Hack The Sec-Leading Resource Of Linux Tutorial: ICANN

<div dir="ltr" style="text-align: left;" trbidi="on">
<span style="font-family: inherit; font-size: x-large;"><b><u>Block Email from certain TLDs (Top Level Domains) in ISPConfig</u></b></span><span style="font-family: "times" , "times new roman" , serif; font-size: large;">Spam is an annoyance and there's a multitude of ways to counteract it. However spammers also get smarter and try to bypass filters and stuff. In addition, ICANN has lately approved a great mean gTLDs (generic Top Level Domains), like .biz, .info etc. Some of those gTLDs are, in my opinion, exclusive used by spammers. Lately, I have gotten a lot of spam from the .xyz gTLD. So the question was, how to block email coming from such domains using that gTLD.</span><br />
<span style="font-family: "times" , "times new roman" , serif; font-size: large;">ISPConfig offers some global filters and they can be used to block all such emails and I'll show you how to do that.</span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhIJWQ3LnvWCsgMo0Zo7-ukbmX3P0GQXSRL4rxc8EBm4iLa8DMEA9cYYVEKMr9KNBjXykaGjWMQFHNNjC5LNHPvn0084fkzE15mB0rQO2_H98gbgNoRO7L2rCllZoelB1JNOiFN6fz5_oeG/s1600/how_to_block_emails_www.hackthesec.co.in.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhIJWQ3LnvWCsgMo0Zo7-ukbmX3P0GQXSRL4rxc8EBm4iLa8DMEA9cYYVEKMr9KNBjXykaGjWMQFHNNjC5LNHPvn0084fkzE15mB0rQO2_H98gbgNoRO7L2rCllZoelB1JNOiFN6fz5_oeG/s1600/how_to_block_emails_www.hackthesec.co.in.jpg" /></a></div>
<span style="font-family: "times" , "times new roman" , serif; font-size: large;"><br /></span>
<span style="color: #0b5394; font-family: "georgia" , "times new roman" , serif; font-size: large;"><u><b>Log into ISPConfig as Administrator</b></u></span><br />
<span style="font-family: "times" , "times new roman" , serif; font-size: large;">The first thing you have to do is to login into ISPConfig with an admin account. The reason for this is that the global filters are being modified.</span><br />
<span style="color: #0b5394; font-family: "georgia" , "times new roman" , serif; font-size: large;"><b><u>Go to the Global Content Filters</u></b></span><br />
<span style="font-family: "times" , "times new roman" , serif; font-size: large;">Once you've logged in as administrator, go click on the Email tab in the top navigation menu and then from the left-hand menu select the Content Filter entry in the Global Filters section.</span><br />
<span style="color: #0b5394; font-family: "georgia" , "times new roman" , serif; font-size: large;"><b><u>Add new Content Filter</u></b></span><br />
<span style="color: #0b5394; font-family: "georgia" , "times new roman" , serif; font-size: large;"><b><u></u></b></span><br />
<span style="font-family: "times" , "times new roman" , serif; font-size: large;">Once the Postfix Header and Body Checks page is loaded, click on the button to Add new Content Filter</span><br />
<span style="color: #0b5394; font-family: "georgia" , "times new roman" , serif; font-size: large;"><b><u>Fill in the Filter form and submit</u></b></span><br />
<div>
<div>
<span style="font-family: "times" , "times new roman" , serif; font-size: large;">Now the Mail Content Filter form has been opened and you can set various things there.</span></div>
<div>
<span style="font-family: "times" , "times new roman" , serif; font-size: large;">1. You need to select the server.</span></div>
<div>
<span style="font-family: "times" , "times new roman" , serif; font-size: large;">2. Make sure to set Filter to Header Filter.</span></div>
<div>
<span style="font-family: "times" , "times new roman" , serif; font-size: large;">3. The Pattern: The Regexp. Pattern. This form field is actually used to check if the header contents of an email that contains the unwanted TLD. For the TLD .xyz you'll have to enter the following pattern:</span></div>
</div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 18.5667px; margin-bottom: 10px; overflow: auto; padding: 9.5px; white-space: pre-wrap; word-break: break-all; word-wrap: break-word;">/<.+?@.+?\.xyz>/</pre>
</div>
<div>
<span style="font-family: "times" , "times new roman" , serif; font-size: large;">Let's split this up a bit. The forward slashes "/" are the limiters for the pattern. The "<" and ">" are literal strings. Email addresses are always enclosed in those brackets in the mail header. After the opening "<" the pattern looks for any number of characters, followed again by an "@". After the "@" it looks again for any number of characters until the literal string of ".xyz". The "." in that literal string is escaped, since a "." in regular expressions has a special meaning. By escaping it, we tell the parser, that it's a literal character and not the special regexp one. Finally, it looks for the closing bracket after the TLD. For those proficient with globs, one could say that this pattern is like "<*@*.xyz>"</span></div>
<div>
<span style="font-family: "times" , "times new roman" , serif; font-size: large;"><br /></span></div>
<div>
<span style="font-size: large;"></span><br />
<div>
<span style="font-size: large;"><span style="font-family: "times" , "times new roman" , serif;">The Data field can be left empty. However it will be logged into the mail log and also it can tell other mailservers why their email is being rejected. For this, it's a good thing to give it a meaningful entry, e.g. "No mail from .xyz gTLD allowed". By providing meaningful text it will make your life easier to figure out which filter rule is responsible for blocking an email. If someone complains about email not receiving, check the mail log and you'll see the reason (=Data field) for it.</span></span></div>
<span style="font-size: large;">
<div>
<span style="font-family: "times" , "times new roman" , serif;"><br /></span></div>
<div>
<span style="font-family: "times" , "times new roman" , serif;">4. you can set which Action to take if the pattern matches. The recommendations here are either Reject or Discard. Reject means, the mail won't be accepted by the mail server and the sending mail server will be informed about it with the Data form field given as reason as well. If you chose to use Discard, then the mail server will just delete the email.</span></div>
<div>
<span style="font-family: "times" , "times new roman" , serif;"><br /></span></div>
<div>
<span style="font-family: "times" , "times new roman" , serif;">5. Of course, Activate check box also needs to be checked. Otherwise this filter pattern isn't being processedand also press the Save button.</span></div>
</span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPN-pMoVsFqRDFlFBDy1wR_oZwSQYjNsEm84iUudctpAJ1cRec5ydriWYQaUaViRB1-M3rdQsy0QNelpGKr31pSiUDXFkQlBfd-LmB7RKQlUnWsdhtdWkxAJ-goVnN8wpi0yckqxmfoEwP/s1600/spam_block_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPN-pMoVsFqRDFlFBDy1wR_oZwSQYjNsEm84iUudctpAJ1cRec5ydriWYQaUaViRB1-M3rdQsy0QNelpGKr31pSiUDXFkQlBfd-LmB7RKQlUnWsdhtdWkxAJ-goVnN8wpi0yckqxmfoEwP/s1600/spam_block_www.hackthesec.co.in.png" /></a></div>
<span style="color: #0b5394; font-family: "georgia" , "times new roman" , serif; font-size: large;"><b><u><br /></u></b></span>
<span style="color: #0b5394; font-family: "georgia" , "times new roman" , serif; font-size: large;"><b><u>Repeat this for other TLDs</u></b></span><br />
<span style="font-family: "times" , "times new roman" , serif; font-size: large;">Repeat the above steps for other TLDs you want to have blocked. Since you already have one entry, you can just easily copy the Regexp. Pattern and adjust the according tld text string there.</span><br />
<span style="font-family: "times" , "times new roman" , serif; font-size: large;"><a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></span><br />
<br /></div>

