From: Frank Brehm Date: Wed, 6 Jan 2021 11:54:27 +0000 (+0100) Subject: committing changes in /etc made by "apt dist-upgrade -y" X-Git-Url: https://git.uhu-banane.net/?a=commitdiff_plain;h=e894654fa40008b457cf4d20b54d3ee5c4821402;p=config%2Fsarah%2Fetc.git committing changes in /etc made by "apt dist-upgrade -y" Package changes: -apt 1.8.2.1 amd64 +apt 1.8.2.2 amd64 -apt-transport-https 1.8.2.1 all -apt-utils 1.8.2.1 amd64 +apt-transport-https 1.8.2.2 all +apt-utils 1.8.2.2 amd64 -base-files 10.3+deb10u6 amd64 +base-files 10.3+deb10u7 amd64 -distro-info-data 0.41+deb10u2 all +distro-info-data 0.41+deb10u3 all -dovecot-core 1:2.3.4.1-5+deb10u4 amd64 -dovecot-imapd 1:2.3.4.1-5+deb10u4 amd64 -dovecot-lmtpd 1:2.3.4.1-5+deb10u4 amd64 -dovecot-managesieved 1:2.3.4.1-5+deb10u4 amd64 -dovecot-mysql 1:2.3.4.1-5+deb10u4 amd64 -dovecot-pop3d 1:2.3.4.1-5+deb10u4 amd64 -dovecot-sieve 1:2.3.4.1-5+deb10u4 amd64 +dovecot-core 1:2.3.4.1-5+deb10u5 amd64 +dovecot-imapd 1:2.3.4.1-5+deb10u5 amd64 +dovecot-lmtpd 1:2.3.4.1-5+deb10u5 amd64 +dovecot-managesieved 1:2.3.4.1-5+deb10u5 amd64 +dovecot-mysql 1:2.3.4.1-5+deb10u5 amd64 +dovecot-pop3d 1:2.3.4.1-5+deb10u5 amd64 +dovecot-sieve 1:2.3.4.1-5+deb10u5 amd64 -iptables-persistent 1.0.11 all +iptables-persistent 1.0.11+deb10u1 all -libapt-inst2.0 1.8.2.1 amd64 -libapt-pkg5.0 1.8.2.1 amd64 +libapt-inst2.0 1.8.2.2 amd64 +libapt-pkg5.0 1.8.2.2 amd64 -libbrotli1 1.0.7-2 amd64 +libbrotli1 1.0.7-2+deb10u1 amd64 -libcups2 2.2.10-6+deb10u3 amd64 +libcups2 2.2.10-6+deb10u4 amd64 -libefiboot1 37-2 amd64 -libefivar1 37-2 amd64 +libefiboot1 37-2+deb10u1 amd64 +libefivar1 37-2+deb10u1 amd64 -libjpeg62-turbo 1:1.5.2-2+b1 amd64 +libjpeg62-turbo 1:1.5.2-2+deb10u1 amd64 -libmariadb3 1:10.3.25-0+deb10u1 amd64 +libmariadb3 1:10.3.27-0+deb10u1 amd64 -libp11-kit0 0.23.15-2 amd64 +libp11-kit0 0.23.15-2+deb10u1 amd64 -libpam-systemd 241-7~deb10u4 amd64 +libpam-systemd 241-7~deb10u5 amd64 -libruby2.5 2.5.5-3+deb10u2 amd64 +libruby2.5 2.5.5-3+deb10u3 amd64 -libsqlite3-0 3.27.2-3 amd64 +libsqlite3-0 3.27.2-3+deb10u1 amd64 -libssl1.1 1.1.1d-0+deb10u3 amd64 +libssl1.1 1.1.1d-0+deb10u4 amd64 -libsystemd0 241-7~deb10u4 amd64 +libsystemd0 241-7~deb10u5 amd64 -libudev1 241-7~deb10u4 amd64 +libudev1 241-7~deb10u5 amd64 -libxml2 2.9.4+dfsg1-7+b3 amd64 +libxml2 2.9.4+dfsg1-7+deb10u1 amd64 -linux-image-amd64 4.19+105+deb10u7 amd64 -linux-libc-dev 4.19.152-1 amd64 +linux-image-4.19.0-13-amd64 4.19.160-2 amd64 +linux-image-amd64 4.19+105+deb10u8 amd64 +linux-libc-dev 4.19.160-2 amd64 -mariadb-backup 1:10.3.25-0+deb10u1 amd64 -mariadb-client 1:10.3.25-0+deb10u1 all +mariadb-backup 1:10.3.27-0+deb10u1 amd64 +mariadb-client 1:10.3.27-0+deb10u1 all -mariadb-client-10.3 1:10.3.25-0+deb10u1 amd64 -mariadb-client-core-10.3 1:10.3.25-0+deb10u1 amd64 -mariadb-common 1:10.3.25-0+deb10u1 all -mariadb-server 1:10.3.25-0+deb10u1 all +mariadb-client-10.3 1:10.3.27-0+deb10u1 amd64 +mariadb-client-core-10.3 1:10.3.27-0+deb10u1 amd64 +mariadb-common 1:10.3.27-0+deb10u1 all +mariadb-server 1:10.3.27-0+deb10u1 all -mariadb-server-10.3 1:10.3.25-0+deb10u1 amd64 -mariadb-server-core-10.3 1:10.3.25-0+deb10u1 amd64 +mariadb-server-10.3 1:10.3.27-0+deb10u1 amd64 +mariadb-server-core-10.3 1:10.3.27-0+deb10u1 amd64 -netfilter-persistent 1.0.11 all +netfilter-persistent 1.0.11+deb10u1 all -openssl 1.1.1d-0+deb10u3 amd64 +openssl 1.1.1d-0+deb10u4 amd64 -php-pear 1:1.10.6+submodules+notgz-1.1 all +php-pear 1:1.10.6+submodules+notgz-1.1+deb10u1 all -python-apt 1.8.4.1 amd64 -python-apt-common 1.8.4.1 all +python-apt 1.8.4.3 amd64 +python-apt-common 1.8.4.3 all -python-lxml 4.3.2-1 amd64 +python-lxml 4.3.2-1+deb10u2 amd64 -python3-apt 1.8.4.1 amd64 +python3-apt 1.8.4.3 amd64 -ruby2.5 2.5.5-3+deb10u2 amd64 +ruby2.5 2.5.5-3+deb10u3 amd64 -salt-common 3000.5+ds-1 all -salt-minion 3000.5+ds-1 all +salt-common 3000.6+ds-1 all +salt-minion 3000.6+ds-1 all -sqlite3 3.27.2-3 amd64 +sqlite3 3.27.2-3+deb10u1 amd64 -systemd 241-7~deb10u4 amd64 -systemd-sysv 241-7~deb10u4 amd64 +systemd 241-7~deb10u5 amd64 +systemd-sysv 241-7~deb10u5 amd64 -tcpdump 4.9.3-1~deb10u1 amd64 +tcpdump 4.9.3-1~deb10u2 amd64 -tzdata 2020d-0+deb10u1 all +tzdata 2020e-0+deb10u1 all -udev 241-7~deb10u4 amd64 +udev 241-7~deb10u5 amd64 --- diff --git a/apt/apt.conf.d/01autoremove-kernels b/apt/apt.conf.d/01autoremove-kernels index bd715f3..999335f 100644 --- a/apt/apt.conf.d/01autoremove-kernels +++ b/apt/apt.conf.d/01autoremove-kernels @@ -1,65 +1,65 @@ // DO NOT EDIT! File autogenerated by /etc/kernel/postinst.d/apt-auto-removal APT::NeverAutoRemove { - "^linux-image-4\.19\.0-11-amd64$"; "^linux-image-4\.19\.0-12-amd64$"; - "^linux-headers-4\.19\.0-11-amd64$"; + "^linux-image-4\.19\.0-13-amd64$"; "^linux-headers-4\.19\.0-12-amd64$"; - "^linux-image-extra-4\.19\.0-11-amd64$"; + "^linux-headers-4\.19\.0-13-amd64$"; "^linux-image-extra-4\.19\.0-12-amd64$"; - "^linux-modules-4\.19\.0-11-amd64$"; + "^linux-image-extra-4\.19\.0-13-amd64$"; "^linux-modules-4\.19\.0-12-amd64$"; - "^linux-modules-extra-4\.19\.0-11-amd64$"; + "^linux-modules-4\.19\.0-13-amd64$"; "^linux-modules-extra-4\.19\.0-12-amd64$"; - "^linux-signed-image-4\.19\.0-11-amd64$"; + "^linux-modules-extra-4\.19\.0-13-amd64$"; "^linux-signed-image-4\.19\.0-12-amd64$"; - "^linux-image-unsigned-4\.19\.0-11-amd64$"; + "^linux-signed-image-4\.19\.0-13-amd64$"; "^linux-image-unsigned-4\.19\.0-12-amd64$"; - "^kfreebsd-image-4\.19\.0-11-amd64$"; + "^linux-image-unsigned-4\.19\.0-13-amd64$"; "^kfreebsd-image-4\.19\.0-12-amd64$"; - "^kfreebsd-headers-4\.19\.0-11-amd64$"; + "^kfreebsd-image-4\.19\.0-13-amd64$"; "^kfreebsd-headers-4\.19\.0-12-amd64$"; - "^gnumach-image-4\.19\.0-11-amd64$"; + "^kfreebsd-headers-4\.19\.0-13-amd64$"; "^gnumach-image-4\.19\.0-12-amd64$"; - "^.