synched some configuration from the live firewall

8 files changed, 796 insertions, 2 deletions

diff --git a/config/obr/badhosts b/config/obr/badhosts
index a7f8014..892076b 100644
--- a/config/obr/badhosts
+++ b/config/obr/badhosts
@@ -1,2 +1,676 @@
-# AHrefs.com Bot
-173.199.64.0/18
+# AHrefs.com Bot: unreasonable load on the web server
+213.186.112.0/20
+212.113.32.0/21
+173.199.115.112/29
+5.10.83.0/25
+54.36.148.0/24
+54.36.149.0/24
+54.36.150.0/24
+163.172.110.205
+163.172.110.48
+163.172.111.15
+163.172.111.16
+163.172.111.17
+163.172.111.18
+163.172.111.19
+163.172.111.20
+163.172.111.21
+163.172.111.218
+163.172.111.237
+163.172.111.250
+163.172.111.36
+163.172.111.4
+163.172.111.63
+163.172.251.141
+163.172.251.197
+163.172.251.202
+163.172.251.22
+163.172.251.234
+163.172.251.24
+163.172.251.25
+163.172.251.27
+163.172.255.108
+163.172.255.132
+163.172.255.141
+163.172.255.17
+163.172.255.180
+163.172.255.196
+163.172.255.222
+163.172.255.236
+163.172.255.75
+163.172.255.76
+163.172.255.83
+163.172.4.106
+163.172.4.164
+163.172.4.178
+163.172.4.224
+163.172.4.250
+163.172.4.35
+163.172.64.118
+163.172.64.177
+163.172.64.179
+163.172.64.180
+163.172.64.181
+163.172.64.182
+163.172.64.183
+163.172.64.184
+163.172.64.185
+163.172.64.186
+163.172.64.187
+163.172.64.188
+163.172.64.189
+163.172.64.190
+163.172.64.191
+163.172.64.192
+163.172.64.193
+163.172.64.199
+163.172.64.216
+163.172.64.217
+163.172.64.220
+163.172.64.222
+163.172.64.223
+163.172.64.224
+163.172.64.225
+163.172.64.227
+163.172.64.228
+163.172.64.229
+163.172.64.230
+163.172.64.231
+163.172.64.232
+163.172.64.233
+163.172.64.234
+163.172.64.235
+163.172.64.236
+163.172.64.237
+163.172.64.238
+163.172.64.239
+163.172.64.241
+163.172.64.242
+163.172.64.243
+163.172.64.244
+163.172.64.245
+163.172.64.246
+163.172.64.247
+163.172.64.249
+163.172.64.250
+163.172.64.251
+163.172.64.252
+163.172.64.253
+163.172.64.254
+163.172.64.4
+163.172.65.10
+163.172.65.106
+163.172.65.107
+163.172.65.108
+163.172.65.109
+163.172.65.11
+163.172.65.110
+163.172.65.111
+163.172.65.112
+163.172.65.113
+163.172.65.114
+163.172.65.116
+163.172.65.118
+163.172.65.119
+163.172.65.12
+163.172.65.120
+163.172.65.121
+163.172.65.122
+163.172.65.123
+163.172.65.124
+163.172.65.126
+163.172.65.127
+163.172.65.128
+163.172.65.129
+163.172.65.13
+163.172.65.130
+163.172.65.131
+163.172.65.132
+163.172.65.14
+163.172.65.141
+163.172.65.145
+163.172.65.15
+163.172.65.16
+163.172.65.18
+163.172.65.180
+163.172.65.181
+163.172.65.182
+163.172.65.183
+163.172.65.184
+163.172.65.185
+163.172.65.186
+163.172.65.187
+163.172.65.188
+163.172.65.189
+163.172.65.19
+163.172.65.190
+163.172.65.191
+163.172.65.192
+163.172.65.193
+163.172.65.194
+163.172.65.195
+163.172.65.196
+163.172.65.197
+163.172.65.198
+163.172.65.199
+163.172.65.2
+163.172.65.20
+163.172.65.200
+163.172.65.201
+163.172.65.202
+163.172.65.203
+163.172.65.204
+163.172.65.205
+163.172.65.206
+163.172.65.207
+163.172.65.208
+163.172.65.209
+163.172.65.21
+163.172.65.210
+163.172.65.213
+163.172.65.214
+163.172.65.215
