daily autocommit

diff --git a/.etckeeper b/.etckeeper
index 259c368180501766dc20d95408a0205785539e1c..8a6a1309b451948e47f50d59fe48d3c1d5a1b3f5 100755 (executable)
--- a/.etckeeper
+++ b/.etckeeper
@@ -22,6 +22,9 @@ mkdir -p './initramfs-tools/scripts/nfs-top'
 mkdir -p './initramfs-tools/scripts/panic'
 mkdir -p './insserv/overrides'
 mkdir -p './kernel/install.d'
+mkdir -p './letsencrypt/renewal-hooks/deploy'
+mkdir -p './letsencrypt/renewal-hooks/post'
+mkdir -p './letsencrypt/renewal-hooks/pre'
 mkdir -p './logwatch/scripts/services'
 mkdir -p './modprobe.d'
 mkdir -p './network/if-pre-up.d'
@@ -1142,6 +1145,10 @@ maybe chmod 0700 'letsencrypt/live'
 maybe chmod 0755 'letsencrypt/live/git.uhu-banane.net'
 maybe chmod 0644 'letsencrypt/options-ssl-apache.conf'
 maybe chmod 0755 'letsencrypt/renewal'
+maybe chmod 0755 'letsencrypt/renewal-hooks'
+maybe chmod 0755 'letsencrypt/renewal-hooks/deploy'
+maybe chmod 0755 'letsencrypt/renewal-hooks/post'
+maybe chmod 0755 'letsencrypt/renewal-hooks/pre'
 maybe chmod 0644 'letsencrypt/renewal/git.uhu-banane.net.conf'
 maybe chmod 0644 'lftp.conf'
 maybe chmod 0644 'libaudit.conf'

diff --git a/iptables/rules.v4 b/iptables/rules.v4
index 1ee3cd368cbc664752c4e21cbddf46d1267079f8..6e1bff0347e09f826be6a24ee1d169a33bdfc343 100644 (file)
--- a/iptables/rules.v4
+++ b/iptables/rules.v4
@@ -1,8 +1,8 @@
-# Generated by iptables-save v1.6.0 on Sat Aug 25 13:25:42 2018
+# Generated by iptables-save v1.6.0 on Tue Jan 29 22:43:38 2019
 *filter
 :INPUT ACCEPT [0:0]
 :FORWARD ACCEPT [0:0]
-:OUTPUT ACCEPT [68:14257]
+:OUTPUT ACCEPT [24:6751]
 :f2b-apache - [0:0]
 :f2b-apache-modsecurity - [0:0]
 :f2b-apache-nohome - [0:0]
@@ -44,25 +44,34 @@
 -A f2b-apache -j RETURN
 -A f2b-apache -j RETURN
 -A f2b-apache -j RETURN
+-A f2b-apache -j RETURN
+-A f2b-apache-modsecurity -j RETURN
 -A f2b-apache-modsecurity -j RETURN
 -A f2b-apache-modsecurity -j RETURN
 -A f2b-apache-modsecurity -j RETURN
 -A f2b-apache-nohome -j RETURN
 -A f2b-apache-nohome -j RETURN
 -A f2b-apache-nohome -j RETURN
+-A f2b-apache-nohome -j RETURN
+-A f2b-apache-noscript -j RETURN
 -A f2b-apache-noscript -j RETURN
 -A f2b-apache-noscript -j RETURN
 -A f2b-apache-noscript -j RETURN
 -A f2b-apache-overflows -j RETURN
 -A f2b-apache-overflows -j RETURN
 -A f2b-apache-overflows -j RETURN
+-A f2b-apache-overflows -j RETURN
+-A f2b-postfix -j RETURN
 -A f2b-postfix -j RETURN
 -A f2b-postfix -j RETURN
 -A f2b-postfix -j RETURN
+-A f2b-ssh -s 51.38.90.195/32 -j REJECT --reject-with icmp-port-unreachable
 -A f2b-ssh -s 58.242.83.8/32 -j REJECT --reject-with icmp-port-unreachable
 -A f2b-ssh -j RETURN
 -A f2b-ssh -j RETURN
 -A f2b-ssh -j RETURN
+-A f2b-ssh -j RETURN
+-A f2b-sshd -j RETURN
 -A f2b-sshd -j RETURN
 -A f2b-sshd -j RETURN
 -A f2b-sshd -j RETURN
@@ -93,4 +102,4 @@
 -A salt-master -j NFLOG --nflog-prefix  "IPv4 Salt Reject " --nflog-threshold 1
 -A salt-master -j REJECT --reject-with icmp-port-unreachable
 COMMIT
-# Completed on Sat Aug 25 13:25:42 2018
+# Completed on Tue Jan 29 22:43:38 2019

diff --git a/iptables/rules.v6 b/iptables/rules.v6
index 940ae927b90d5912aa83e6848ef7ca46efcb2595..d0e440ffe5cd0b009c450822911bbfee400e8ea7 100644 (file)
--- a/iptables/rules.v6
+++ b/iptables/rules.v6
@@ -1,8 +1,8 @@
-# Generated by ip6tables-save v1.6.0 on Sat Aug 25 13:25:42 2018
+# Generated by ip6tables-save v1.6.0 on Tue Jan 29 22:43:38 2019
 *filter
 :INPUT ACCEPT [0:0]
 :FORWARD ACCEPT [0:0]
-:OUTPUT ACCEPT [379:31915]
+:OUTPUT ACCEPT [1105:92222]
 :salt-master - [0:0]
 -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT
 -A INPUT -m conntrack --ctstate RELATED -j ACCEPT
@@ -29,4 +29,4 @@
 -A salt-master -j NFLOG --nflog-prefix  "IPv6 Salt Reject " --nflog-threshold 1
 -A salt-master -j REJECT --reject-with icmp6-port-unreachable
 COMMIT
-# Completed on Sat Aug 25 13:25:42 2018
+# Completed on Tue Jan 29 22:43:38 2019