- gestione dalla GUI
Attraverso l’ interfaccia grafica è possibile avere accesso a molte delle features, anche se le operazioni più importanti dovranno essere trattate con i giusti permessi, pertanto è consigliato l’uso di sudo e a seconda del DE/WM i vari tool dedicati come kdesudo.
All the people love QT4 🙂
- gestione da terminale
Da terminale è possibile eseguire diversi comandi per la gestione :
| pglcmd start | inserts iptables rules and starts pgld. If the blocklist configuration changed, rebuild the master blocklist. |
| pglcmd stop | deletes iptables rules and stops pgld. |
| pglcmd restart | restarts pgl. |
| pglcmd reload | rebuilds the master blocklist and reload pgld if it is running. |
| pglcmd update | updates the blocklists, rebuilds the master blocklist and reloads pgld. |
| pglcmd status | gives the iptables settings and the status of pgld. |
| pglcmd test | does a simple test to check if pgl is working (pings a random IP in the blocklist and checks if this IP was logged in the pgld logfile and if it answered). |
| pglcmd search PATTERN | outputs the occurences of a keyword PATTERN and the names of the single blocklists. Use this to find out which blocklist caused an IP to be blocked. |
| pglcmd stats | reports pgld’s statistics |
| pglcmd reset_stats | resets pgld’s statistics |
| show_config | shows the current configuration settings. |
Da eseguire con i giusti permessi di root o con sudo, anche se alcuni comandi rispondono con i soli permessi dell’ utente ma con output ridotti.
- comandi utili
Da terminale è possibile consultare i log per visualizzare l’attuale lista di IP’s bloccati
tail -f /var/log/pgl/pgld.log
Oppure verificare l’aggiornamento della lista
tail -f /var/log/pgl/pglcmd.log
- Nofiica via mail
Se è in funzione un servizio MTA sulla macchina in oggetto è possibile ricevere due (2) mail di notifica, una riferita agli indirizzi IP bloccati e un’altra riferita all’aggiornamento delle liste automatico.
Questo avviene secondo tempi prestabiliti se è attivo cron, oppure quando le operazioni vengono eseguite manualmente (stop e update).
Aggiornamento liste (pglcmd update o cron)
"Updating blocklists and reloading PeerGuardian Linux: pgld. The following lists were updated: bluetack_bad-peers (last modified: 2014-03-05 04:07) bluetack_edu (last modified: 2014-03-05 04:06) bluetack_level1 (last modified: 2014-03-05 04:06) bluetack_level2 (last modified: 2014-03-05 04:06) bluetack_level3 (last modified: 2014-03-05 04:06) bluetack_microsoft (last modified: 2014-03-05 04:07) bluetack_proxy (last modified: 2014-03-05 04:06) bluetack_spider (last modified: 2014-03-05 04:07) bluetack_spyware (last modified: 2014-03-05 04:06) bluetack_web-exploit (last modified: 2014-03-05 04:07) bluetack_webexploit-forumspam (last modified: 2014-03-05 04:20) dchubad_faker (last modified: 2014-03-05 04:20) dchubad_pedophiles (last modified: 2014-03-05 04:09) dchubad_spammer (last modified: 2014-03-05 04:12) spamhaus_drop (last modified: 2014-03-04 12:48) tbg_bogon (last modified: 2014-03-04 07:02) tbg_business-isps (last modified: 2014-03-04 06:48) tbg_general-corporate-ranges (last modified: 2014-03-04 06:52) tbg_hijacked (last modified: 2014-03-04 07:04) tbg_primary-threats (last modified: 2014-03-04 06:58) ci_army_malicious (last modified: 2014-03-05 04:10) For the following lists there was no update available: atma_atma (last modified: 2012-06-22 05:20) dchubad_hacker (last modified: 2014-03-04 04:08) tbg_search-engines (last modified: 2014-01-14 02:17)"
