AnarchyPlanet/q2a-antispam
Archived
3
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
This repository has been archived on 2025-03-03. You can view files and clone it, but cannot push or open issues or pull requests.
97bd5b000a
q2a-antispam/README.md
sceox 97bd5b000a run with least privilege, support pf 
* run the service as a low privilege user and use sudo/doas to add
      the block rules
    * add support for pf firewall
    * write documentation for the above
    * add abort function for handling error logging and exit cleanup
2020-09-06 15:20:12 -07:00

1.3 KiB
Raw Blame History

A simple anti-spam system for question2answer, using the stopforumspam API and ufw.

To deploy:

  • modify the configuration variables in the scripts

  • copy the scripts to /usr/local/bin

  • create the user

      useradd -s /sbin/nologin _forumspam

  • if using pf:

    • create appropriate permissions for the file:

      install -m 640 -o _forumspam -g wheel /dev/null /etc/pf-forumspam.txt

    • add the following to /etc/pf.conf, preferably high up in the ruleset:

      table persist file "/etc/pf-forumspam.txt" block in quick on egress from block out quick on egress to

  • set up sudo or doas:

    • for doas:

      • add the following to /etc/doas.conf:

      permit nopass _forumspam cmd pfctl args -nf /etc/pf.conf permit nopass _forumspam cmd pfctl args -t forumspam -T replace -f /etc/pf-forumspam.txt

    • for sudo:

      • add to your sudo config file: Cmnd_Alias FIREWALL = /usr/sbin/ufw, /sbin/iptables and _forumspam ALL = NOPASSWD: FIREWALL

  • register q2a_usercheck.sh as a systemd unit or rc script

TODO:

  • also check against botscout
  • give the scripts more sensible names