 64.62.156.10/31
 add shadow-server 64.62.156.12/30

webserver/apache-sites-available/Skeleton-site-ssl.conf

@@ -63,7 +63,7 @@
 
     RewriteEngine On
 
-    ## Enable apache status
+    ## Enable Apache status
     ## Consider enabling it in the webmail's vhost
     #<IfModule mod_status.c>
     #    <Location /server-status>
@@ -73,7 +73,7 @@
     #    RewriteRule "^/server-status$" - [END]
     #</IfModule>
 
-    ## Enable status for this php-fpm pool
+    ## Enable status for this PHP-FPM pool
     #<Location /statusphp>
     #    Require local
     #    <IfModule mod_proxy_fcgi.c>
@@ -137,10 +137,10 @@
     RewriteCond expr "%{SSL:SSL_TLS_SNI} != %{HTTP_HOST}"
     RewriteRule "^" - [R=421,END]
 
-    # Refuse Microsoft Office Autodiscover requests
+    # Deny Microsoft Office Autodiscover requests
     RewriteRule "^/autodiscover/autodiscover\.xml$" - [NC,R=404,END]
 
-    # Refuse OPTIONS requests from Microsoft Office and alternatives
+    # Deny OPTIONS requests from Microsoft Office and alternatives
     RewriteCond "%{REQUEST_METHOD}" "^(OPTIONS|PROPFIND)$" [NC]
     RewriteCond "%{HTTP_USER_AGENT}" "=Microsoft Office Protocol Discovery" [OR]
     RewriteCond "%{HTTP_USER_AGENT}" "^(Microsoft-WebDAV-MiniRedir/|Apache OpenOffice/|LibreOffice$)"
@@ -151,7 +151,7 @@
     RewriteCond "%{QUERY_STRING}" "^_AMP_safari_preconnect_polyfill_cachebust=[0-9]+$"
     RewriteRule "^/robots\.txt$" "/robots.txt"
 
-    # Do not serve JavaScript and CSS .map files in production
+    # Deny requests for JavaScript and CSS .map files
     RewriteRule "\.map$" - [R=404,END]
 
     # Canonical redirect

webserver/phpfpm-pools/Skeleton-pool.conf

@@ -13,6 +13,7 @@ pm.max_children = 40
 pm.start_servers = 3
 pm.min_spare_servers = 2
 pm.max_spare_servers = 5
+;pm.max_requests = 1000
 
 ;chdir = /