Current status: Merging in the #FreeBSD #blocklistd CVE fix into the #HardenedBSD quarterly branches. I hope to kick off new builds by the end of the day today.

I'm also bringing in an additional commit or two in the src tree to fix some broken ports (looking at you, commit 8ef8c6abfadfc9eb0465ce57c6b09ca310415bdd).

Happy holidays everyone! I'm playing with FreeBSD today and managed to get a copy of my website running at https://bsd.kedara.eu It's powered by Caddy running in a (Bastille) jail, so far so good. I'm using blocklistd to block IPs that try to login via SSH using pf, this works great as well.

Now my question is: does anyone know how to combine blocklistd (or pf) with Caddy, so I can block abusive bots for instance?

Edit: to clarify, I'm wondering if there's a solution without the logfile parsing step that fail2ban uses. Like in sshd (it uses blocklistd directly); I'm not sure how that works exactly, though...

Any advice and boosts are appreciated.

#FreeBSD #Caddy #BastilleBSD #pf #blocklistd #BSD
Welcome to Kedara

a personal website by Ruben Verweij

Kedara.eu