daily autocommit

diff --git a/.etckeeper b/.etckeeper
index b4b43d548524617826b1d0b5e32cadac19f9f5da..b745f662faff6730798157e5dcd721265eec7d7e 100755 (executable)
--- a/.etckeeper
+++ b/.etckeeper
@@ -1339,6 +1339,7 @@ maybe chmod 0755 'systemd/system/getty@.service.d'
 maybe chmod 0644 'systemd/system/getty@.service.d/noclear.conf'
 maybe chmod 0755 'systemd/system/icinga2.service.d'
 maybe chmod 0644 'systemd/system/icinga2.service.d/limits.conf'
+maybe chmod 0644 'systemd/system/local.service'
 maybe chmod 0755 'systemd/system/multi-user.target.wants'
 maybe chmod 0755 'systemd/system/network-online.target.wants'
 maybe chmod 0755 'systemd/system/paths.target.wants'

diff --git a/iptables/rules.v4 b/iptables/rules.v4
index 02c982b99f55641ff626048a8196b31d28234f01..982773edee30565c20fae238979135f0ffec317e 100644 (file)
--- a/iptables/rules.v4
+++ b/iptables/rules.v4
@@ -1,8 +1,8 @@
-# Generated by iptables-save v1.6.0 on Wed Feb 20 21:38:39 2019
+# Generated by iptables-save v1.6.0 on Wed Apr 17 10:33:58 2019
 *filter
 :INPUT ACCEPT [0:0]
 :FORWARD ACCEPT [0:0]
-:OUTPUT ACCEPT [452:97575]
+:OUTPUT ACCEPT [36:10554]
 :f2b-apache - [0:0]
 :f2b-apache-modsecurity - [0:0]
 :f2b-apache-nohome - [0:0]
@@ -40,6 +40,8 @@
 -A f2b-apache -j RETURN
 -A f2b-apache -j RETURN
 -A f2b-apache -j RETURN
+-A f2b-apache -j RETURN
+-A f2b-apache-modsecurity -j RETURN
 -A f2b-apache-modsecurity -j RETURN
 -A f2b-apache-modsecurity -j RETURN
 -A f2b-apache-modsecurity -j RETURN
@@ -48,6 +50,8 @@
 -A f2b-apache-nohome -j RETURN
 -A f2b-apache-nohome -j RETURN
 -A f2b-apache-nohome -j RETURN
+-A f2b-apache-nohome -j RETURN
+-A f2b-apache-noscript -j RETURN
 -A f2b-apache-noscript -j RETURN
 -A f2b-apache-noscript -j RETURN
 -A f2b-apache-noscript -j RETURN
@@ -56,10 +60,18 @@
 -A f2b-apache-overflows -j RETURN
 -A f2b-apache-overflows -j RETURN
 -A f2b-apache-overflows -j RETURN
+-A f2b-apache-overflows -j RETURN
+-A f2b-postfix -j RETURN
 -A f2b-postfix -j RETURN
 -A f2b-postfix -j RETURN
 -A f2b-postfix -j RETURN
 -A f2b-postfix -j RETURN
+-A f2b-ssh -s 89.3.236.207/32 -j REJECT --reject-with icmp-port-unreachable
+-A f2b-ssh -s 185.87.121.19/32 -j REJECT --reject-with icmp-port-unreachable
+-A f2b-ssh -s 112.85.42.232/32 -j REJECT --reject-with icmp-port-unreachable
+-A f2b-ssh -s 185.254.122.114/32 -j REJECT --reject-with icmp-port-unreachable
+-A f2b-ssh -s 45.55.80.186/32 -j REJECT --reject-with icmp-port-unreachable
+-A f2b-ssh -s 139.59.85.89/32 -j REJECT --reject-with icmp-port-unreachable
 -A f2b-ssh -s 80.152.170.99/32 -j REJECT --reject-with icmp-port-unreachable
 -A f2b-ssh -s 112.85.42.88/32 -j REJECT --reject-with icmp-port-unreachable
 -A f2b-ssh -s 58.218.198.142/32 -j REJECT --reject-with icmp-port-unreachable
@@ -67,6 +79,8 @@
 -A f2b-ssh -j RETURN
 -A f2b-ssh -j RETURN
 -A f2b-ssh -j RETURN
+-A f2b-ssh -j RETURN
+-A f2b-sshd -j RETURN
 -A f2b-sshd -j RETURN
 -A f2b-sshd -j RETURN
 -A f2b-sshd -j RETURN
@@ -89,4 +103,4 @@
 -A rejects -p tcp -m tcp --dport 5060 -j REJECT --reject-with icmp-port-unreachable
 -A rejects -p tcp -m tcp --dport 8080 -j REJECT --reject-with icmp-port-unreachable
 COMMIT
-# Completed on Wed Feb 20 21:38:39 2019
+# Completed on Wed Apr 17 10:33:58 2019

diff --git a/iptables/rules.v6 b/iptables/rules.v6
index f7323ac9cadcb3617cfee5770159eafd69dead5d..d4e80082bad97340e190c8afd8379c39f7ee3155 100644 (file)
--- a/iptables/rules.v6
+++ b/iptables/rules.v6
@@ -1,7 +1,7 @@
-# Generated by ip6tables-save v1.6.0 on Wed Feb 20 21:38:39 2019
+# Generated by ip6tables-save v1.6.0 on Wed Apr 17 10:33:58 2019
 *filter
 :INPUT ACCEPT [1:49]
 :FORWARD ACCEPT [0:0]
-:OUTPUT ACCEPT [15:941]
+:OUTPUT ACCEPT [27:1613]
 COMMIT
-# Completed on Wed Feb 20 21:38:39 2019
+# Completed on Wed Apr 17 10:33:58 2019

diff --git a/systemd/system/local.service b/systemd/system/local.service
new file mode 100644 (file)
index 0000000..ba700ac
--- /dev/null
+++ b/systemd/system/local.service
@@ -0,0 +1,12 @@
+[Unit]
+Description=Executed scripts after booting
+After=remote-fs.target postfix.service networking.service rsyslog.service ssh.service bind9.service netfilter-persistent.service libvirt-guests.service mariadb.service
+
+[Service]
+ExecStart=/usr/local/sbin/local_service start
+ExecStop=/usr/local/sbin/local_service stop
+Type=oneshot
+RemainAfterExit=yes
+
+[Install]
+WantedBy=multi-user.target