+163.172.65.216
+163.172.65.217
+163.172.65.218
+163.172.65.219
+163.172.65.22
+163.172.65.220
+163.172.65.221
+163.172.65.222
+163.172.65.225
+163.172.65.226
+163.172.65.227
+163.172.65.228
+163.172.65.229
+163.172.65.23
+163.172.65.230
+163.172.65.231
+163.172.65.232
+163.172.65.234
+163.172.65.235
+163.172.65.236
+163.172.65.239
+163.172.65.24
+163.172.65.240
+163.172.65.241
+163.172.65.242
+163.172.65.243
+163.172.65.244
+163.172.65.245
+163.172.65.246
+163.172.65.248
+163.172.65.249
+163.172.65.25
+163.172.65.250
+163.172.65.251
+163.172.65.252
+163.172.65.26
+163.172.65.28
+163.172.65.29
+163.172.65.30
+163.172.65.31
+163.172.65.32
+163.172.65.33
+163.172.65.34
+163.172.65.35
+163.172.65.36
+163.172.65.37
+163.172.65.38
+163.172.65.39
+163.172.65.4
+163.172.65.40
+163.172.65.41
+163.172.65.42
+163.172.65.43
+163.172.65.44
+163.172.65.45
+163.172.65.46
+163.172.65.47
+163.172.65.48
+163.172.65.49
+163.172.65.5
+163.172.65.50
+163.172.65.51
+163.172.65.52
+163.172.65.53
+163.172.65.54
+163.172.65.55
+163.172.65.56
+163.172.65.57
+163.172.65.58
+163.172.65.59
+163.172.65.6
+163.172.65.60
+163.172.65.61
+163.172.65.62
+163.172.65.63
+163.172.65.64
+163.172.65.65
+163.172.65.66
+163.172.65.67
+163.172.65.68
+163.172.65.69
+163.172.65.73
+163.172.65.8
+163.172.66.100
+163.172.66.101
+163.172.66.102
+163.172.66.103
+163.172.66.104
+163.172.66.105
+163.172.66.106
+163.172.66.107
+163.172.66.108
+163.172.66.109
+163.172.66.11
+163.172.66.110
+163.172.66.111
+163.172.66.112
+163.172.66.113
+163.172.66.114
+163.172.66.115
+163.172.66.116
+163.172.66.117
+163.172.66.118
+163.172.66.119
+163.172.66.12
+163.172.66.120
+163.172.66.121
+163.172.66.123
+163.172.66.124
+163.172.66.125
+163.172.66.126
+163.172.66.127
+163.172.66.128
+163.172.66.129
+163.172.66.13
+163.172.66.130
+163.172.66.131
+163.172.66.132
+163.172.66.133
+163.172.66.134
+163.172.66.135
+163.172.66.136
+163.172.66.137
+163.172.66.138
+163.172.66.139
+163.172.66.14
+163.172.66.141
+163.172.66.142
+163.172.66.143
+163.172.66.144
+163.172.66.145
+163.172.66.146
+163.172.66.147
+163.172.66.148
+163.172.66.149
+163.172.66.15
+163.172.66.150
+163.172.66.151
+163.172.66.152
+163.172.66.153
+163.172.66.154
+163.172.66.155
+163.172.66.156
+163.172.66.157
+163.172.66.158
+163.172.66.159
+163.172.66.16
+163.172.66.160
+163.172.66.161
+163.172.66.163
+163.172.66.164
+163.172.66.165
+163.172.66.166
+163.172.66.167
+163.172.66.168
+163.172.66.169
+163.172.66.17
+163.172.66.170
+163.172.66.171
+163.172.66.172
+163.172.66.173
+163.172.66.174
+163.172.66.175
+163.172.66.176
+163.172.66.177
+163.172.66.178
+163.172.66.179
+163.172.66.18
+163.172.66.180
+163.172.66.181
+163.172.66.183
+163.172.66.184
+163.172.66.185
+163.172.66.189
+163.172.66.19
+163.172.66.194
+163.172.66.2
+163.172.66.20
+163.172.66.208
+163.172.66.21
+163.172.66.22
+163.172.66.222
+163.172.66.225
+163.172.66.23
+163.172.66.24
+163.172.66.25
+163.172.66.26
+163.172.66.27
+163.172.66.28
+163.172.66.29
+163.172.66.3
+163.172.66.30
+163.172.66.31
+163.172.66.32
+163.172.66.33
+163.172.66.34
+163.172.66.35
