OpenBLD.net
237 subscribers
121 photos
1 file
153 links
Official OpenBLD.net Service Channel
OpenBLD+, Feedback, another questions - @sysadminkz
Download Telegram
📢. Как "я мог попасть в бан" OpenBLD.net?

Автоматически попасть можно по нескольким причинам:

🔹 Нарушение правил лимита (например зафиксирован брутфорс доменов или у Вас завелась малварь и начинает активно юзать С2 коммуникации)
🔹 Попадание IP в DNSBL листы
🔹 "Вот этими вот самыми" руками 🙌 (то бишь моими)

Иногда это может быть ошибочное срабатывание, не переживайте, если ADA или RIC сервера не пингуются, а сайты перестали загружаться. 90% случаев это бан, что можно сделать в этом случае?

🔸 Написать мне, указать свой внешний IP, время. когда замечена была проблема и какой сервис недостпен ADA / BLD. Мы постараемся совместно решить вопрос.
🔸 Посмотреть статус OpenBLD.net сервисов, вдруг действительно, что то случилось и связаться со мной

99% аптайм - хороший показатель, но безопасность и скорость, тоже важные показатели, давайте учитывать это вместе.

Всем спасибо кто пользуется и остается в фокусе и за понимание, кто еще не пользуется - welcome, донаты приветствуются, контакты здесь. Всем Peace ✌️
Please open Telegram to view this post
VIEW IN TELEGRAM
👍4
They (Blender project) also fought with massive DDoS.. Let me remind you that I fought and still fight with shit traffic flying to OpenBLD.net side ..)

https://www.blender.org/news/cyberattack-november-2023/

I think it was correlated with this included… because high traffic flew and continues to fly from BR..:

https://www.trendmicro.com/en_us/research/23/k/parasitesnatcher-how-malicious-chrome-extensions-target-brazil-.html

Hold on, my friends, peace to all✌️
Дополнение от OpenBLD.net для Chrome, Brave

Лайтовый экстеншн, дополняет сервис, блокируя часть рекламы вшитую в URL'ы корневых доменов.

Чистит ресурсы которые используют рекламные сети без явных принадлежностей к тем или иным поддоменам.

Не имеет внешних, или иных подключений, не собирает данные, идеально дополняет DoH/DoT OpenBLD.net сервис.

Видео, как в принципе помогает жить OpenBLD.net приложено там-же на странице.

Пробуем. Наслаждаемся. Фидбечим:

https://chromewebstore.google.com/detail/openbldnet-blocker/jjpjcmckhkcefefgbgghomdhcbfmklea
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥5
🏄‍♂️ Обновление OpenBLD.net Экосистемы → Скорость

Обновление можно назвать экспериментальным, так как часть устоявшихся стабильных системных установок пришлось переработать, что в итоге дало прирост в скорости отклика на ~10ms 🔩

Что еще. В DoH RIC добавилась опция "all" т.е. можно пробовать использовать DoH DNS без фильтрации. Этот эксперимент, в случае успешности может привести к DoH RIC с опцией "children" где будет меньше "синего кита", "наркотиков", "сект".

Именно скорость, безопасность получаемого контента формируют наше внутреннее состояние. Стабильное удержание такого отклика с течением времени нужно наблюдать, так как часть изменений экспериментальны, успех зависит буквально от нас всех.

Как попробовать. Просто настрой браузер, используй какое-то время, если что-то не будет работать, приходи сразу ко мне @sysadminkz

Станешь ты лучшей частью того, что уже есть, все зависит конкретно от тебя, твоего фидбека. Задумайся об этом. Peace ✌️
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥3👍2🥰21
⚙️ GetMyIP from Sys-Admin

Наконец-то запилил службу, которая возвращает внешний IP по curl или в браузере.

