Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Phonehome: treat shield DNS #928

Closed
gsanchietti opened this issue Nov 20, 2024 · 3 comments
Closed

Phonehome: treat shield DNS #928

gsanchietti opened this issue Nov 20, 2024 · 3 comments
Labels
verified All test cases were verified successfully

Comments

@gsanchietti
Copy link
Member

Retrive usage info about threat shield DNS.

The stats can be used to estimate the usage of the feature. Stats to be collected:

  • status: enabled/disabled
  • number of community feeds enabled
  • number of enterprise feeds enabled
@gsanchietti gsanchietti converted this from a draft issue Nov 20, 2024
@gsanchietti gsanchietti added this to the NethSecurity 8.5 milestone Nov 20, 2024
gsanchietti added a commit to NethServer/python3-nethsec that referenced this issue Dec 9, 2024
Add functions to list DNS feeds and retrieve ad block status

NethServer/nethsecurity#928
@gsanchietti gsanchietti moved this from ToDo 🕐 to In Progress 🛠 in NethSecurity Dec 9, 2024
@stephdl
Copy link
Contributor

stephdl commented Dec 9, 2024

image to test: 8-23.05.5-ns.1.3.0-104-gaf4379a6

QA
install or update the testing image
to check if the DNS stats are added to inventory, you need to trigger in a terminal
/usr/sbin/inventory | jq

  • at first the adblock are set to default
    "adblock": {
      "enabled": false,
      "community": 5,
      "enterprise": 0
    },
  • enable and set some list
echo '{"enabled": true, "zones": ["lan"]}' | /usr/libexec/rpcd/ns.threatshield call dns-edit-settings
echo '{"blocklist": "malware_lvl2", "enabled": true}' | /usr/libexec/rpcd/ns.threatshield call dns-edit-blocklist | jq
echo '{"blocklist": "yoroi_susp_level2", "enabled": true}' | /usr/libexec/rpcd/ns.threatshield call dns-edit-blocklist | jq
uci commit adblock && service adblock restart

trigger inventory
/usr/sbin/inventory | jq
you will have a different state

    "adblock": {
      "enabled": true,
      "community": 5,
      "enterprise": 1
    },

@stephdl stephdl removed their assignment Dec 9, 2024
@stephdl stephdl added the testing Packages are available from testing repositories label Dec 9, 2024
@nethbot nethbot moved this from In Progress 🛠 to Testing in NethSecurity Dec 9, 2024
@gsanchietti gsanchietti self-assigned this Dec 10, 2024
@gsanchietti
Copy link
Member Author

Testing image: 23.05.5-ns.1.3.0-105-g24e911e5

Verified.

@gsanchietti gsanchietti removed their assignment Dec 10, 2024
@gsanchietti gsanchietti added verified All test cases were verified successfully and removed testing Packages are available from testing repositories labels Dec 10, 2024
@nethbot nethbot moved this from Testing to Verified in NethSecurity Dec 10, 2024
@gsanchietti
Copy link
Member Author

Released on 23.05.5-ns.1.4.0

@github-project-automation github-project-automation bot moved this from Verified to Done ✅ in NethSecurity Dec 18, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
verified All test cases were verified successfully
Projects
Archived in project
Development

No branches or pull requests

2 participants