+163.172.66.36
+163.172.66.37
+163.172.66.38
+163.172.66.39
+163.172.66.4
+163.172.66.40
+163.172.66.41
+163.172.66.42
+163.172.66.43
+163.172.66.44
+163.172.66.45
+163.172.66.46
+163.172.66.47
+163.172.66.48
+163.172.66.49
+163.172.66.5
+163.172.66.50
+163.172.66.51
+163.172.66.52
+163.172.66.53
+163.172.66.54
+163.172.66.55
+163.172.66.56
+163.172.66.57
+163.172.66.58
+163.172.66.59
+163.172.66.6
+163.172.66.60
+163.172.66.61
+163.172.66.62
+163.172.66.63
+163.172.66.64
+163.172.66.65
+163.172.66.66
+163.172.66.67
+163.172.66.68
+163.172.66.69
+163.172.66.7
+163.172.66.70
+163.172.66.71
+163.172.66.73
+163.172.66.74
+163.172.66.75
+163.172.66.76
+163.172.66.77
+163.172.66.78
+163.172.66.79
+163.172.66.8
+163.172.66.80
+163.172.66.81
+163.172.66.82
+163.172.66.83
+163.172.66.84
+163.172.66.85
+163.172.66.86
+163.172.66.87
+163.172.66.88
+163.172.66.89
+163.172.66.9
+163.172.66.90
+163.172.66.91
+163.172.66.93
+163.172.66.94
+163.172.66.95
+163.172.66.96
+163.172.66.97
+163.172.66.98
+163.172.66.99
+163.172.67.177
+163.172.67.183
+163.172.67.201
+163.172.67.212
+163.172.67.240
+163.172.67.64
+163.172.67.89
+163.172.67.90
+163.172.68.118
+163.172.68.122
+163.172.68.123
+163.172.68.127
+163.172.68.128
+163.172.68.132
+163.172.68.133
+163.172.68.136
+163.172.68.147
+163.172.68.149
+163.172.68.81
+163.172.69.122
+163.172.69.126
+163.172.69.141
+163.172.69.168
+163.172.69.178
+163.172.69.212
+163.172.69.217
+163.172.69.235
+163.172.69.43
+163.172.69.56
+163.172.69.57
+163.172.69.76
+163.172.69.91
+163.172.70.183
+163.172.70.217
+163.172.70.26
+163.172.70.45
+163.172.70.88
+163.172.71.13
+163.172.71.179
+163.172.71.21
+163.172.71.211
+163.172.71.227
+163.172.71.244
+163.172.71.29
+163.172.71.43
+163.172.71.45
+163.172.71.55
+163.172.71.90
+163.172.72.132
+163.172.72.174
+163.172.72.48
+163.172.72.60
+163.172.72.70
+163.172.73.155
+163.172.73.219
+163.172.73.247
+163.172.73.28
+163.172.73.33
+163.172.73.84
+163.172.73.97
+163.172.74.13
+163.172.74.158
+163.172.74.42
+163.172.74.43
+163.172.74.80
+195.154.104.105
+195.154.104.133
+195.154.104.134
+195.154.104.135
+195.154.104.136
+195.154.104.137
+195.154.104.138
+195.154.104.139
+195.154.104.140
+195.154.104.141
+195.154.104.142
+195.154.104.143
+195.154.104.144
+195.154.104.145
+195.154.104.146
+195.154.104.147
+195.154.104.148
+195.154.104.149
+195.154.104.150
+195.154.104.151
+195.154.104.152
+195.154.104.153
+195.154.104.154
+195.154.104.155
+195.154.104.156
+195.154.104.157
+195.154.104.158
+195.154.104.159
+195.154.104.160
+195.154.104.161
+195.154.104.162
+195.154.104.163
+195.154.104.164
+195.154.104.165
+195.154.104.166
+195.154.104.167
+195.154.104.168
+195.154.104.169
+195.154.104.170
+195.154.104.173
+195.154.104.174
+195.154.104.175
+195.154.104.176
+195.154.104.177
+195.154.104.178
+195.154.104.179
+195.154.104.180
+195.154.104.181
+195.154.104.182
+195.154.104.183
+195.154.104.184
+195.154.104.185
+195.154.104.186
+195.154.104.187
+195.154.104.188
+195.154.104.189
+195.154.104.190
+195.154.104.191
+195.154.104.192
+195.154.104.193
+195.154.104.194
