daily autocommit

diff --git a/.etckeeper b/.etckeeper
index 103521c713824c333d1bd4051d4762337aebec74..6e7acc6ae4d2745e733f6f3bd28bf9d2226c25a2 100755 (executable)
--- a/.etckeeper
+++ b/.etckeeper
@@ -25,6 +25,9 @@ mkdir -p './initramfs-tools/scripts/nfs-top'
 mkdir -p './initramfs-tools/scripts/panic'
 mkdir -p './insserv/overrides'
 mkdir -p './kernel/install.d'
+mkdir -p './letsencrypt/renewal-hooks/deploy'
+mkdir -p './letsencrypt/renewal-hooks/post'
+mkdir -p './letsencrypt/renewal-hooks/pre'
 mkdir -p './logwatch/scripts/services'
 mkdir -p './modprobe.d'
 mkdir -p './network/if-pre-up.d'
@@ -1273,6 +1276,10 @@ maybe chmod 0755 'letsencrypt/live/ns1.uhu-banane.de'
 maybe chmod 0755 'letsencrypt/live/ns1.uhu-banane.de-0001'
 maybe chmod 0644 'letsencrypt/options-ssl-apache.conf'
 maybe chmod 0755 'letsencrypt/renewal'
+maybe chmod 0755 'letsencrypt/renewal-hooks'
+maybe chmod 0755 'letsencrypt/renewal-hooks/deploy'
+maybe chmod 0755 'letsencrypt/renewal-hooks/post'
+maybe chmod 0755 'letsencrypt/renewal-hooks/pre'
 maybe chmod 0644 'letsencrypt/renewal/cloud.uhu-banane.de.conf'
 maybe chmod 0644 'letsencrypt/renewal/ns1.uhu-banane.de-0001.conf'
 maybe chmod 0644 'letsencrypt/renewal/ns1.uhu-banane.de.conf'

diff --git a/iptables/rules.v4 b/iptables/rules.v4
index 5010d33e99ebe738541f092572fe9bc8302f1ca2..875b6ed0627f4d3998032b1b448c4bd9d04bb28c 100644 (file)
--- a/iptables/rules.v4
+++ b/iptables/rules.v4
@@ -1,8 +1,8 @@
-# Generated by iptables-save v1.6.0 on Sat Aug 25 13:28:10 2018
+# Generated by iptables-save v1.6.0 on Tue Jan 29 22:32:37 2019
 *filter
 :INPUT ACCEPT [0:0]
 :FORWARD ACCEPT [0:0]
-:OUTPUT ACCEPT [197:30645]
+:OUTPUT ACCEPT [123:32094]
 :f2b-apache - [0:0]
 :f2b-apache-modsecurity - [0:0]
 :f2b-apache-nohome - [0:0]
@@ -38,19 +38,36 @@
 -A INPUT -j REJECT --reject-with icmp-port-unreachable
 -A f2b-apache -j RETURN
 -A f2b-apache -j RETURN
+-A f2b-apache -j RETURN
+-A f2b-apache-modsecurity -j RETURN
 -A f2b-apache-modsecurity -j RETURN
 -A f2b-apache-modsecurity -j RETURN
 -A f2b-apache-nohome -j RETURN
 -A f2b-apache-nohome -j RETURN
+-A f2b-apache-nohome -j RETURN
+-A f2b-apache-noscript -j RETURN
 -A f2b-apache-noscript -j RETURN
 -A f2b-apache-noscript -j RETURN
 -A f2b-apache-overflows -j RETURN
 -A f2b-apache-overflows -j RETURN
+-A f2b-apache-overflows -j RETURN
+-A f2b-postfix -j RETURN
 -A f2b-postfix -j RETURN
 -A f2b-postfix -j RETURN
+-A f2b-ssh -s 58.242.83.38/32 -j REJECT --reject-with icmp-port-unreachable
+-A f2b-ssh -s 34.220.15.156/32 -j REJECT --reject-with icmp-port-unreachable
+-A f2b-ssh -s 40.73.0.32/32 -j REJECT --reject-with icmp-port-unreachable
+-A f2b-ssh -s 132.232.18.180/32 -j REJECT --reject-with icmp-port-unreachable
+-A f2b-ssh -s 160.120.130.219/32 -j REJECT --reject-with icmp-port-unreachable
+-A f2b-ssh -s 119.29.197.54/32 -j REJECT --reject-with icmp-port-unreachable
+-A f2b-ssh -s 91.234.24.6/32 -j REJECT --reject-with icmp-port-unreachable
+-A f2b-ssh -s 45.55.20.128/32 -j REJECT --reject-with icmp-port-unreachable
+-A f2b-ssh -s 212.64.0.80/32 -j REJECT --reject-with icmp-port-unreachable
 -A f2b-ssh -s 58.242.83.8/32 -j REJECT --reject-with icmp-port-unreachable
 -A f2b-ssh -j RETURN
 -A f2b-ssh -j RETURN
+-A f2b-ssh -j RETURN
+-A f2b-sshd -j RETURN
 -A f2b-sshd -j RETURN
 -A f2b-sshd -j RETURN
 -A icinga2 -s 185.102.95.107/32 -j ACCEPT
@@ -71,4 +88,4 @@
 -A rejects -p tcp -m tcp --dport 5060 -j REJECT --reject-with icmp-port-unreachable
 -A rejects -p tcp -m tcp --dport 8080 -j REJECT --reject-with icmp-port-unreachable
 COMMIT
-# Completed on Sat Aug 25 13:28:10 2018
+# Completed on Tue Jan 29 22:32:37 2019

diff --git a/iptables/rules.v6 b/iptables/rules.v6
index 4945fadf74e8eb06f39d448752c3355f304f8e0c..44f8416439b31500dafeb45d58b7e49f2aac9fa2 100644 (file)
--- a/iptables/rules.v6
+++ b/iptables/rules.v6
@@ -1,8 +1,8 @@
-# Generated by ip6tables-save v1.6.0 on Sat Aug 25 13:28:10 2018
+# Generated by ip6tables-save v1.6.0 on Tue Jan 29 22:32:37 2019
 *filter
 :INPUT ACCEPT [0:0]
 :FORWARD ACCEPT [0:0]
-:OUTPUT ACCEPT [3133:1530061]
+:OUTPUT ACCEPT [56683:24592992]
 -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT
 -A INPUT -m conntrack --ctstate RELATED -j ACCEPT
 -A INPUT -p ipv6-icmp -j ACCEPT
@@ -25,4 +25,4 @@
 -A FORWARD -j NFLOG --nflog-prefix  "IPv6 FORWARD Reject " --nflog-threshold 1
 -A FORWARD -j REJECT --reject-with icmp6-port-unreachable
 COMMIT
-# Completed on Sat Aug 25 13:28:10 2018
+# Completed on Tue Jan 29 22:32:37 2019