*-modules-4\.19\.0-11-amd64$"; + "^gnumach-image-4\.19\.0-13-amd64$"; "^.*-modules-4\.19\.0-12-amd64$"; - "^.*-kernel-4\.19\.0-11-amd64$"; + "^.*-modules-4\.19\.0-13-amd64$"; "^.*-kernel-4\.19\.0-12-amd64$"; - "^linux-backports-modules-.*-4\.19\.0-11-amd64$"; + "^.*-kernel-4\.19\.0-13-amd64$"; "^linux-backports-modules-.*-4\.19\.0-12-amd64$"; - "^linux-modules-.*-4\.19\.0-11-amd64$"; + "^linux-backports-modules-.*-4\.19\.0-13-amd64$"; "^linux-modules-.*-4\.19\.0-12-amd64$"; - "^linux-tools-4\.19\.0-11-amd64$"; + "^linux-modules-.*-4\.19\.0-13-amd64$"; "^linux-tools-4\.19\.0-12-amd64$"; - "^linux-cloud-tools-4\.19\.0-11-amd64$"; + "^linux-tools-4\.19\.0-13-amd64$"; "^linux-cloud-tools-4\.19\.0-12-amd64$"; - "^linux-buildinfo-4\.19\.0-11-amd64$"; + "^linux-cloud-tools-4\.19\.0-13-amd64$"; "^linux-buildinfo-4\.19\.0-12-amd64$"; - "^linux-source-4\.19\.0-11-amd64$"; + "^linux-buildinfo-4\.19\.0-13-amd64$"; "^linux-source-4\.19\.0-12-amd64$"; + "^linux-source-4\.19\.0-13-amd64$"; }; /* Debug information: # dpkg list: -ii linux-image-4.19.0-10-amd64 4.19.132-1 amd64 Linux 4.19 for 64-bit PCs (signed) -ii linux-image-4.19.0-11-amd64 4.19.146-1 amd64 Linux 4.19 for 64-bit PCs (signed) -iF linux-image-4.19.0-12-amd64 4.19.152-1 amd64 Linux 4.19 for 64-bit PCs (signed) -iU linux-image-amd64 4.19+105+deb10u7 amd64 Linux for 64-bit PCs (meta-package) +ii linux-image-4.19.0-11-amd64 4.19.146-1 amd64 Linux 4.19 for 64-bit PCs (signed) +ii linux-image-4.19.0-12-amd64 4.19.152-1 amd64 Linux 4.19 for 64-bit PCs (signed) +iF linux-image-4.19.0-13-amd64 4.19.160-2 amd64 Linux 4.19 for 64-bit PCs (signed) +iU linux-image-amd64 4.19+105+deb10u8 amd64 Linux for 64-bit PCs (meta-package) # list of installed kernel packages: -4.19.0-10-amd64 4.19.132-1 4.19.0-11-amd64 4.19.146-1 4.19.0-12-amd64 4.19.152-1 +4.19.0-13-amd64 4.19.160-2 # list of different kernel versions: +4.19.160-2 4.19.152-1 4.19.146-1 -4.19.132-1 -# Installing kernel: 4.19.152-1 (4.19.0-12-amd64) -# Running kernel: 4.19.146-1 (4.19.0-11-amd64) -# Last kernel: 4.19.152-1 -# Previous kernel: 4.19.146-1 +# Installing kernel: 4.19.160-2 (4.19.0-13-amd64) +# Running kernel: 4.19.152-1 (4.19.0-12-amd64) +# Last kernel: 4.19.160-2 +# Previous kernel: 4.19.152-1 # Kernel versions list to keep: -4.19.146-1 4.19.152-1 +4.19.160-2 # Kernel packages (version part) to protect: -4\.19\.0-11-amd64 4\.19\.0-12-amd64 +4\.19\.0-13-amd64 */ diff --git a/debian_version