Home | History | Annotate | Download | only in bin
History log of /src/external/bsd/blocklist/bin/blocklistd.conf.5
RevisionDateAuthorComments
 1.9  13-Jan-2026  christos remove dup info
 1.8  13-Jan-2026  christos the address is optional, the port is mandatory.
 1.7  11-Feb-2025  christos Fold long line (Hans Rosenfeld)
 1.6  05-Feb-2025  christos PR/20: robohack:

BLOCKLIST_BAD_USER (BL_BADUSER internally) was actually unimplemented
and as such unusable, and despite being documented as such it still
gained some users and has lead to confusion.

This change proposes that it be implemented as a failure with a count of
one for "nfails".

To provide a meaningful distinction BLOCKLIST_AUTH_FAIL is also now
be implemented with a count of two for "nfails" -- which seems
appropriate as an "authentication failure" sounds, to my ear at least,
as something more important than a "bad user" failure.

This allows for "bad user" reports (which, say in the case of sshd,
could be caused by a legitimate user making a typo) to be recorded as
failures, but perhaps not to immediately cause them to be locked
out (depending on the current configuration of course).

I think "invalid" should probably have been used here instead of "bad",
but that would now be an API change, as opposed to a minor usage change
and improvement.

BTW, I think the hinted at concept of the blocklist daemon having a list
of disallowed users is not a viable way to go -- it violates the
possibility that several different client daemons might have differing
concepts and policies about whether attempts to use a given username is
really violating some rule. Also we shouldn't conflate the concept of
"username" here with local Unix user names, as they may not be related
at all.
 1.5  05-Feb-2025  christos PR/18: robohack: use duration, not disable
 1.4  03-Feb-2025  christos remove obsolete class C reference (Ed Maste)
 1.3  09-Feb-2024  wiz branches: 1.3.2;
add an IPv6 example to blocklistd.conf(5)
 1.2  15-Jun-2020  christos branches: 1.2.6;
missed the capitalized ones.
 1.1  15-Jun-2020  christos branches: 1.1.1;
Initial revision
 1.1.1.1  15-Jun-2020  christos Import blocklist from https://github.com/zoulasc/blocklist.
This is the same code as blacklist from the HEAD of the NetBSD tree.
 1.2.6.1  17-Feb-2024  martin Pull up following revision(s) (requested by markd in ticket #591):

external/bsd/blocklist/bin/blocklistd.conf.5: revision 1.3
external/bsd/blocklist/bin/conf.c: revision 1.4
external/bsd/blocklist/bin/conf.c: revision 1.5
external/bsd/blocklist/bin/conf.c: revision 1.6
external/bsd/blocklist/etc/blocklistd.conf: revision 1.3

PR/57905: Mark Davies: blocklistd fails to parse ipv6 addresses.
fix typo

PR/57905: Mark Davies: handle empty string.

add an IPv6 example to blocklistd.conf(5)

add an IPv6 example to blocklistd.conf example file
 1.3.2.1  02-Aug-2025  perseant Sync with HEAD

RSS XML Feed