Subversion Repositories ALCASAR

Rev

Go to most recent revision | Hide changed files | Details | Compare with Previous | Blame

Filtering Options

Rev Age Author Path Log message Diff Changes
2488 2260 d 9 h lucas.echard /repos/alcasar/trunk/ Replace Apache with Lighttpd

Update fail2ban rules
Change web error management
Add a PEM certificate creation for Lighttpd
Replace htdigest Apache tool with a bash function in alcasar-profil.sh		  
/conf/lighttpd
/conf/lighttpd/conf.d
/conf/lighttpd/conf.d/fastcgi.conf
/conf/lighttpd/vhosts.d
/conf/lighttpd/vhosts.d/alcasar.conf
/web/errors
/web/errors/error-400.html
/web/errors/error-401.html
/web/errors/error-403.html
/web/errors/error-404.html
/web/errors/error-405.html
/web/errors/error-408.html
/web/errors/error-410.html
/web/errors/error-411.html
/web/errors/error-413.html
/web/errors/error-414.html
/web/errors/error-415.html
/web/errors/error-500.html
/web/errors/error-501.html
/web/errors/error-502.html
/web/errors/error-503.html
/web/errors/error-506.html
/web/images/footer_lighttpd.png
/web/js/error_translate.js
/web/js/i18n.js
/CHANGELOG
/alcasar.sh
/conf/fail2ban.sh
/scripts/alcasar-CA.sh
/scripts/alcasar-activity_report.sh
/scripts/alcasar-archive.sh
/scripts/alcasar-certificates.sh
/scripts/alcasar-conf.sh
/scripts/alcasar-daemon.sh
/scripts/alcasar-importcert.sh
/scripts/alcasar-profil.sh
/scripts/alcasar-uninstall.sh
/scripts/alcasar-urpmi.sh
/web/acc/about.htm
/web/acc/admin/services.php
/web/acc/haut.php
/web/acc/manager/htdocs/badusers.php
/web/acc/manager/lib/add_badusers.php
/web/acc/manager/lib/sql/drivers/mysql/functions.php
/web/acc/manager/lib/sql/nas_list.php
/web/acc/manager/lib/xlat.php
/web/acc/menu.php
2450 2342 d 2 h tom.houdayer /repos/alcasar/trunk/web/ Fix the config file parser in PHP when the value contains a '=' character  
/web/acc/admin/network.php
/web/acc/manager/htdocs/activity.php
/web/acc/manager/lib/langues_imp.php
/web/acc/menu.php
/web/acc/phpsysinfo/includes/xml/portail.php
/web/autoregistrationinfo.php
/web/index.php
/web/intercept.php
/web/password.php
/web/status.php
2338 2479 d 6 h tom.houdayer /repos/alcasar/trunk/web/acc/ Correct a spelling mistake in ACC menu  
/web/acc/menu.php
2315 2500 d 12 h tom.houdayer /repos/alcasar/trunk/web/ New ACC menu:
- Dynamic menu categories toggle (JavaScript instead of PHP with page reload)
- Fix user profil (rights) detection
- Clean menu.php + HTML5		  
/web/css/acc.css
/web/acc/auth.php
/web/acc/backup.php
/web/acc/filtering.php
/web/acc/stat.php
/web/acc/system.php
/web/acc/menu.php
2269 2526 d 13 h richard /repos/alcasar/trunk/ - Doc update
- V3.1.2		  
/web/acc/alcasar-3.1.2-installation-en.pdf
/web/acc/alcasar-3.1.2-installation-fr.pdf
/web/acc/alcasar-3.1.2-presentation-en.pdf
/web/acc/alcasar-3.1.2-presentation-fr.pdf
/web/acc/alcasar-3.1.1-installation-en.pdf
/web/acc/alcasar-3.1.1-installation-fr.pdf
/web/acc/alcasar-3.1.1-presentation-en.pdf
/web/acc/alcasar-3.1.1-presentation-fr.pdf
/web/acc/compteur.txt