b/debian_version index 12c0281..4e74f9f 100644 --- a/debian_version +++ b/debian_version @@ -1 +1 @@ -10.6 +10.7 diff --git a/iptables/rules.v4 b/iptables/rules.v4 index 522453c..54a6d03 100644 --- a/iptables/rules.v4 +++ b/iptables/rules.v4 @@ -1,11 +1,15 @@ -# Generated by xtables-save v1.8.2 on Sat Sep 28 01:00:09 2019 +# Generated by xtables-save v1.8.2 on Wed Jan 6 12:53:13 2021 *filter :INPUT DROP [0:0] :FORWARD DROP [0:0] -:OUTPUT ACCEPT [733:94402] +:OUTPUT ACCEPT [46:9776] :icinga2 - [0:0] :mysql - [0:0] :rejects - [0:0] +:f2b-postfix - [0:0] +:f2b-ssh - [0:0] +-A INPUT -p tcp -m multiport --dports 22 -j f2b-ssh +-A INPUT -p tcp -m multiport --dports 25,465,587 -j f2b-postfix -A INPUT -s 220.192.0.0/12 -p tcp -m multiport --dports 80,443,25,587,110,995,143,993,4190 -j REJECT --reject-with icmp-port-unreachable -A INPUT -s 222.184.0.0/13 -p tcp -m multiport --dports 22 -j REJECT --reject-with icmp-port-unreachable -A INPUT -s 220.192.0.0/12 -p tcp -m multiport --dports 22 -j REJECT --reject-with icmp-port-unreachable @@ -54,13 +58,19 @@ -A rejects -p udp -m udp --dport 5060 -j REJECT --reject-with icmp-port-unreachable -A rejects -p tcp -m tcp --dport 5060 -j REJECT --reject-with icmp-port-unreachable -A rejects -p tcp -m tcp --dport 8080 -j REJECT --reject-with icmp-port-unreachable +-A f2b-postfix -s 96.44.162.82/32 -j REJECT --reject-with icmp-port-unreachable +-A f2b-postfix -j RETURN +-A f2b-ssh -s 112.85.42.112/32 -j REJECT --reject-with icmp-port-unreachable +-A f2b-ssh -s 112.85.42.110/32 -j REJECT --reject-with icmp-port-unreachable +-A f2b-ssh -s 106.52.26.50/32 -j REJECT --reject-with icmp-port-unreachable +-A f2b-ssh -j RETURN COMMIT -# Completed on Sat Sep 28 01:00:09 2019 -# Generated by xtables-save v1.8.2 on Sat Sep 28 01:00:09 2019 +# Completed on Wed Jan 6 12:53:13 2021 +# Generated by xtables-save v1.8.2 on Wed Jan 6 12:53:13 2021 *nat -:PREROUTING ACCEPT [0:0] -:INPUT ACCEPT [0:0] -:POSTROUTING ACCEPT [0:0] -:OUTPUT ACCEPT [0:0] +:PREROUTING ACCEPT [1:60] +:INPUT ACCEPT [1:60] +:POSTROUTING ACCEPT [6:442] +:OUTPUT ACCEPT [6:442] COMMIT -# Completed on Sat Sep 28 01:00:09 2019 +# Completed on Wed Jan 6 12:53:13 2021 diff --git a/iptables/rules.v6 b/iptables/rules.v6 index b79fdea..2b0c11a 100644 --- a/iptables/rules.v6 +++ b/iptables/rules.v6 @@ -1,4 +1,4 @@ -# Generated by xtables-save v1.8.2 on Sat Sep 28 01:00:09 2019 +# Generated by xtables-save v1.8.2 on Wed Jan 6 12:53:13 2021 *filter :INPUT DROP [0:0] :FORWARD ACCEPT [0:0] @@ -25,4 +25,4 @@ -A mysql -j NFLOG --nflog-prefix "IPv6 MySQL Reject " --nflog-threshold 1 -A mysql -j REJECT --reject-with icmp6-port-unreachable COMMIT -# Completed on Sat Sep 28 01:00:09 2019 +# Completed on Wed Jan 6 12:53:13 2021