Subversion Repositories ALCASAR

Rev

Hide changed files | Details | Compare with Previous | Blame

Filtering Options

Rev Age Author Path Log message Diff Changes
3099 769 d 22 h rexy /repos/alcasar/trunk/ Remove "dnsmasq" resolver used with whitelist filtering system (we now use ipset capabilities of "unbound")  
/web/images/footer_postfix.png
/web/images/footer_unbound.png
/conf/logrotate.d/dnsmasq-blacklist
/web/images/footer_dnsmasq.png
/web/images/footer_fpdf.png
/CHANGELOG
/alcasar.sh
/scripts/alcasar-activity_report.sh
/scripts/alcasar-bl.sh
/scripts/alcasar-conf.sh
/scripts/alcasar-daemon.sh
/scripts/alcasar-dns-local.sh
/scripts/alcasar-iptables.sh
/scripts/alcasar-rpm-download.sh
/scripts/alcasar-rpm.sh
/scripts/alcasar-uninstall.sh
/web/acc/about.htm
/web/acc/admin/services.php
/web/acc/manager/auth_exceptions.php
2833 1696 d 23 h rexy /repos/alcasar/trunk/ Improve DNS configuration
Bug fix		  
/conf/logrotate.d/mysqld
/CHANGELOG
/VERSION
/alcasar.sh
/blacklist/blacklists.tar.gz
/conf/etc/alcasar-iptables-local.sh
/conf/logrotate.d/admin_log
/conf/logrotate.d/ulogd
/scripts/alcasar-conf.sh
/scripts/alcasar-dns-local.sh
/scripts/alcasar-uninstall.sh
/web/index.php
2688 2209 d 10 h lucas.echard /repos/alcasar/trunk/ Replace DNSmasq server with Unbound  
/conf/logrotate.d/unbound-blacklist
/rpms/x86_64/lib64unbound8-1.8.3-2.mga6.x86_64.rpm
/rpms/x86_64/unbound-1.8.3-2.mga6.x86_64.rpm
/CHANGELOG
/alcasar.sh
/scripts/alcasar-activity_report.sh
/scripts/alcasar-bl.sh
/scripts/alcasar-bypass.sh
/scripts/alcasar-conf.sh
/scripts/alcasar-daemon.sh
/scripts/alcasar-dhcp.sh
/scripts/alcasar-dns-local.sh
/scripts/alcasar-file-clean.sh
/scripts/alcasar-importcert.sh
/scripts/alcasar-iptables.sh
/scripts/alcasar-rpm-download.sh
/scripts/alcasar-uninstall.sh
/scripts/alcasar-url_filter_bl.sh
/scripts/alcasar-url_filter_wl.sh
/scripts/alcasar-urpmi.sh
/web/acc/admin/bl_categories_help.php
/web/acc/admin/bl_filter.php
/web/acc/admin/network.php
/web/acc/admin/services.php
/web/acc/admin/wl_filter.php
/web/acc/phpsysinfo/includes/lang/en.php
/web/index.php
/web/language/alcasar-fr.txt
2267 2803 d 0 h richard /repos/alcasar/trunk/ - Improve ACC access log  
/conf/logrotate.d/admin_log
/conf/logrotate.d/php_admin_log
/alcasar.sh
/scripts/alcasar-activity_report.sh
/web/acc/admin_log.php
/web/acc/haut.php
/web/acc/menu.php
2098 2972 d 6 h raphael.pion /repos/alcasar/trunk/conf/logrotate.d/ configuration de logrotate des logs admins renseignant les dernieres connexions. On effacera les données de plus de un an.
notre fichier de log se trouve ici : /var/www/html/acc/admin_log.txt		  
/conf/logrotate.d/php_admin_log
2009 3116 d 18 h raphael.pion /repos/alcasar/trunk/ GENERATION D UN RAPPORT D ACTIVITE ALCASAR (toutes les semaines)

la page /acc/manager/activity_report/index.php permet de consulter les rapports généré par le crontab suivant :
35 5 * * 0 root $DIR_DEST_BIN/alcasar-activity_report.sh (tous les dimanches a 5h35)

Algo pour trier les logs en fonction des dates :
-decompression de tous les logs ( si y a )
-convertir les dates des événements qui nous intéresse en timestamp
-trier + verifier la valeur du TS (si il se situe dans l'intervale d'une semaine)
-on traite pour la semaine suivante jusqu'a la derniere alerte (condition d'arret)

