YAFPC-Appliance
The ultimate Network PDF Server Appliance



Welcome Guest
Username:

Password:




Remember me

[ ]
[ ]
[ ]

Link to us
click here to generate
a link for your website.

Tell a Friend
Your Name
Your Email
Name of your friend
Friends Email
Subject/Interest of this page ?
Copy of the email


Addons for Ipcop 1.4.15 only [ These Addons work only on Ipcop 1.4.15 !!! ]
Guardian for IPCop 1.4.15 v2.4.9.7
Author bebima
Author email [email]
Description ** 18.07.2007
** Corrected version of 2.4.9.6 ( don't use 2.4.9.6)
** Synchronisation of config with WebGUI and guardian.conf
** "country code" for RED
**
**
** ??.??.2007
** added flags for privat ip-adresses
**
** 26.04.2007
** adapted to Ipcop 1.4.15
** bebima
**
**
** 29.09.2006
** fixed bug with geo-ip and libpng on Ipcop 1.4.11
**

Dieser Mod liest das Snort-Alert-File aus und blockt z.B. Portscans automatisch.

Eine weitere Funktion ist, das man auch manuell Ipadressen blocken kann.

Entweder im Webinterface auf der Guardian-Seite eingeben oder auf der Verbindungs-Seite die Who-Is-Abfrage starten und am Ende der Who-is-Seite die Ip blocken.

Installation:

Die Datei auf dem Cop kopieren, mit

tar xfz guardian_ipcop_1.4.15_7.tar.gz

entpacken, ins guardian-Verzeichniss wechseln,

./install

aufrufen.

Dann im Webinterface unter Dienste ==> Guardian das rote Interface und die Blockzeit eintragen.
Alle anderen Einstellungen sollten nicht ver?ndert werden.

Danach im Webinterface unter Einbruchdetektierung den Guardian einschalten.

Unter Logs ==> guardianlog kann man nachschauen, welche Ips geblockt/freigegeben werden.

Die Möglichkeit, Ip's manuell zu blocken, besteht auch, wenn Guardian deaktiviert ist.

Deinstallation:

Einfach

/var/lipcop/guardian/bin/uninstall

aufrufen.



This mod reads the snort-alert-logfile and blocks e.g. portsscan automaticlly.

Another function of this mod is, that you could enter an ip in the webinterface and this ip will be blocked.

There is also a function in the connection-page of the webinterface to block ip's.
Just click the ip to show the who-is and at the end of the who-is-page there is a link to block the ip.

The manuall ip-blocking is working also if guardian is disabled.

Installation:

Copy the file to your ipcop, extract it with

tar xfz guardian_ipcop_1.4.15_7.tar.gz

Go into the guardian-directory and run

./install

After this, you have to go into the webinterface under services ==> guardian and set your red interface and the time, guardian should block ip's.
All other settings could be left in default state.

Now go to services ==> intrusion detection and enable guardian.

Under Logs ==> guardianlog you could see which ip is blocked/unblocked.

Uninstall:

Just run


/var/ipocp/guardian/bin/uninstall


License/Lizenz: GPL

MD5: 5b01514572bc2c3f4d4e78d53a37ba69

File check:
ee868a20fc1aade1b4bab59d9c1adf69 install
136990582036af234a70d5b2dfcbbbeb files.tar.gz

Image
Filesize 697.51 kB
Date Tuesday 19 June 2007 - 05:49:17
Downloads 2524
Download
Rating
 1.0 - 1 vote 
Report broken download

Comments
csMKJP |19 Jun 2007 : 07:21
Comments: 10
Registered: 26 Apr 2007 : 18:57
Menu ids.cgi dont work !

bebima |19 Jun 2007 : 14:15
Comments: 12
Registered: 04 Sep 2005 : 15:24Location: Mannheim
It works definitely!
See your PM or Mail!
_______________________________________________

Image: http://www.ipcop-forum.de/coptime/img/BeBiMa.pngImage: http://www.ipcop-forum.de/coptime/img/BeBiMa-02.png
Meine Amazon-Wunschliste/My amazon wish list

bebima |21 Jun 2007 : 10:23
Comments: 12
Registered: 04 Sep 2005 : 15:24Location: Mannheim
There may be a problem when installing guardian on a fresh install of IPCop 1.4.15!
File /etc/snort/vars MUST exist and contain at least
var RULES_LIST /etc/snort/ruleslist.conf

Please report per PM or EMail.
_______________________________________________

Image: http://www.ipcop-forum.de/coptime/img/BeBiMa.pngImage: http://www.ipcop-forum.de/coptime/img/BeBiMa-02.png
Meine Amazon-Wunschliste/My amazon wish list

Andreasx |29 Jul 2007 : 11:07
Comments: 1
Registered: 09 May 2007 : 11:43
This Version doesn' t work correctly with IPCop 1.4.16.
When will you release a new update? or yust give al little workaround?
This would bee nice!

THX



You must be logged in to make comments on this site - please log in, or if you are not registered click here to signup




support mhaddons !

Make a donation!

Donat-o-Meter Stats

2010´s Donations
 Name for Front Page  Jan 21  €100
    14  €0



I would like to thank pcengines
for the generous donation of a complete WRAP-machine.


Here is a list of people who have
donated to mhaddons so far.

Here you could read about the
advantage of being a donator.




Your Ip

Sign by Danasoft - For Backgrounds and Layouts


IT!works Systemhaus GmbH

Unser Name ist Programm!

  • SAP-Entwicklung
  • SAP-Beratung
  • EDV-Dienstleistungen
  • Softwareentwicklung
  • Netzwerk-Installation
  • PCs und Software