A service holds open more than its program and libraries. Address lists, certificates and signature databases are also upgraded by packages.
lab-guard tells the shop whether to let in a client with a given address: allow or deny. The list of blocked addresses comes in a separate package, lab-guard-rules. Last night it was upgraded: 203.0.113.7, the source of a password brute force, was added to the list. After the upgrade needrestart did not name lab-guard.
Apply the new address list
lab-guard still lets through an address from the upgraded list: curl -s 'http://127.0.0.1:8091/check?ip=203.0.113.7' prints allow. Make the service apply the new list.
Goals · 0 of 2
- Deny access to 203.0.113.7 not done yet
- Keep lab-guard running and free of deleted files not done yet