Les items présents sont :
[*] - TABLEAU DE BORD : info systeme/ALCASAR/derniere mise a jour
[*] - DNS-BL depuis l'installation + depuis la semaine : creation des logs dnsmasq-blacklist + logrotate appliqué pour dnsmasq-blacklist
[*] - MENACE VIRALE : graphe indiquant le nombre de menace par semaine
[*] - STATISTIQUES VOLUMETRIE DES CONNEXIONS : tableau de l'ACC ('STATISTIQUES' => 'usage journalier')
[*] - TENTATIVE DE CONNEXION : Autorisé/Interdite/fail2ban


---------------

oublie de subversionner :
-protocols_help : filtrage utilisateur / protocole
-still_connected : fil d'ariane (verifier si la fenetre status.php est toujours ouverte)		  
/conf/logrotate.d/dnsmasq-blacklist
/scripts/alcasar-activity_report.sh
/web/acc/manager/activity_report
/web/acc/manager/activity_report/index.php
/web/acc/manager/activity_report/models
/web/acc/manager/activity_report/models/Chart.report.js
/web/acc/manager/activity_report/models/tabinfo.html
/web/acc/manager/htdocs/help/protocols_help.html
/web/css/report.css
/web/js/Chart.bundle.js
/web/js/jquery.min.js
/web/still_connected.php
/alcasar.sh
/web/acc/menu.php
/web/acc/stat.php
1574 3628 d 10 h richard /repos/alcasar/trunk/ - ajout de la possibilité d'arréter ou de relancer le serveur  
/alcasar.sh
/conf/logrotate.d/ulogd
/conf/sudoers
/scripts/alcasar-conf.sh
/scripts/alcasar-daemon.sh
/scripts/sbin/alcasar-bl.sh
/scripts/sbin/alcasar-bypass.sh
/scripts/sbin/alcasar-uninstall.sh
/web/acc/admin/services.php
1544 3696 d 16 h richard /repos/alcasar/trunk/ Corrections : "filtrage havp seul", logrotate ulog, tinyproxy  
/alcasar.sh
/conf/logrotate.d/ulogd
/scripts/alcasar-iptables.sh
1543 3696 d 23 h richard /repos/alcasar/trunk/ Logrotate : On ne modifie que ce qui est nécessaire (vérif en cours)  
/conf/logrotate.d/dansguardian
/conf/logrotate.d/dnsmasq
/conf/logrotate.d/httpd
/conf/logrotate.d/radiusd
/conf/logrotate.d/squid
/conf/logrotate.d/syslog
/alcasar.sh
1358 3910 d 21 h richard /repos/alcasar/trunk/ Mageia4 migration in progress  
/conf/ulogd-init
/alcasar.sh
/conf/logrotate.d/ulogd
/scripts/alcasar-archive.sh
/scripts/alcasar-netflow.sh
/scripts/alcasar-urpmi.sh
/scripts/sbin/alcasar-uninstall.sh
/web/acc/backup/sauvegarde.php
/web/language/alcasar-fr.txt
1349 3919 d 18 h richard /repos/alcasar/trunk/ Intégration du système d'autoenregistrement pas SMS  
/conf/gammu-smsd-db-vierge.sql
/conf/logrotate.d/gammu
/scripts/alcasar-sms.sh
/web/acc/manager/htdocs/autoregistration.php
/web/autoregistrationinfo.php
/web/images/signal_0.png
/web/images/signal_20.png
/web/images/signal_40.png
/web/images/signal_60.png
/web/images/signal_80.png
/alcasar.sh
/conf/sudoers
/scripts/alcasar-urpmi.sh
/scripts/sbin/alcasar-uninstall.sh
/web/acc/auth.php
/web/acc/menu.php
/web/css/style_intercept.css
/web/intercept.php
1246 4130 d 17 h crox53 /repos/alcasar/trunk/conf/logrotate.d/ Suppression log de Squid (access.log) dans Logrotate  
/conf/logrotate.d/squid
958 4584 d 0 h franck /repos/alcasar/trunk/ un peu de proprietes manquantes dans subversion sur les fichiers  
