| Port details |
- bruteblock Software for blocking bruteforce attacks with ipfw
- 0.0.6 security
 =6      0.0.5_11Version of this port present on the latest quarterly branch. - Maintainer: samm@FreeBSD.org
- Port Added: 2006-08-17 08:28:03
- Last Update: 2024-12-23 20:46:03
- Commit Hash: 2c08f19
- People watching this port, also watch:: pcre, libxml2, p5-libwww, unzip, expat
- License: BSD3CLAUSE
- WWW:
- https://samm.kiev.ua/bruteblock/
- Description:
- Bruteblock allows system administrators to block various bruteforce
attacks on UNIX services. The program analyzes system logs and adds
attacker's IP address into ipfw2 table effectively blocking them.
Addresses are automatically removed from the table after specified
amount of time. Bruteblock uses regular expressions to parse logs,
which provides flexibility allowing it to be used with almost any
network service. Bruteblock is written in pure C, doesn't use any
external programs and work with ipfw2 tables via raw sockets API.
  ¦  ¦  ¦  ¦ 
- Manual pages:
- FreshPorts has no man page information for this port.
- pkg-plist: as obtained via:
make generate-plist - Dependency lines:
-
- bruteblock>0:security/bruteblock
- To install the port:
- cd /usr/ports/security/bruteblock/ && make install clean
- To add the package, run one of these commands:
- pkg install security/bruteblock
- pkg install bruteblock
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.- PKGNAME: bruteblock
- Flavors: there is no flavor information for this port.
- distinfo:
- TIMESTAMP = 1731881673
SHA256 (samm-git-bruteblock-v0.0.6_GH0.tar.gz) = f13df4444c9686ff109e1fadaa62e95608630c0284e57bcad27f0528e3bcf51a
SIZE (samm-git-bruteblock-v0.0.6_GH0.tar.gz) = 24665
Packages (timestamps in pop-ups are UTC):
- Dependencies
- NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
- Library dependencies:
-
- libpcre2-8.so : devel/pcre2
- There are no ports dependent upon this port
Configuration Options:- ===> The following configuration options are available for bruteblock-0.0.6:
DOCS=on: Build and/or install documentation
===> Use 'make config' to modify these settings
- Options name:
- security_bruteblock
- pkg-message:
- For install:
- Configuration of the bruteblock is done via configuration files
located at /usr/local/etc/bruteblock.
To run the script, append following lines to /etc/syslog.conf:
!*
auth.info;authpriv.info |exec /usr/local/sbin/bruteblock -f /usr/local/etc/bruteblock/ssh.conf
and restart syslogd.
Also you should add ipfw2 table and the corresponding deny rule.
For example,
ipfw add deny ip from table(1) to any
Next, you'll want to setup periodical cleanup of ipfw2 table.
Add following lines to /etc/rc.conf:
bruteblockd_enable="YES"
bruteblockd_table="1"
bruteblockd_flags="-s 5"
and start bruteblockd:
service bruteblockd start
See bruteblock(8) for more details.
- Master Sites:
|
| Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
| Commit | Credits | Log message |
|---|
0.0.6
23 Dec 2024 20:46:03
 |
Dmitry Marakasov (amdmi3) |
security/bruteblock: whitespace fix
Approved by: portmgr blanket |
0.0.6
21 Dec 2024 12:11:23
|
Oleksii Samorukov (samm) |
security/bruteblock: update to 0.0.6
- use pcre2 instead of pcre
- integrate patches from the port
- take maintainership
PR: 282821 |
0.0.5_11
10 Jan 2024 15:29:49
|
Baptiste Daroussin (bapt) |
MAN?PREFIX: eleminate its usage and move man to share/man |
07 Sep 2022 21:58:51
|
Stefan Eßer (se) |
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner) |
0.0.5_10
07 Sep 2022 21:10:59
|
Stefan Eßer (se) |
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above  ) |
0.0.5_10
30 Aug 2022 18:55:08
|
Dmitry Marakasov (amdmi3) |
security/bruteblock: renovate
- Update URLs
- Reformat pkg-message and fix service start command [1]
- Add LICENSE
- Switch to options helpers
- Fix manpage location
- Silence mkdirs
Submitted by: Elvin Aslanov [1]
GitHub: fixes #129 |
0.0.5_9
31 May 2022 11:21:41
|
Dmitry Marakasov (amdmi3) |
security/bruteblock: update manpage location |
0.0.5_9
07 Apr 2021 23:19:01
|
Dmitry Marakasov (amdmi3) |
Remove useless Created by: headers mentioning me |
0.0.5_9
06 Apr 2021 14:31:13
|
Mathieu Arnold (mat) |
all: Remove all other $FreeBSD keywords. |
0.0.5_9
06 Apr 2021 14:31:07
|
Mathieu Arnold (mat) |
Remove # $FreeBSD$ from Makefiles. |
0.0.5_9
14 Aug 2019 12:16:13
 |
mat |
Convert to UCL & cleanup pkg-message (categories s) |
0.0.5_9
05 May 2018 14:20:33
|
danfe |
For ports in `security' category: remove redundant PKGMESSAGE assignment,
which is set appropriately by the b.p.m when `pkg-message' appears on the
SUB_FILES list. |
0.0.5_9
19 May 2016 11:09:14
|
amdmi3 |
- Fix trailing whitespace in pkg-messages
Approved by: portmgr blanket |
0.0.5_9
01 Apr 2016 14:25:18
|
mat |
Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.
