| History log of /src/external/bsd/blocklist/bin/blocklistd.conf.5 |
| Revision | | Date | Author | Comments |
| 1.9 |
| 13-Jan-2026 |
christos | remove dup info
|
| 1.8 |
| 13-Jan-2026 |
christos | the address is optional, the port is mandatory.
|
| 1.7 |
| 11-Feb-2025 |
christos | Fold long line (Hans Rosenfeld)
|
| 1.6 |
| 05-Feb-2025 |
christos | PR/20: robohack:
BLOCKLIST_BAD_USER (BL_BADUSER internally) was actually unimplemented and as such unusable, and despite being documented as such it still gained some users and has lead to confusion.
This change proposes that it be implemented as a failure with a count of one for "nfails".
To provide a meaningful distinction BLOCKLIST_AUTH_FAIL is also now be implemented with a count of two for "nfails" -- which seems appropriate as an "authentication failure" sounds, to my ear at least, as something more important than a "bad user" failure.
This allows for "bad user" reports (which, say in the case of sshd, could be caused by a legitimate user making a typo) to be recorded as failures, but perhaps not to immediately cause them to be locked out (depending on the current configuration of course).
I think "invalid" should probably have been used here instead of "bad", but that would now be an API change, as opposed to a minor usage change and improvement.
BTW, I think the hinted at concept of the blocklist daemon having a list of disallowed users is not a viable way to go -- it violates the possibility that several different client daemons might have differing concepts and policies about whether attempts to use a given username is really violating some rule. Also we shouldn't conflate the concept of "username" here with local Unix user names, as they may not be related at all.
|
| 1.5 |
| 05-Feb-2025 |
christos | PR/18: robohack: use duration, not disable
|
| 1.4 |
| 03-Feb-2025 |
christos | remove obsolete class C reference (Ed Maste)
|
| 1.3 |
| 09-Feb-2024 |
wiz | branches: 1.3.2; add an IPv6 example to blocklistd.conf(5)
|
| 1.2 |
| 15-Jun-2020 |
christos | branches: 1.2.6; missed the capitalized ones.
|
| 1.1 |
| 15-Jun-2020 |
christos | branches: 1.1.1; Initial revision
|
| 1.1.1.1 |
| 15-Jun-2020 |
christos | Import blocklist from https://github.com/zoulasc/blocklist. This is the same code as blacklist from the HEAD of the NetBSD tree.
|
| 1.2.6.1 |
| 17-Feb-2024 |
martin | Pull up following revision(s) (requested by markd in ticket #591):
external/bsd/blocklist/bin/blocklistd.conf.5: revision 1.3 external/bsd/blocklist/bin/conf.c: revision 1.4 external/bsd/blocklist/bin/conf.c: revision 1.5 external/bsd/blocklist/bin/conf.c: revision 1.6 external/bsd/blocklist/etc/blocklistd.conf: revision 1.3
PR/57905: Mark Davies: blocklistd fails to parse ipv6 addresses. fix typo
PR/57905: Mark Davies: handle empty string.
add an IPv6 example to blocklistd.conf(5)
add an IPv6 example to blocklistd.conf example file
|
| 1.3.2.1 |
| 02-Aug-2025 |
perseant | Sync with HEAD
|