/CHANGELOG
/TODO
/alcasar.sh
/conf/etc/alcasar-dns-name
/conf/logrotate.d/dansguardian
/conf/logrotate.d/dnsmasq
/conf/logrotate.d/httpd
/conf/logrotate.d/mysqld
/conf/logrotate.d/radiusd
/conf/logrotate.d/squid
/conf/logrotate.d/syslog
/conf/logrotate.d/ulogd
/conf/ulogd-init
/scripts/alcasar-CA.sh
/scripts/alcasar-archive.sh
/scripts/alcasar-conf.sh
/scripts/alcasar-conup.sh
/scripts/alcasar-daemon.sh
/scripts/alcasar-file-clean.sh
/scripts/alcasar-import-clean.sh
/scripts/alcasar-iptables-bypass.sh
/scripts/alcasar-iptables.sh
/scripts/alcasar-log.sh
/scripts/alcasar-urpmi.sh
/scripts/alcasar-watchdog.sh
/scripts/sbin/alcasar-bl.sh
/scripts/sbin/alcasar-bypass.sh
/scripts/sbin/alcasar-dateLog.sh
/scripts/sbin/alcasar-dhcp.sh
/scripts/sbin/alcasar-havp.sh
/scripts/sbin/alcasar-https.sh
/scripts/sbin/alcasar-load_balancing.sh
/scripts/sbin/alcasar-logout.sh
/scripts/sbin/alcasar-mysql.sh
/scripts/sbin/alcasar-nf.sh
/scripts/sbin/alcasar-profil.sh
/scripts/sbin/alcasar-qos.sh
/scripts/sbin/alcasar-rpm-download.sh
/scripts/sbin/alcasar-uninstall.sh
/scripts/sbin/alcasar-url_filter.sh
/scripts/sbin/alcasar-version.sh
/web/acc/auth.php
/web/acc/filtering.php
/web/acc/haut.php
/web/acc/menu.php
/web/acc/stat.php
/web/acc/system.php
/web/index.php
/web/intercept.php
/web/status.php
785 4792 d 16 h franck /repos/alcasar/trunk/ Activation des log DNS (dans dnsmasq)  
/conf/logrotate.d/dnsmasq
/alcasar.sh
/scripts/sbin/alcasar-uninstall.sh
476 5112 d 13 h richard /repos/alcasar/trunk/ - optimisation havp + clamav (désormais, tout est traité en mémoire) --> amélioration facteur 10 !!!
- refonte Ulog en multi-fichiers (/var/log/firewall/tracability.log + ssh.log + ext-access.log)
- installation et MAJ en MDV 2010.2
- mise à jour "uninstall"		  
/conf/ulogd-init
/CHANGELOG
/alcasar.sh
/conf/logrotate.d/ulogd
/scripts/alcasar-iptables.sh
/scripts/alcasar-urpmi.sh
/scripts/etc/alcasar-iptables-local.sh
/scripts/sbin/alcasar-uninstall.sh
426 5141 d 23 h franck /repos/alcasar/trunk/ ajout des proprietés keywords (Id Date Author) manquantes sur les fichiers  
/conf/alcasar-dns-name
/conf/alcasar-ethers
/conf/bannedurllist
/conf/freeradiusweb-config.php
/conf/logrotate.d/dansguardian
/conf/logrotate.d/httpd
/conf/logrotate.d/mysqld
/conf/logrotate.d/radiusd
/conf/logrotate.d/squid
/conf/logrotate.d/syslog
/conf/logrotate.d/ulogd
/conf/radiusd-db-vierge.sql
/conf/radiusd.conf-simple
/conf/rpms/rpm-build-howto
/conf/virus-en.html
/conf/virus-fr.html
/web/acc/index.html
/web/acc/menu.php
/web/acc/phpsysinfo/includes/xml/portail.php
/web/acc/phpsysinfo/templates/alcasar/alcasar.css
/web/acc/phpsysinfo/templates/alcasar/box.tpl
/web/acc/phpsysinfo/templates/alcasar/form.tpl
/web/acc/phpsysinfo/templates/alcasar/index.html
/web/acc/stat.php
/web/acc/system.php
/web/intercept.php
/web/pass/index.php
40 5423 d 16 h franck /repos/alcasar/  

/.DAV
/CHANGELOG
/TODO
/VERSION
/alcasar.sh
/conf
/gestion
/gpl-3.0.fr.txt
/gpl-3.0.txt
/readme-1.9.txt
/scripts
1 5478 d 16 h root /repos/ version0