Aegis aegis: a firewall blocklist

[D3FenD3r]

all right

 

[NetBytes]

Web based upgrade to 1.2.7 was flawless.
Same thought: The status page does not show me what version I am currently running.

 

[HELLO_wORLD]

Web based upgrade to 1.2.7 was flawless.
Same thought: The status page does not show me what version I am currently running.

Look top right of the screen ;-)

 

[NetBytes]

Look top right of the screen ;-)

TY - (you hid it, lol)

 

[Jauger]

R9000 upgrade here....had the 404 error but followed others fix.....up and running.............loving this new log layout. way more detail and updates on whats being blocked..should help with identifying false positives too.....thanks!

 

[D3FenD3r]

upgrade to version 1.2.8 .......ok


ps. is it possible to have the shell on the web page?

 

[HELLO_wORLD]

1.2.8 - corrected web 404 bug.
I had more time to look at the problem, test it and fix it.

@D3FenD3r : a web shell would be interesting, but not specific to aegis, and it is a big task by itself, so I leave that project to anyone who wants to do it.
At the same time, a web based shell would probably never beat a good ssh connexion, so why reinventing the wheel.
Personally, I try to have only elegant and easy to use interface to web.
Anything power user should be performed from shell.

 

[jrbmw]

Been trying to reinstall aegis since last night and keep getting this

root@R7800:/$
root@R7800:/$ wget -qO- https://github.com/bolemo/aegis/raw/master/aegis-install.sh | sh
Where do you want to install aegis?
0 - router internal memory (rootfs)
1 - external drive: /mnt/sda1
c - cancel installation
Your choice: 1

aegis will be installed on external drive /tmp/mnt/sda1
Creating directory (if not already existing): /opt/scripts
Creating directory (if not already existing): /tmp/mnt/sda1/bolemo
Creating symlink (if not already existing): /opt/bolemo
Creating subdirectories in bolemo: scripts, etc
Downloading and installing aegis...
Could not download aegis!
root@R7800:/$

 

[HELLO_wORLD]

Been trying to reinstall aegis since last night and keep getting this

root@R7800:/$
root@R7800:/$ wget -qO- https://github.com/bolemo/aegis/raw/master/aegis-install.sh | sh
Where do you want to install aegis?
0 - router internal memory (rootfs)
1 - external drive: /mnt/sda1
c - cancel installation
Your choice: 1

aegis will be installed on external drive /tmp/mnt/sda1
Creating directory (if not already existing): /opt/scripts
Creating directory (if not already existing): /tmp/mnt/sda1/bolemo
Creating symlink (if not already existing): /opt/bolemo
Creating subdirectories in bolemo: scripts, etc
Downloading and installing aegis...
Could not download aegis!
root@R7800:/$

Fixed, and a big thank you @jrbmw !
I have not done anything to the install script in months, so it was broken since June!!
The download process was broken.
Now it should work fine again.

 

[jrbmw]

Thanks @ HELLO_wORLD
All up and running now

 

[NetBytes]

This comes from love of your system and work: On the upgrade page i think you mean 'recommended'

 

[HELLO_wORLD]

This comes from love of your system and work: On the upgrade page i think you mean 'recommended'

Love received thank you.

Typo fixed. I did not increment a new version just for that, so you can simply reinstall Web Companion doing `aegis web -install`, or wait for the next upgrade.

 

[D3FenD3r]

put on the web page the possibility
to insert ip in aegis.custom-blacklist.netset?
just a proposal

 

[HELLO_wORLD]

put on the web page the possibility
to insert ip in aegis.custom-blacklist.netset?
just a proposal

Yes, the next step for Web Companion is definitely to manage sources, blacklist and whitelist.

By the way, custom blacklist is now:
/opt/bolemo/etc/aegis.blacklist

it’s in the readme, butI did not mention it here.

I am doing a post right now about that.

 

[HELLO_wORLD]

IMPORTANT INFO

Custom blacklist is now:
/opt/bolemo/etc/aegis.blacklist

And custom whitelist is now:
/opt/bolemo/etc/aegis.whitelist

So if you were using custom lists:
aegis.custom-blacklist.netset should be renamed aegis.blacklist
And
aegis.custom-whitelist.netset should be renamed aegis.whitelist

cd /opt/bolemo/etc/
[ -e aegis.custom-blacklist.netset ] && mv aegis.custom-blacklist.netset aegis.blacklist
[ -e aegis.custom-whitelist.netset ] && mv aegis.custom-whitelist.netset aegis.whitelist
aegis update -v

 

[KW.]

Thank you so much are working very good and looks really nice. You've made a top notch software thats for sure!

Just a thought: would be cool to be able to change name on some of the ipadresses of the devices that aegis stop traffic from. Like "my computer" "phone".

Just an idea, its great! Thanks @HELLO_wORLD

 

[HELLO_wORLD]

Yes, that would be nice.
I was thinking of that and have an idea about it (getting names from nvram device list or simply /tmp/dhcpd_hostlist).

Definitely in the TO DO list...

Thank you so much are working very good and looks really nice. You've made a top notch software thats for sure!

Just a thought: would be cool to be able to change name on some of the ipadresses of the devices that aegis stop traffic from. Like "my computer" "phone".

Just an idea, its great! Thanks @HELLO_wORLD

 

[HELLO_wORLD]

Continuation here: https://www.snbforums.com/threads/aegis-simple-yet-effective-protection.67351/