With hat: portmgr
Sponsored by: Absolight |
0.0.5_9
27 Sep 2015 22:33:22
|
amdmi3 |
- Switch to @sample |
0.0.5_9
10 Apr 2015 12:10:25
|
amdmi3 |
- Start before syslogd
This is needed as bruteblock (not to be confused with bruteblockd)
which is usually run from syslog, also requires ldconfig, and bruteblockd
rc.d script provides it for him by depending on ldconfig and running
before syslogd
PR: 199263 |
0.0.5_8
10 Apr 2015 11:59:01
|
amdmi3 |
- Fix boottime startup by requiring ldconfig in rc.d script
PR: 199263
Submitted by: fesse@mail.ru |
0.0.5_7
09 Apr 2015 01:04:55
|
amdmi3 |
- Fix printing time_t on i386
PR: 199263
Submitted by: fesse@mail.ru |
0.0.5_6
15 Oct 2014 20:28:48
|
amdmi3 |
- Fix regex to match all sshd auth errors
PR: 194382
Submitted by: ronald-lists@klop.ws
MFH: 2014Q4 |
0.0.5_5
15 Oct 2014 20:27:29
|
amdmi3 |
- Fix rule reset time on arm
PR: 194381
Submitted by: ronald-lists@klop.ws
MFH: 2014Q4 |
0.0.5_4
22 Sep 2014 15:08:02
|
amdmi3 |
- Drop @dirrm* from plist |
0.0.5_4
20 Jan 2014 14:28:03
|
amdmi3 |
- Support staging
- Use new LIB_DEPENDS syntax |
0.0.5_4
20 Sep 2013 22:55:26
|
bapt |
Add NO_STAGE all over the place in preparation for the staging support (cat:
security) |
0.0.5_4
14 Aug 2013 22:35:54
 |
ak |
- Remove MAKE_JOBS_SAFE variable
Approved by: portmgr (bdrewery) |
0.0.5_4
12 Jul 2013 15:01:46
|
amdmi3 |
- Trim Makefile headers
- Drop ABI versions from LIB_DEPENDS
- OptionsNG
- Pet portlint
- Switch to dynamic plist where useful
- Canonicalize patch names
- Fix DOS line endings in patch files |
0.0.5_4
23 May 2013 02:04:46
|
amdmi3 |
- Trim Makefile header
- OptionsNG |
0.0.5_4
10 Dec 2012 19:11:12
|
mm |
Update PCRE to 8.32
Introduces the UTF-32 library pcre32
Bump PORTREVISION in dependent ports |
0.0.5_3
05 Aug 2012 23:19:40
|
dougb |
Move the rc.d scripts of the form *.sh.in to *.in
Where necessary add $FreeBSD$ to the file
No PORTREVISION bump necessary because this is a no-op |
0.0.5_3
14 Feb 2012 12:45:35
|
mm |
Bump pcre library dependency due to 8.30 update |
0.0.5_2
14 Jan 2012 08:57:23
|
dougb |
In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other. |
0.0.5_2
03 Jul 2011 14:03:52
|
ohauer |
-remove MD5 |
0.0.5_2
05 Aug 2010 15:09:48
|
amdmi3 |
- Fix typo in pkg-message
PR: 149326
Submitted by: pluknet <pluknet@gmail.com> |
0.0.5_2
27 Mar 2010 00:15:24
|
dougb |
Begin the process of deprecating sysutils/rc_subr by
s#. %%RC_SUBR%%#. /etc/rc.subr# |
0.0.5_2
19 Oct 2009 11:40:58
|
amdmi3 |
- Update regexps for newer sh versions
PR: 139545 (partially)
Submitted by: Dmitry Morozovsky <marck@freebsd.org> |
0.0.5_1
28 Jul 2009 16:34:36
|
amdmi3 |
- Update URL of my distfile mirror in 87 ports
Approved by: portmgr (erwin) |
0.0.5_1
24 Mar 2009 19:28:37
|
amdmi3 |
- Fix build with -j, mark MAKE_JOBS_SAFE |
0.0.5_1
05 Jan 2009 16:14:51
|
amdmi3 |
- Update address of my distfile mirror |
0.0.5_1
09 Nov 2008 18:55:49
|
amdmi3 |
- Remove obsolete 5.x condition |
0.0.5_1
19 Jun 2008 17:28:24
|
amdmi3 |
Update my email address in 132 ports.
Approved by: miwi (mentor) |
0.0.5_1
06 Mar 2007 19:43:28
|
miwi |
- Fix build problemes
- Bump PORTREVISION
PR: 110000 \o/
Submitted by: Roger Gujord<roger@gujord.com>
Approved by: maintainer |
0.0.5
21 Dec 2006 20:41:33
|
edwin |
[MAINTAINER] update my email address in 76 ports + mirror some distfiles
I've got a brand new hosting, so change my email to the new
one. Also, now I can mirror some distfiles, so update
MASTER_SITES for some ports.
PR: ports/107038
Submitted by: Dmitry Marakasov <amdmi3@mail.ru> |
0.0.5
07 Oct 2006 03:44:54
|
shaun |
Update pkg-message[.in] to clarify syslog configuration details.
PR: ports/104080
Submitted by: João Rocha Braga Filho <goffredo@gmail.com>
Approved by: Dmitry Marakasov <amdmi3@mail.ru> (maintainer) |
0.0.5
23 Aug 2006 10:47:15
|
rafan |
- Update to 0.0.5
PR: ports/102310 (based on)
Submitted by: Alex Samorukov <samm@os2.kiev.ua>
Approved by: Dmitry Marakasov <amdmi3@mail.ru> (maintainer) |
0.0.4
17 Aug 2006 08:27:13
|
rafan |
Add bruteblock 0.0.4, software for blocking bruteforce attacks with
ipfw.
PR: ports/101254
Submitted by: Dmitry Marakasov <amdmi3 at mail.ru> |
As an Amazon Associate I earn from qualifying purchases.