Возможности:
- Может возвращать реальный IP даже если клиент ходит через Cloudflare
- Быстрый. написан на Go
- IP можно смотреть через браузер или curl или wget

Curl: curl https://getmyip.sys-adm.in
Wget: wget -qO- https://getmyip.sys-adm.in

up
you can use curl ip.sys-adm.in
Please open Telegram to view this post
VIEW IN TELEGRAM
👍3🍾1
📢 OpenBLD.net IPv6 Pre-Release Testing

Last week, last month, this year... I've been meeting and talking to different people, and they all echoed the same sentiment - IPv6 is needed 💯

A few days ago, I got acquainted with VEESP.com, a company that generously provided OpenBLD.net with an incredibly fast server featuring a high-speed Ethernet connection 🛞

Abstract: Usually, I spend some time testing servers, then assign them a secondary role before introducing them to the production environment. However, this time was different...

I was so impressed 😱 with the veesp.com server's speed that it practically flew into production almost immediately... )

I believe this is a great opportunity to start exploring the IPv6 space. In this month or early 2024, I hope we can begin experimenting with IPv6!

If you're ready to participate in the preliminary testing, please let me know through this OpenBLD.net Pre-Release Testing Form. I will reach out to you directly when the time comes, and together we can strive to make this world even better 🌱

P.S. Thanks to veesp.com and everyone who gives incentive to take a step forward 🤝
Please open Telegram to view this post
VIEW IN TELEGRAM
👍2🔥2🤩1🤝1
OpenBLD.net pinned a photo
📢 serversAwesome

In OpenBLD.net scoping activities, I created lite Go app - Awesome Servers Inventory Web App, which is a simple web app to manage your servers inventory. Ideal solution for small projects and infrastructures or IT ecosystems.

Features:

- Add new server
- Edit existing server
- Delete existing server
- Copy server IP details to clipboard
- Yaml config file
- Portable sqLite database
- One binary file to run the app

- https://github.com/m0zgen/serversAwesome
Please open Telegram to view this post
VIEW IN TELEGRAM
👍2🥰2
⚠️ ⚠️ Notice: Yo! I developed and now I'm implementing new realtime anti-brutforce/anti-flood tool for OpenBLD.net DNS:

And if you have VPS which you are using with OpenBLD.net (like as VPN server), notice to me abouth this, I'll add your VPS to OpenBLD whitelisted IP set range.
Please open Telegram to view this post
VIEW IN TELEGRAM
/ Pyng3

Few days ago I wrote small response statistics tool for specified IPs list...

Now, I use this tool (apart from iperf)for determine fast internal routing between OpenBLD.net ecosystem server members.

https://github.com/m0zgen/pyng3

Enjoy)
😡 Realtime anti-brutforce/anti-flood implementation

Earlier I noticed about of new prevention mechanisms development.

Now, I'll deploy it on to OpenBLD.net servers.

*Key geatures*:

- Realtime not affect speed responce
- Permanent, longterm ban
- Generating DNSBL
- Notifying all OpenBLD.net members about of detecting
- Cenralizied ban
- Centralized whitelisting and exception lists
- Special accent 🟡: for clients from public clouds, and especially cheap ones cloud (which actors uses for btuteforcing and DDoS attack))

I remind you - if you have VPS, EC2 and etc for legitimate OpenBLD.net using, I can whitelisting it, just keep this in mind. Peace ✌️
Please open Telegram to view this post
VIEW IN TELEGRAM
Millions of fake VPN installations are no longer a joke. Kazakhstan has become more often subject to the attention of actors, but we are also trying to stay awake... or are we not trying?))

С2 domains already sended to OpenBLD.net 😡

https://t.me/sysadm_in_channel/4986
Please open Telegram to view this post
VIEW IN TELEGRAM
This media is not supported in your browser
VIEW IN TELEGRAM
🚀 Glad to present the new release zDNS v0.1.3! 🎉

Following Zero Trust practices, I recently wrote and am slowly beginning to introduce new “blackhole” functionality into the OpenBLD.net DNS ecosystem

zDNS is a DNS server that puts security and control over DNS queries at the center. With new functionality, zDNS now supports regular expressions in hosts.txt files, allowing more flexibility in configuring allowed queries. Now you can use the power of regular expressions to precisely control permissions, including subdomains and patterns.

