瀏覽代碼

Update 0.1.9.md

Stefan Pejcic 1 年之前
父節點
當前提交
350058523f
共有 1 個文件被更改,包括 37 次插入1 次删除
  1. 37 1
      documentation/docs/changelog/0.1.9.md

+ 37 - 1
documentation/docs/changelog/0.1.9.md

@@ -9,7 +9,8 @@ Not yet released.
 
 
 ### 🚀 New features
-- OpenAdmin Notifications Center is now using [Sentinel AI](https://github.com/stefanpejcic/Sentinel/tree/main) service
+- OpenAdmin Notifications Center is now using [Sentinel](https://github.com/stefanpejcic/Sentinel/tree/main) service
+- [IPset Blacklists for UFW](#ipset-blacklists)
 - [OpenPanel FTP - FTP module for OpenPanel (**BETA**)](https://github.com/stefanpejcic/OpenPanel-FTP/)
 - [OpenMail - Emails module for OpenPanel (**BETA**)](https://github.com/stefanpejcic/OpenMail/)
 - [`opencli faq` command to show frequently asked questions](#opencli-faq)
@@ -27,6 +28,41 @@ Not yet released.
 - 
 
 
+## IPset Blacklists
+
+OpenAdmin Firewall now allows Administrators to add blacklists and block all IP addresses from them. 
+
+This feature uses [ipset-blacklist service](https://github.com/stefanpejcic/ipset-blacklist) to automatically fetch ip addresses from configured blacklists and modify UFW.
+
+![ipset-blacklist](https://i.postimg.cc/4xN3Qxvy/image.png)
+
+New opencli commands are also available:
+
+- Download new IP addresses for all enabled blocklists:
+  ```bash
+  opencli blacklist --fetch
+  ```
+- Update all ipsets rules and reload UFW service:
+  ```bash
+  bash /usr/ipset-blacklist.sh --update_ufw
+  ```
+- Add a new blacklist:
+  ```bash
+  bash /usr/ipset-blacklist.sh --add-blacklist name=<name> url=<url>
+  ```
+- Enable a blacklist:
+  ```bash
+  bash /usr/ipset-blacklist.sh --enable-blacklist=<name>
+  ```
+- Disable a blacklist:
+  ```bash
+  bash /usr/ipset-blacklist.sh --disable-blacklist=<name>
+  ```
+- Delete a blacklist:
+  ```bash
+  bash /usr/ipset-blacklist.sh --delete-blacklist=<name>
+  ```
+
 ### opencli faq
 
 OpenCLI now has a new command `opencli faq` to display most frequently asked questions: