security/maltrail: add hostheader checking (#3144)

This commit is contained in:
Michael
2022-10-12 09:15:10 +02:00
committed by GitHub
parent 62761a1875
commit cdf3620972
5 changed files with 21 additions and 3 deletions
+1 -2
View File
@@ -1,6 +1,5 @@
PLUGIN_NAME= maltrail
PLUGIN_VERSION= 1.9
PLUGIN_REVISION= 1
PLUGIN_VERSION= 1.10
PLUGIN_COMMENT= Malicious traffic detection system
PLUGIN_DEPENDS= maltrail
PLUGIN_MAINTAINER= m.muenz@gmail.com
+4
View File
@@ -11,6 +11,10 @@ WWW: https://github.com/stamparm/maltrail
Changelog
---------
1.10
* Add CHECK_HOST_DOMAINS option
1.9
* Remove MFS support for /var/log/
@@ -5,6 +5,12 @@
<type>checkbox</type>
<help>Whether to enable or disable the usage or heuristic detection.</help>
</field>
<field>
<id>general.checkhostheader</id>
<label>Check Hostheaders</label>
<type>checkbox</type>
<help>Check values in Host header (along with standard non-HTTP checks) for malicious DNS trails.</help>
</field>
<field>
<id>general.updateperiod</id>
<label>Update Period</label>
@@ -1,12 +1,16 @@
<model>
<mount>//OPNsense/maltrail/general</mount>
<description>Maltrail general configuration</description>
<version>0.0.1</version>
<version>0.0.2</version>
<items>
<heuristics type="BooleanField">
<default>1</default>
<Required>Y</Required>
</heuristics>
<checkhostheader type="BooleanField">
<default>0</default>
<Required>Y</Required>
</checkhostheader>
<updateperiod type="IntegerField">
<default>86400</default>
<Required>Y</Required>
@@ -48,6 +48,11 @@ USE_HEURISTICS true
{% else %}
USE_HEURISTICS false
{% endif %}
{% if helpers.exists('OPNsense.maltrail.general.checkhostheader') and OPNsense.maltrail.general.checkhostheader == '1' %}
CHECK_HOST_DOMAINS true
{% else %}
CHECK_HOST_DOMAINS false
{% endif %}
CHECK_MISSING_HOST false
{% if helpers.exists('OPNsense.maltrail.general.whitelist') and OPNsense.maltrail.general.whitelist != '' %}
USER_WHITELIST /usr/local/share/maltrail/misc/user_whitelist.txt