+195.154.104.195
+195.154.104.196
+195.154.104.197
+195.154.104.198
+195.154.104.199
+195.154.104.200
+195.154.104.201
+195.154.104.202
+195.154.104.203
+195.154.104.204
+195.154.104.205
+195.154.104.206
+195.154.104.207
+195.154.104.208
+195.154.104.209
+195.154.104.210
+195.154.104.211
+195.154.104.212
+195.154.104.213
+195.154.104.214
+195.154.104.215
+195.154.104.216
+195.154.104.217
+195.154.104.218
+195.154.104.219
+195.154.104.222
+195.154.104.26
+195.154.104.51
+195.154.104.53
+195.154.104.75
+195.154.84.92
+51.15.183.109
+51.15.183.152
+51.15.183.158
+51.15.183.33
+51.15.183.59
+51.15.183.87
+51.15.183.88
+51.15.183.92
+51.15.191.12
+51.15.191.125
+51.15.191.16
+51.15.191.219
+51.15.191.220
+51.15.191.252
+
+# Semrush-bot: unreasonable load on the web server
+192.243.55.137
+192.243.55.136
+192.243.55.134
+192.243.55.132
+192.243.55.133
+192.243.55.135
+213.174.146.163
+46.229.164.101
+46.229.164.100
+46.229.164.98
+46.229.164.102
+46.229.164.99
+46.229.164.114
+46.229.164.113
+46.229.164.101
+46.229.161.132
+46.229.161.136
+46.229.161.138
+46.229.164.103
+46.229.164.97
+50.17.105.131
+50.17.33.197
+50.19.36.141
+107.21.183.210
+107.22.134.187
+107.22.68.116
+174.129.166.77
+184.72.94.71
+184.73.143.31
+204.236.244.200
+184.72.140.220
+107.22.128.82
+50.16.154.80
+107.22.128.82
+50.16.154.80
+107.21.149.52
+23.20.75.166
+50.16.11.183
+107.21.155.119
+23.20.2.192
+75.101.210.171
+184.72.187.47
+184.72.163.70
+184.72.181.183
+184.73.13.192
+184.73.142.88
+184.73.58.164
+204.236.243.108
+50.16.162.168
+50.19.162.168
+50.19.162.61
+107.21.139.47
+75.101.242.89
+50.16.179.70
+184.72.168.246
+50.17.117.164
+50.19.179.186
+107.20.126.228
+50.16.94.41
+50.17.107.112
+75.101.205.112
+69.10.37.186
+
+# bad visits (hammering my web page or mail server or both)
+94.102.56.215
+123.157.156.166
diff --git a/config/obr/nsd-external/etc/nsd.conf b/config/obr/nsd-external/etc/nsd.conf
index 82c0cb0..0529af7 100644
--- a/config/obr/nsd-external/etc/nsd.conf
+++ b/config/obr/nsd-external/etc/nsd.conf
@@ -34,3 +34,17 @@ zone:
 	provide-xfr: 173.244.206.25 NOKEY
 	provide-xfr: 173.244.206.26 NOKEY
 	provide-xfr: 88.198.106.11 NOKEY
+
+zone:
+	name: "pgfuse.org"
+	zonefile: "pgfuse.org"
+	provide-xfr: 173.244.206.25 NOKEY
+	provide-xfr: 173.244.206.26 NOKEY
+	provide-xfr: 88.198.106.11 NOKEY
+
+zone:
+	name: "openbsd-firewall.org"
+	zonefile: "openbsd-firewall.org"
+	provide-xfr: 173.244.206.25 NOKEY
+	provide-xfr: 173.244.206.26 NOKEY
+	provide-xfr: 88.198.106.11 NOKEY
diff --git a/config/obr/nsd-external/zones/openbsd-firewall.org b/config/obr/nsd-external/zones/openbsd-firewall.org
new file mode 100644
index 0000000..ce3666c
--- /dev/null
+++ b/config/obr/nsd-external/zones/openbsd-firewall.org
@@ -0,0 +1,24 @@
+; external view of zone openbsd-firewall.org
+
+$TTL 60
+
+@		IN	SOA	ns.openbsd-firewall.org. admin.openbsd-firewall.org. (
+				2018060900	; serial
+				3h		; refresh
+				15m		; retry
+				2w		; expire
+				60		; minimum TTL
+			)
+
+	IN	NS		d.ns.buddyns.com.
+	IN	NS		f.ns.buddyns.com.
+	IN	NS		h.ns.buddyns.com.