/VERSION
/alcasar.sh
/web/acc/menu.php
2267 2526 d 14 h richard /repos/alcasar/trunk/ - Improve ACC access log  
/conf/logrotate.d/admin_log
/conf/logrotate.d/php_admin_log
/alcasar.sh
/scripts/alcasar-activity_report.sh
/web/acc/admin_log.php
/web/acc/haut.php
/web/acc/menu.php
2226 2547 d 7 h richard /repos/alcasar/trunk/ - improve update process
- translation & HTML fixes in ACC
- remove unused folder & files		  
/web/acc/manager/lib/lang
/scripts/alcasar-uninstall.sh
/scripts/alcasar-urpmi.sh
/web/acc/manager/htdocs/user_finger.php
/web/acc/manager/htdocs/user_new.php
/web/acc/manager/htdocs/user_new2.php
/web/acc/manager/lib/langues.php
/web/acc/manager/lib/sql/create_user.php
/web/acc/manager/lib/sql/delete_user.php
/web/acc/menu.php
2222 2547 d 17 h richard /repos/alcasar/trunk/web/acc/ - update & internationalization of users statistics page (to be continued)  
/web/acc/manager/htdocs/user_stats.php
/web/acc/menu.php
2182 2566 d 2 h tom.houdayer /repos/alcasar/trunk/web/ Some improvements:
- intercept.php - reformat (HTML5 + separate PHP/View) + use HOSTNAME from config file instead of always "alcasar"
- acc/admin_log.php - sort (reverse order) + reformat (HTML5 + separate PHP/View)
- acc/backup/log_generation.php - sort (reverse order)
- acc/haut.php - merge two file accesses ('r'+'w' -> 'r+') for counter + reformat (HTML5 + separate PHP/View)
- acc/menu.php & acc/phpsysinfo/includes/xml/portail.php - read VERSION from ALCASAR conf file with PHP functions instead of use exec('grep ...')
- log_info.txt & admin_log.txt - remove separator at end of lines		  
/web/acc/admin_log.php
/web/acc/backup/log_generation.php
/web/acc/haut.php
/web/acc/menu.php
/web/acc/phpsysinfo/includes/xml/portail.php
/web/intercept.php
2171 2570 d 6 h tom.houdayer /repos/alcasar/trunk/ Remove ALCASAR version visible in the user part.  
/CHANGELOG
/alcasar.sh
/scripts/alcasar-conf.sh
/scripts/alcasar-version.sh
/web/acc/menu.php
/web/acc/phpsysinfo/includes/xml/portail.php
2093 2696 d 0 h raphael.pion /repos/alcasar/trunk/web/acc/ Ajout des journaux de connexion de l'administrateur.
il suffit de cliquer sur le chiffre du compteur (fonctionnalité à expliquer dans la doc d'exploitation, je note dans mon TODO).
Dans ces logs, on indique la date, le nom authentifié (root/backup/manager) ainsi que l'@IP		  
/web/acc/admin_log.php
/web/acc/haut.php
/web/acc/menu.php
2010 2839 d 10 h raphael.pion /repos/alcasar/trunk/  
/rpms/i586/wkhtmltopdf-0.12.3-1.noarch.rpm
/rpms/wkhtmltopdf-0.12.3-1.spec
/rpms/x86_64/wkhtmltopdf-0.12.3-1.noarch.rpm
/scripts/alcasar-generate_log.sh
/web/acc/backup/log_generation.php
/conf/sudoers
/scripts/alcasar-conup.sh
/scripts/alcasar-iptables.sh
/scripts/alcasar-rpm-download.sh
/scripts/alcasar-urpmi.sh
/web/acc/backup.php
/web/acc/manager/lib/sql/change_attrs.php
/web/acc/menu.php
/web/index.php
/web/intercept.php
2009 2840 d 8 h raphael.pion /repos/alcasar/trunk/ GENERATION D UN RAPPORT D ACTIVITE ALCASAR (toutes les semaines)

