phobos.autonlab.org daily insecurity output

[Charlie Root]

Running security(8):

======
/etc/pf.conf diffs (-OLD  +NEW)
======
--- /var/backups/etc_pf.conf.current	Sat May 30 01:35:34 2020
+++ /etc/pf.conf	Sat Sep 19 00:43:41 2020
@@ -13,8 +13,8 @@
 table <bruteforce> persist
 table <sshguard> persist
 
-tcp_services = "{ssh, http, https, submission, 8080, 30041}"
-tcp_services_int = "{ssh, http, https, submission, ldap, rsync\
+tcp_services = "{domain, ssh, http, https, submission, 8080, 30041}"
+tcp_services_int = "{domain, ssh, http, https, submission, ldap, rsync\
     111, 2049, 4000, 4001, 4002, 7000, 7001, 7002, 3690, 8080, 30041, 2222, 2223}"
 udp_services = "{domain, ntp}"
 udp_services_int = "{domain, ntp, snmp, syslog, 111, 2049, 25826}"


======
/var/unbound/etc/unbound.conf diffs (-OLD  +NEW)
======
--- /var/backups/var_unbound_etc_unbound.conf.current	Thu May 30 01:35:41 2019
+++ /var/unbound/etc/unbound.conf	Sat Sep 19 00:44:40 2020
@@ -7,7 +7,7 @@
 	#interface: 127.0.0.1 at 5353	# listen on alternative port
 	interface: ::1
 	do-ip6: no
-	do-tcp: no
+	do-tcp: yes
 
 	# override the default "any" address to send queries; if multiple
 	# addresses are available, they are used randomly to counter spoofing