+
+
+$ORIGIN openbsd-firewall.org.
+
+	IN	A		83.150.2.48
+
+ns	IN	A		83.150.2.48
+
+www	IN	A		83.150.2.48
diff --git a/config/obr/nsd-external/zones/pgfuse.org b/config/obr/nsd-external/zones/pgfuse.org
new file mode 100644
index 0000000..7466aec
--- /dev/null
+++ b/config/obr/nsd-external/zones/pgfuse.org
@@ -0,0 +1,24 @@
+; external view of zone pgfuse.org
+
+$TTL 60
+
+@		IN	SOA	ns.pgfuse.org. admin.pgfuse.org. (
+				2018060800	; serial
+				3h		; refresh
+				15m		; retry
+				2w		; expire
+				60		; minimum TTL
+			)
+
+	IN	NS		d.ns.buddyns.com.
+	IN	NS		f.ns.buddyns.com.
+	IN	NS		h.ns.buddyns.com.
+
+
+$ORIGIN pgfuse.org.
+
+	IN	A		83.150.2.48
+
+ns	IN	A		83.150.2.48
+
+www	IN	A		83.150.2.48
diff --git a/config/obr/nsd-internal/etc/nsd.conf b/config/obr/nsd-internal/etc/nsd.conf
index 9487e25..3fd84a6 100644
--- a/config/obr/nsd-internal/etc/nsd.conf
+++ b/config/obr/nsd-internal/etc/nsd.conf
@@ -35,3 +35,11 @@ zone:
 zone:
 	name: "maschezuoz.ch"
 	zonefile: "maschezuoz.ch"
+
+zone:
+	name: "pgfuse.org"
+	zonefile: "pgfuse.org"
+
+zone:
+	name: "openbsd-firewall.org"
+	zonefile: "openbsd-firewall.org"
diff --git a/config/obr/nsd-internal/zones/openbsd-firewall.org b/config/obr/nsd-internal/zones/openbsd-firewall.org
new file mode 100644
index 0000000..eaf70b4
--- /dev/null
+++ b/config/obr/nsd-internal/zones/openbsd-firewall.org
@@ -0,0 +1,21 @@
+; internal view of zone openbsd-firewall.org
+
+$TTL 60
+
+@		IN	SOA	ns.openbsd-firewall.org. admin.openbsd-firewall.org. (
+				2018060900	; serial
+				3h		; refresh
+				15m		; retry
+				2w		; expire
+				60		; minimum TTL
+			)
+
+	IN	NS		ns.openbsd-firewall.org.
+
+$ORIGIN openbsd-firewall.org.
+
+	IN		A	192.168.1.15
+
+ns			A	192.168.1.1
+
+www			A	192.168.1.15
diff --git a/config/obr/nsd-internal/zones/pgfuse.org b/config/obr/nsd-internal/zones/pgfuse.org
new file mode 100644
index 0000000..804b5e4
--- /dev/null
+++ b/config/obr/nsd-internal/zones/pgfuse.org
@@ -0,0 +1,21 @@
+; internal view of zone pgfuse.org
+
+$TTL 60
+
+@		IN	SOA	ns.pgfuse.org. admin.pgfuse.org. (
+				2018060800	; serial
+				3h		; refresh
+				15m		; retry
+				2w		; expire
+				60		; minimum TTL
+			)
+
+	IN	NS		ns.pgfuse.org.
+
+$ORIGIN pgfuse.org.
+
+	IN		A	192.168.1.15
+
+ns			A	192.168.1.1
+
+www			A	192.168.1.15
diff --git a/config/obr/relayd.conf b/config/obr/relayd.conf
index ba52e74..ef8339f 100644
--- a/config/obr/relayd.conf
+++ b/config/obr/relayd.conf
@@ -48,6 +48,14 @@ http protocol "http_protocol" {
 		forward to <euroserver> no tag
 	match request quick header "Host" value "archlinux32.andreasbaumann.cc" \
 		forward to <eurobuild3> no tag
+	match request quick header "Host" value "www.pgfuse.org" \
+		forward to <euroweb> no tag
+	match request quick header "Host" value "pgfuse.org" \
+		forward to <euroweb> no tag
+	match request quick header "Host" value "www.openbsd-firewall.org" \
+		forward to <euroweb> no tag
+	match request quick header "Host" value "openbsd-firewall.org" \
+		forward to <euroweb> no tag
 
 	block request tagged disallowed_host label "BAD host"
 }