How to Block Email from certain TLDs (Top Level Domains) in ISPConfig

Block Email from certain TLDs (Top Level Domains) in ISPConfig Spam is an annoyance and there's a multitude of ways to counteract it. H...

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 align="justify" class="post-title url" itemprop="headline name" style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: inherit; font-stretch: inherit; font-weight: inherit; line-height: 15px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<a class="url entry-title" href="http://www.hackthesec.co.in/2015/08/global-internet-authority-icann-hacked.html" itemprop="url" rel="bookmark" style="border: 0px; color: #3d5a99; display: block; font-family: inherit; font-size: 28px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: 48px; margin: 0px; outline: 0px; padding: 3px 10px; text-align: left; text-decoration: none; vertical-align: baseline;">Global Internet Authority — ICANN Hacked Again!</a></h1>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">ICANN</b> (Internet Corporation for Assigned Names and Numbers) – the organisation responsible for allocating domain names and IP addresses for the Internet – <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">has been hacked</b>, potentially compromising its customers’ names, email addresses, hashed passwords, and more.</div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
The US-administered non-profit corporation <a href="https://www.icann.org/news/announcement-2015-08-05-en" rel="nofollow" style="border: 0px; color: #3d5a99; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">admitted</a> on Wednesday that its server security was breached within the past week and that…</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyeyKkX0uhNsyX827rcmelkRVTbrgRbDJkFGUygFsVx92ByydxRYoI3RRKK8A1Rj7ZgxDIbgtSHTv1JhcxcV7Fo3hPIvu0EN4wgcsqHS6eLlUB-l52yS8eBFPXHy1rE0vYzAM55z9OZQo/s1600/icann-website-hacked.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyeyKkX0uhNsyX827rcmelkRVTbrgRbDJkFGUygFsVx92ByydxRYoI3RRKK8A1Rj7ZgxDIbgtSHTv1JhcxcV7Fo3hPIvu0EN4wgcsqHS6eLlUB-l52yS8eBFPXHy1rE0vYzAM55z9OZQo/s1600/icann-website-hacked.png" /></a></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br /></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
…an "<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">unauthorised person</i>" <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">gained access to usernames</b>,<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> email addresses</b></i>, and encrypted passwords for profile accounts on <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">ICANN.org</i> public website.</div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
The organisation believes that the leaked information includes harmless information such as user preferences, public biographies, interests, newsletters, and subscriptions.</div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Less than ten months ago, ICANN was hacked by a hacker who gained access to its internal system following a spear phishing attack in November last year. Employees were tricked into handing over their credentials after receiving malicious emails apparently sent from the ICANN's own domain.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
With those details, the hackers then managed to access ICANN systems, including the <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Centralized Zone Data System</i></b> (CZDS), the <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">domain registration Whois portal</i></b>, the wiki pages of the ICANN<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Governmental Advisory Committee</i></b> (GAC), and ICANN blog.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The passwords compromised in the latest data breach were encrypted one-way using the bcrypt algorithm.</div>
<blockquote class="tr_bq" style="background-color: #f9f9f9; border-left-color: rgb(191, 202, 218); border-left-style: solid; border-width: 0px 0px 0px 8px; font-stretch: inherit; margin: 10px; outline: 0px; padding: 10px; quotes: none; vertical-align: baseline;">
<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"These encrypted passwords (hashes) are not easy to reverse,"</i> ICANN said, <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"but as a precaution we [require] that all users reset their passwords."</i></blockquote>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
However, there's no evidence that any profile accounts, or its internal systems have been accessed without authorization, nor any operational data, financial data, or <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">IANA (Internet Assigned Numbers Authority) systems</i></b> were involved.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The IANA is also a part of ICANN, which performs the actual management of the DNS root zone, globally-unique names and numbers.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Users are recommended to change their online account passwords, or just not using the same password across multiple websites.</div>
</div>
</div>