areas.autonlab.org daily insecurity output

Charlie Root auton.sysnotify at gmail.com
Sat Sep 19 01:35:30 EDT 2020


Running security(8):

======
/etc/pf.conf diffs (-OLD  +NEW)
======
--- /var/backups/etc_pf.conf.current	Wed Aug 19 01:35:28 2020
+++ /etc/pf.conf	Sat Sep 19 00:48:07 2020
@@ -12,8 +12,8 @@
 table <bruteforce> persist
 table <sshguard> persist
 
-tcp_services = "{ssh, http, https, submission, 8080, 30041}"
-tcp_services_int = "{ssh, http, https, submission, ldap, rsync\
+tcp_services = "{domain, ssh, http, https, submission, 8080, 30041}"
+tcp_services_int = "{domain, ssh, http, https, submission, ldap, rsync\
     111, 2049, 4000, 4001, 4002, 7000, 7001, 7002, 3690, 8080, 30041, 2222}"
 udp_services = "{domain, ntp}"
 udp_services_int = "{domain, ntp, snmp, syslog, 111, 2049, 25826}"


======
/var/unbound/etc/unbound.conf diffs (-OLD  +NEW)
======
--- /var/backups/var_unbound_etc_unbound.conf.current	Fri May 31 01:34:55 2019
+++ /var/unbound/etc/unbound.conf	Sat Sep 19 00:48:58 2020
@@ -7,7 +7,7 @@
 	#interface: 127.0.0.1 at 5353	# listen on alternative port
 	interface: ::1
 	do-ip6: no
-	do-tcp: no
+	do-tcp: yes
 
 	# override the default "any" address to send queries; if multiple
 	# addresses are available, they are used randomly to counter spoofing



More information about the Autonlab-sysinfo mailing list