la page /acc/manager/activity_report/index.php permet de consulter les rapports généré par le crontab suivant :
35 5 * * 0 root $DIR_DEST_BIN/alcasar-activity_report.sh (tous les dimanches a 5h35)

Algo pour trier les logs en fonction des dates :
-decompression de tous les logs ( si y a )
-convertir les dates des événements qui nous intéresse en timestamp
-trier + verifier la valeur du TS (si il se situe dans l'intervale d'une semaine)
-on traite pour la semaine suivante jusqu'a la derniere alerte (condition d'arret)

Les items présents sont :
[*] - TABLEAU DE BORD : info systeme/ALCASAR/derniere mise a jour
[*] - DNS-BL depuis l'installation + depuis la semaine : creation des logs dnsmasq-blacklist + logrotate appliqué pour dnsmasq-blacklist
[*] - MENACE VIRALE : graphe indiquant le nombre de menace par semaine
[*] - STATISTIQUES VOLUMETRIE DES CONNEXIONS : tableau de l'ACC ('STATISTIQUES' => 'usage journalier')
[*] - TENTATIVE DE CONNEXION : Autorisé/Interdite/fail2ban


---------------

oublie de subversionner :
-protocols_help : filtrage utilisateur / protocole
-still_connected : fil d'ariane (verifier si la fenetre status.php est toujours ouverte)		  
/conf/logrotate.d/dnsmasq-blacklist
/scripts/alcasar-activity_report.sh
/web/acc/manager/activity_report
/web/acc/manager/activity_report/index.php
/web/acc/manager/activity_report/models
/web/acc/manager/activity_report/models/Chart.report.js
/web/acc/manager/activity_report/models/tabinfo.html
/web/acc/manager/htdocs/help/protocols_help.html
/web/css/report.css
/web/js/Chart.bundle.js
/web/js/jquery.min.js
/web/still_connected.php
/alcasar.sh
/web/acc/menu.php
/web/acc/stat.php
2002 2846 d 12 h raphael.pion /repos/alcasar/trunk/web/acc/ menu cloisonné : commentaire sur le switch (admin/manager/backup)  
/web/acc/menu.php
1966 2868 d 12 h raphael.pion /repos/alcasar/trunk/web/acc/ correction du closonnement du menu de l'ACC  
/web/acc/manager/auth_exceptions.php
/web/acc/admin/auth_exceptions.php
/web/acc/auth.php
/web/acc/menu.php
1952 2878 d 16 h raphael.pion /repos/alcasar/trunk/web/acc/ correction affichage item du menu 'sauvegarde'  
/web/acc/menu.php
1911 2898 d 5 h raphael.pion /repos/alcasar/ -dac technique : ajout de l'attribut acctstarttime dans le schéma de la base
-chaque compte htdigest a son propre menu		  
/web/acc/backup.php
/conf/sudoers
/web/acc/menu.php
1536 3422 d 1 h richard /repos/alcasar/trunk/ - Sécurisation apache
- ajout vnstat à l'ACC		  
/alcasar.sh
/web/acc/menu.php
/web/acc/stat.php
1521 3426 d 1 h richard /repos/alcasar/trunk/ - Le bypass est maintenant fonctionnel
- La modif de la conf RSO est prise en compte en cas e bypass
- WL et BL sont séparés		  
/web/acc/admin/protocols_filter.php
/web/acc/admin/protocols_filter2.php
/web/acc/admin/wl_filter.php
/web/acc/admin/net_filter.php
/web/acc/admin/net_filter2.php
/scripts/alcasar-conf.sh
/scripts/sbin/alcasar-bypass.sh
/scripts/sbin/alcasar-uninstall.sh
/web/acc/admin/bl_filter.php
/web/acc/filtering.php
/web/acc/menu.php
/web/index.php
1377 3616 d 2 h richard /repos/alcasar/trunk/ Ajout filtre radius WL/BL  
/web/acc/manager/htdocs/help/filtering_help.html
/conf/radius/user_edit.attrs
/scripts/alcasar-conf.sh
/scripts/alcasar-iptables.sh
/scripts/alcasar-watchdog.sh
/scripts/sbin/alcasar-bl.sh
/scripts/sbin/alcasar-bypass.sh
/scripts/sbin/alcasar-havp.sh
/scripts/sbin/alcasar-url_filter.sh
/web/acc/admin/bl_categories_help.php
/web/acc/admin/bl_filter.php
/web/acc/admin/bl_filter2.php
/web/acc/admin/net_filter.php
/web/acc/filtering.php
/web/acc/manager/htdocs/group_new.php
/web/acc/manager/htdocs/user_edit.php
/web/acc/manager/htdocs/user_new.php
/web/acc/manager/htdocs/user_new2.php
/web/acc/manager/lib/langues.php
/web/acc/manager/lib/sql/create_group.php
/web/acc/manager/lib/sql/create_user.php
/web/acc/menu.php
/web/js/fonctions.js

←Prev12Next→

Show All