Lista IP’s bloccati (pglcmd stop o cron)
Mar 5 07:35:10 STATS: Blocked hit statistics: Mar 5 07:35:10 STATS: 1.8.0.0-1.10.9.255: KNET Technology BeiJing Co., Ltd | Telekom Malaysia Berhad - 15 hit(s) Mar 5 07:35:10 STATS: 1.160.0.0-1.175.255.255: Chunghwa Telecom | Chunghwa Telecompossible BayTSP | Tor | Proxy - 7 hit(s) Mar 5 07:35:10 STATS: 1.178.0.0-1.185.255.255: iseek Communications Pty Ltd | TOT Public Company | Malicious - 1 hit(s) Mar 5 07:35:10 STATS: 1.188.0.0-1.207.255.255: China Unicom Heilongjiang province network | Vibo Telecom Inc. - 23 hit(s) Mar 5 07:35:10 STATS: 2.36.0.0-2.37.255.255: Vodafone Italy business customers | Vodafone Omnitel kad viruses - 7 hit(s) Mar 5 07:35:10 STATS: 2.111.192.0-2.119.255.255: TDC AS | TDC Bredbaand Professionel users | Telecom Italia S.p. - 2 hit(s) Mar 5 07:35:10 STATS: 2.132.0.0-2.135.255.255: JSC Kazakhtelecom | Samsung Engineering | GU Depart. Justice U - 4 hit(s) Mar 5 07:35:10 STATS: 2.176.0.0-2.199.255.255: Information Technology Company ITC | anti-p2p activity | Tor - 5 hit(s) Mar 5 07:35:10 STATS: 2.219.0.0-2.219.255.255: Sky Broadbandsuspicious p2p activity | Tor - 1 hit(s) Mar 5 07:35:10 STATS: 2.228.0.0-2.229.127.255: Fastweb | Mediamarket S.p.A | MARKETING TREND public subnet - 2 hit(s) Mar 5 07:35:10 STATS: 2.249.192.0-5.0.255.255: TeliaSonera AB | General Electric Company | Level 3 Communicati - 2 hit(s) Mar 5 07:35:10 STATS: 5.8.248.0-5.9.255.255: Hungarian Datacenter Services Kft. | Hetzner Online AG | Tor | - 4 hit(s) Mar 5 07:35:10 STATS: 5.96.0.0-5.99.255.255: Telecom Italia Business | Telecom Italia S.p.a. | ATOS S.P.A. - 2 hit(s) Mar 5 07:35:10 STATS: 5.149.208.0-5.149.223.255: Lancom Ltd. - 1 hit(s) Mar 5 07:35:10 STATS: 14.102.144.0-14.128.11.255: IP ServerOne Solutions Sdn Bhd | PT Skyline Semesta | Bogon - 20 hit(s) Mar 5 07:35:10 STATS: 14.139.0.0-14.192.71.255: National Knowledge Network NKN | 100 MBPS RAILTEL LINK TO FRC, - 40 hit(s) Mar 5 07:35:10 STATS: 14.194.0.0-14.200.103.255: Tata Teleservices Limited - GSM mobile | Proxy - 36 hit(s) Mar 5 07:35:10 STATS: 23.19.0.0-23.19.255.255: Ubiquity Server Solutions Los Angeles | Wilson, Ryan | Privax L - 2 hit(s) Mar 5 07:35:10 STATS: 27.8.0.0-27.32.48.255: China Unicom Chongqing Province Network | Proxy - 20 hit(s) Mar 5 07:35:10 STATS: 27.184.0.0-27.231.255.255: CHINANET hebei province network | CHINANETanti-p2p activity - 1 hit(s)
etc....
- FAQ
A molte delle domande che non hanno avuto un chiarimento dopo la lettura di questo articolo è possibile cercare di dare ua soluzione consultando le FAQ direttamente a questo link : FAQ
PUPPA 🙂 ASINO CHI LEGGE
Piccolo tributo a chi è riuscito ad arrivare fino a qui :
Secnodo un pfrosseore dlel’Unviesrita’ di Cmabrdige, non imorpta in che oridne apapaino le letetre in una paolra, l’uinca csoa imnorptate e’ che la pimra e la ulimta letetra sinao nel ptoso gituso. Il riustlato può serbmare mloto cnofsuo e noonstatne ttuto si puo’ legerge sezna mloti prleobmi. Qesuto si dvee al ftato che la mtene uanma non lgege ongi ltetera una ad una, ma la paolra nel suo isineme. Cuorsio, no?
Ed ora in Inglese :
Aoccdrnig to rscheearch at an Elingsh uinervtisy, it deosn’t mttaer in waht oredr the ltteers in a wrod are, the olny iprmoetnt tihng is taht the frist and lsat ltteer are in the rghit pclae. The rset can be a toatl mses and you can sitll raed it wouthit a porbelm. Tihs is bcuseae we do not raed ervey lteter by it slef but the wrod as a wlohe and the biran fguiers it out aynawy.