lock.autonlab.org daily insecurity output

[Charlie Root]

Running security(8):

======
/etc/pf.conf diffs (-OLD  +NEW)
======
--- /var/backups/etc_pf.conf.current	Mon Aug 17 01:38:21 2020
+++ /etc/pf.conf	Sat Sep 19 00:52:43 2020
@@ -14,8 +14,8 @@
 table <sshguard> persist
 
 
-tcp_services = "{ssh, http, https, submission, 30041, 8080}"
-tcp_services_dmz = "{http, https, submission, 8080}"
+tcp_services = "{domain, ssh, http, https, submission, 30041, 8080}"
+tcp_services_dmz = "{domain, http, https, submission, 8080}"
 udp_services = "{domain, ntp}"
 udp_services_dmz = "{domain, ntp, snmp, syslog, 25826}"
 


======
/var/unbound/etc/unbound.conf diffs (-OLD  +NEW)
======
--- /var/backups/var_unbound_etc_unbound.conf.current	Thu May  2 01:37:48 2019
+++ /var/unbound/etc/unbound.conf	Sat Sep 19 00:53:14 2020
@@ -6,7 +6,7 @@
 	#interface: 127.0.0.1 at 5353	# listen on alternative port
 	interface: ::1
 	do-ip6: no
-	do-tcp: no
+	do-tcp: yes
 
 	# override the default "any" address to send queries; if multiple
 	# addresses are available, they are used randomly to counter spoofing