Plain text export

[analytically]

Being able to curl a simple IP, plain text list to feed to haproxy would be great.

137.175.0.1
142.0.128.33
142.4.96.44

[joshrendek]

@analytically What is the purpose of exporting this to Haproxy?

[analytically]

Automatically blocking IPs that tried SSH access.

[analytically]

Eg. https://github.com/jvehent/haproxy-aws/blob/master/haproxy.cfg#L70

[analytically]

It'd also be good if the IP addresses in there are unique.

[joshrendek]

@analytically sure i can get this whipped up - would you mind providing a smaller haproxy cfg for people to use so I can add it to the docs as an example usage?

[analytically]

Sure:

First, curl the file:
curl -s -f -o /etc/haproxy/sshpot-blacklist.txt http://sshpot.com/api/ssh_logins.txt

Then:

global
    log 127.0.0.1   local0
    log 127.0.0.1   local1 notice
    maxconn 4096
    user haproxy
    group haproxy
    daemon

defaults
    log global
    mode    http
    option forwardfor
    option http-server-close
    stats enable

frontend http-in
    bind *:80
    tcp-request content reject if { src -f /etc/haproxy/sshpot-blacklist.txt }
    reqadd X-Forwarded-Proto:\ http
    default_backend application-backend

backend application-backend
    # put your application server ip address here
    server node1 10.0.0.1 check inter 1000