[CB] - Changed Behaviour
- new REST API calls
- source types
- keep source in the hot cache
- Fixed issue #35
- Configuration hot cache time per source
- [CB] By default only TLSv1.2 and TLSv1.3 are supported. If you need to downgrade to TLSv1.1 (not recommended) or support only TLSv1.3 update TLSVersion parameter in include/ioc2rpz.hrl
- [CB] A default timeout (SourcePullTimeout - 5 minutes) was added to limit time for fetching feeds/sources via http/https/ftp.
- [CB] IoC lookup REST API call. The submitted indicator converted to lowcase before the lookups.
- [CB] IoC lookup REST API call output was modified
- [CB] Regex expressions were updated to match any type of newline string chars "{newline, any}"
- IoC lookup REST API call
- Bug #20. Whitelists didn't work.
- Bug with updating zones (broken packets after AXFR and wildcard rule after IXFR). It is recommended to upgrade to the newest release.
- DoH (DNS over HTTPs) for SOA requests.
- [CB] Filtering out indicators with illegal chars (ioc2rpz:clean_labels). Performance should be validated.
- Bug. Incremental update. Indicators w/o expiration date were not added to a zone.
- Fixed bug #17 "Full zone update brakes a zone and next incremental updates do not add new indicators".
-IPv4/IPv6 networks detection in IOCs for mixed zones -IPv6 localhost network detection in IOCs
- RPZ statistics collected: # rules and # indicators
- Released v1.0.0.0
- Bug fixes related to IXFR zone update and transfer
- [CB] Source IXFR update "from" time will be keept the same until we get "non zero" update.
- Retry for unavailable sources (see ioc2rpz.hrl)
- IXFR table management optimization
- Fixed bugs:
- #10 "redirect_domain add zone name"
- live zones, wrong records count in the hot cache
- Rule generation code was optimized
- Configuration can be split by multiple files using "include"
- Key groups for RPZs and SRV
- REST API
- added rebar3 to manage dependencies
- bug with configuration reload
- DoT (DNS over TLS) support for zone transfer, SOA and management requests (DNS Notify is not supported).
- UDP service moved under supervisor
- [CB] Connection and key validation log messages were formated in CEF
- Request to reload TSIG keys list only.
- IPv6 support
- Configuration file name and IPs are moved to an app config file
- concurent zone creation in a cache
- [CB] tcp_send errors handeling
- Query class and type in text in the logs
#- [CB] Individual indicators are converted into low case instead of converting a full source file. It was updated because of possible issues with REGEX. #It is require more memory. If memory is limited uncomment marked lines in ioc2rpz_conn.erl.
Added a reference to ioc2rpz.gui No code change
Initial release