New csf v8.00

Changes:

  • Added new option CC6_LOOKUPS. This adds IPv6 support for Country Code and Country lookups
  • Added new option LF_NETBLOCK_IPV6. This adds IPv6 support for LF_NETBLOCK
  • Modified LF_LOOKUPS to use the host binary if available for more reliable IPv4 and IPv6 reverse lookups
  • Added IPv6 support for LF_IPSET
  • Added IPv6 support for CC_DENY, CC_ALLOW, CC_ALLOW_FILTER, CC_ALLOW_PORTS, CC_DENY_PORTS, CC_IGNORE, CC_ALLOW_SMTPAUTH (Requires CC6_LOOKUPS and CC_LOOKUPS to be enabled)
  • Added IPv6 support for X_ARF report where found in the Abusix Contact DB
  • Added IPv6 nameserver support for /etc/resolv.conf
  • Added IPv6 support for MESSENGER if ip6tables version >= 1.4.17 and perl module IO::Socket::INET6 is installed
  • Added IPv6 support for PORTFLOOD if ip6tables version >= 1.4.3
  • Added IPv6 support for CONNLIMIT if ip6tables version >= 1.4.3
  • Added IPv6 support for SYNFLOOD
  • Added flush of ip6tables nat table if ip6tables version >= 1.4.17
  • Standardise all IPv6 addresses and networks to use the short form for consist representation
  • Added FASTSTART support to LF_IPSET
  • Increased ulimit -n to 4096 in /etc/init.d/lfd
  • Included Net::IP for IP address manipulation
  • Included version perl module for version comparisons
  • Added missing csf.allow search to csf –grep
  • Added Server Check report for LF_IPSET when using Country Code filters