Main features:

🛑 Denies all DNS queries by default.
Allows you to configure allowed requests through the hosts.txt file.
🔄 Uses balancing strategies to ensure reliable operation with DNS servers.
🛠Easily customizable via YAML configuration.
🔜 Prometheus metrics coming soon

Additional protection of your infrastructure or testing requests with zDNS is possible and may be useful to you! Download the latest version here and start using a DNS server with powerful customization options:

https://github.com/m0zgen/zdns/tree/dev

#zDNS #DNS #Security #Release #News
👍4
Let’s Get Ready to Rumble!!

Let the leap year 🎄 bring only high profits and high success!)) Peace ✌️
Please open Telegram to view this post
VIEW IN TELEGRAM
1
Open Thank You Message.

First of all, thanks to all users of the OpenBLD.net service. Thank you for trusting, service using, contributing and providing feedback.

Some companies, like the people in them, also trust the service and support it with system resources and OSS licenses, which allows the service to grow, be faster, and expand points of presence around the world.

Thanks everyone. I also wrote an Open Tnak You Letter in my blog post to everyone who supported.

Everyone who wants to support, add their logo or name to the project website, support the OpenBLD.net project and receive this benefits.

Peace to all ✌️
👍52
Deceptive Lumma Variant Spreads Distributed on YouTube

Lumma stealer variant and attack method via YouTube, has been known for some time, this stealer targets sensitive information, including user credentials, system details, browser data, and extensions.

The crafted installation ZIP file serves as an effective bait to deliver the payload, exploiting the user's intention to install the application and prompting them to click the installation file without hesitation. URLs from open-source websites throughout the scheme aim to diminish user awareness.

This stealer collect also telemetry! And now it's blocked in OpenBLD.net

Now you are an informed, dear OpenBLD user and hope you will be more careful with YouTube content in the future)

How to get started use OpenBLD.net - https://openbld.net/docs/category/get-started/
🥰2
⚙️ Notice. At current night will update ADA certs in OpenBLD.net ecosystem, it's won't affect anyone, just keep it in mind)
Please open Telegram to view this post
VIEW IN TELEGRAM
👍1
😡 OpenBLD.net growth with AlphaVPS

New OpenBLD points of presence have been added in the world thanks to AlphaVPS!

AlphaVPS.com - Fast & Cheap VPS, Cloud Servers and few servers from AlphaVPS stay which located in Bulgaria and Germany joined in to OpenBLD.net ecosystem.

As you know one of the our prioritites - fast DoH/DoT responses and 1GBit/s from AlphaVPS it is good base for this requirements.

One server already available for users (see status of Ada-h4), second server will be available in the next few days. Enjoy it 🚀

P.S. Few times ago I posted OpenBLD.net IPv6 Pre-Release notice, in few near weeks I'll plan implement DoH/DoT IPv6 for users in Europe, I'll tell about this later 😎...
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥21👍1
🚀 zDNS Released with Big Updates and Features

Few month ago I stared develop from scratch zDNS service, now it's can:

- Restrict DNS queries by type like as A, AAAA, HTTPS, CNAME, MX, PTR..
- Balancing DNS traffic between upstream servers
- Providing Prometheus metrics
- DNS responses caching by custom TTL
- Has few working modes - Zero Trust, Allow/Blocking
- Has separated "Permanent" mode with additional custom upstream DNS servers
- Can load allow/block lists from local and remote through HTTP(S)
- Create/Delete custom users with different configs and hosts files
- and more...

New opportunities, features, looking forward, and info about of new OpenBLD.net Personal Usage Testing pre-relase see here:

https://openbld.net/blog/zdns-big-updates-and-features/
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥4
Today I blocked new SCAM company targeted to Kazakhstan.

All malicious domains sended to OpenBLD.net.

Be careful - before clink on he link, view attentively before clink ))
🔥3👏1
Победа над рекламой на Overklockers!! 🎉

Изменения подйдут в следующий релиз дополнения Chrome, которое Google разрешил разместить своем магазине расширений)))

https://chromewebstore.google.com/detail/openbldnet-blocker/jjpjcmckhkcefefgbgghomdhcbfmklea
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥3👍2👏1