diff --git a/documentation/docs/changelog/0.1.9.md b/documentation/docs/changelog/0.1.9.md index a94f5f0..ea304ab 100644 --- a/documentation/docs/changelog/0.1.9.md +++ b/documentation/docs/changelog/0.1.9.md @@ -9,7 +9,8 @@ Not yet released. ### 🚀 New features -- OpenAdmin Notifications Center is now using [Sentinel AI](https://github.com/stefanpejcic/Sentinel/tree/main) service +- OpenAdmin Notifications Center is now using [Sentinel](https://github.com/stefanpejcic/Sentinel/tree/main) service +- [IPset Blacklists for UFW](#ipset-blacklists) - [OpenPanel FTP - FTP module for OpenPanel (**BETA**)](https://github.com/stefanpejcic/OpenPanel-FTP/) - [OpenMail - Emails module for OpenPanel (**BETA**)](https://github.com/stefanpejcic/OpenMail/) - [`opencli faq` command to show frequently asked questions](#opencli-faq) @@ -27,6 +28,41 @@ Not yet released. - +## IPset Blacklists + +OpenAdmin Firewall now allows Administrators to add blacklists and block all IP addresses from them. + +This feature uses [ipset-blacklist service](https://github.com/stefanpejcic/ipset-blacklist) to automatically fetch ip addresses from configured blacklists and modify UFW. + +![ipset-blacklist](https://i.postimg.cc/4xN3Qxvy/image.png) + +New opencli commands are also available: + +- Download new IP addresses for all enabled blocklists: + ```bash + opencli blacklist --fetch + ``` +- Update all ipsets rules and reload UFW service: + ```bash + bash /usr/ipset-blacklist.sh --update_ufw + ``` +- Add a new blacklist: + ```bash + bash /usr/ipset-blacklist.sh --add-blacklist name= url= + ``` +- Enable a blacklist: + ```bash + bash /usr/ipset-blacklist.sh --enable-blacklist= + ``` +- Disable a blacklist: + ```bash + bash /usr/ipset-blacklist.sh --disable-blacklist= + ``` +- Delete a blacklist: + ```bash + bash /usr/ipset-blacklist.sh --delete-blacklist= + ``` + ### opencli faq OpenCLI now has a new command `opencli faq` to display most frequently asked questions: