diff options
Diffstat (limited to 'src')
-rw-r--r-- | src/firecfg/firecfg.config | 6 | ||||
-rw-r--r-- | src/firejail/appimage.c | 13 | ||||
-rw-r--r-- | src/firejail/fs.c | 4 | ||||
-rw-r--r-- | src/firejail/ls.c | 2 | ||||
-rw-r--r-- | src/firejail/main.c | 11 | ||||
-rw-r--r-- | src/firejail/paths.c | 18 | ||||
-rw-r--r-- | src/firejail/profile.c | 4 | ||||
-rw-r--r-- | src/firejail/sandbox.c | 3 | ||||
-rw-r--r-- | src/firejail/util.c | 2 | ||||
-rw-r--r-- | src/fnettrace/main.c | 10 | ||||
-rw-r--r-- | src/fnettrace/static-ip-map.txt | 454 | ||||
-rw-r--r-- | src/lib/syscall.c | 10 | ||||
-rw-r--r-- | src/man/firejail.1.in | 32 |
13 files changed, 530 insertions, 39 deletions
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index 7db4480b6..558fe51ed 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config | |||
@@ -101,6 +101,7 @@ bitwarden | |||
101 | bleachbit | 101 | bleachbit |
102 | blender | 102 | blender |
103 | blender-2.8 | 103 | blender-2.8 |
104 | blender-3.6 | ||
104 | bless | 105 | bless |
105 | blobby | 106 | blobby |
106 | blobwars | 107 | blobwars |
@@ -274,6 +275,7 @@ flacsplt | |||
274 | flameshot | 275 | flameshot |
275 | flashpeak-slimjet | 276 | flashpeak-slimjet |
276 | flowblade | 277 | flowblade |
278 | fluffychat | ||
277 | font-manager | 279 | font-manager |
278 | fontforge | 280 | fontforge |
279 | fossamail | 281 | fossamail |
@@ -480,6 +482,7 @@ kwrite | |||
480 | lbry-viewer | 482 | lbry-viewer |
481 | leafpad | 483 | leafpad |
482 | #less # breaks man | 484 | #less # breaks man |
485 | lettura | ||
483 | librecad | 486 | librecad |
484 | libreoffice | 487 | libreoffice |
485 | librewolf | 488 | librewolf |
@@ -822,13 +825,16 @@ telegram | |||
822 | telegram-desktop | 825 | telegram-desktop |
823 | telnet | 826 | telnet |
824 | terasology | 827 | terasology |
828 | termshark | ||
825 | tesseract | 829 | tesseract |
826 | textmaker18 | 830 | textmaker18 |
827 | textmaker18free | 831 | textmaker18free |
828 | thunderbird | 832 | thunderbird |
829 | thunderbird-beta | 833 | thunderbird-beta |
830 | thunderbird-wayland | 834 | thunderbird-wayland |
835 | tidal-hifi | ||
831 | tilp | 836 | tilp |
837 | tiny-rdm | ||
832 | tor-browser | 838 | tor-browser |
833 | tor-browser-ar | 839 | tor-browser-ar |
834 | tor-browser-ca | 840 | tor-browser-ca |
diff --git a/src/firejail/appimage.c b/src/firejail/appimage.c index a4f727c0a..bb20a0da6 100644 --- a/src/firejail/appimage.c +++ b/src/firejail/appimage.c | |||
@@ -43,6 +43,16 @@ int appimage_find_profile(const char *archive) { | |||
43 | assert(archive); | 43 | assert(archive); |
44 | assert(strlen(archive)); | 44 | assert(strlen(archive)); |
45 | 45 | ||
46 | // extract the name of the appimage from a full path | ||
47 | // example: archive = /opt/kdenlive-20.12.2-x86_64.appimage | ||
48 | const char *arc = strrchr(archive, '/'); | ||
49 | if (arc) | ||
50 | arc++; | ||
51 | else | ||
52 | arc = archive; | ||
53 | if (arg_debug) | ||
54 | printf("Looking for a %s profile\n", arc); | ||
55 | |||
46 | // try to match the name of the archive with the list of programs in /etc/firejail/firecfg.config | 56 | // try to match the name of the archive with the list of programs in /etc/firejail/firecfg.config |
47 | FILE *fp = fopen(SYSCONFDIR "/firecfg.config", "r"); | 57 | FILE *fp = fopen(SYSCONFDIR "/firecfg.config", "r"); |
48 | if (!fp) { | 58 | if (!fp) { |
@@ -56,7 +66,8 @@ int appimage_find_profile(const char *archive) { | |||
56 | char *ptr = strchr(buf, '\n'); | 66 | char *ptr = strchr(buf, '\n'); |
57 | if (ptr) | 67 | if (ptr) |
58 | *ptr = '\0'; | 68 | *ptr = '\0'; |
59 | if (strcasestr(archive, buf)) { | 69 | char *found = strcasestr(arc, buf); |
70 | if (found == arc) { | ||
60 | fclose(fp); | 71 | fclose(fp); |
61 | return profile_find_firejail(buf, 1); | 72 | return profile_find_firejail(buf, 1); |
62 | } | 73 | } |
diff --git a/src/firejail/fs.c b/src/firejail/fs.c index 182f26e53..28fecfb98 100644 --- a/src/firejail/fs.c +++ b/src/firejail/fs.c | |||
@@ -281,6 +281,8 @@ void fs_blacklist(void) { | |||
281 | if (!entry) | 281 | if (!entry) |
282 | return; | 282 | return; |
283 | 283 | ||
284 | timetrace_start(); | ||
285 | |||
284 | size_t noblacklist_c = 0; | 286 | size_t noblacklist_c = 0; |
285 | size_t noblacklist_m = 32; | 287 | size_t noblacklist_m = 32; |
286 | char **noblacklist = calloc(noblacklist_m, sizeof(*noblacklist)); | 288 | char **noblacklist = calloc(noblacklist_m, sizeof(*noblacklist)); |
@@ -463,6 +465,8 @@ void fs_blacklist(void) { | |||
463 | for (i = 0; i < noblacklist_c; i++) | 465 | for (i = 0; i < noblacklist_c; i++) |
464 | free(noblacklist[i]); | 466 | free(noblacklist[i]); |
465 | free(noblacklist); | 467 | free(noblacklist); |
468 | |||
469 | fmessage("Base filesystem installed in %0.2f ms\n", timetrace_end()); | ||
466 | } | 470 | } |
467 | 471 | ||
468 | //*********************************************** | 472 | //*********************************************** |
diff --git a/src/firejail/ls.c b/src/firejail/ls.c index f2ab1c188..6dc4904fc 100644 --- a/src/firejail/ls.c +++ b/src/firejail/ls.c | |||
@@ -154,7 +154,7 @@ static void print_file_or_dir(const char *path, const char *fname) { | |||
154 | 154 | ||
155 | // file size | 155 | // file size |
156 | char *sz; | 156 | char *sz; |
157 | if (asprintf(&sz, "%d", (int) s.st_size) == -1) | 157 | if (asprintf(&sz, "%jd", (intmax_t) s.st_size) == -1) |
158 | errExit("asprintf"); | 158 | errExit("asprintf"); |
159 | 159 | ||
160 | // file name | 160 | // file name |
diff --git a/src/firejail/main.c b/src/firejail/main.c index b0d5dac17..0c9c80137 100644 --- a/src/firejail/main.c +++ b/src/firejail/main.c | |||
@@ -420,7 +420,6 @@ static void run_cmd_and_exit(int i, int argc, char **argv) { | |||
420 | exit_err_feature("x11"); | 420 | exit_err_feature("x11"); |
421 | } | 421 | } |
422 | #endif | 422 | #endif |
423 | #ifdef HAVE_NETWORK | ||
424 | else if (strcmp(argv[i], "--nettrace") == 0) { | 423 | else if (strcmp(argv[i], "--nettrace") == 0) { |
425 | if (checkcfg(CFG_NETWORK)) { | 424 | if (checkcfg(CFG_NETWORK)) { |
426 | if (getuid() != 0) { | 425 | if (getuid() != 0) { |
@@ -524,8 +523,7 @@ static void run_cmd_and_exit(int i, int argc, char **argv) { | |||
524 | exit(0); | 523 | exit(0); |
525 | } | 524 | } |
526 | 525 | ||
527 | 526 | #ifdef HAVE_NETWORK | |
528 | |||
529 | else if (strncmp(argv[i], "--bandwidth=", 12) == 0) { | 527 | else if (strncmp(argv[i], "--bandwidth=", 12) == 0) { |
530 | if (checkcfg(CFG_NETWORK)) { | 528 | if (checkcfg(CFG_NETWORK)) { |
531 | logargs(argc, argv); | 529 | logargs(argc, argv); |
@@ -3217,13 +3215,18 @@ int main(int argc, char **argv, char **envp) { | |||
3217 | 3215 | ||
3218 | gid_t g; | 3216 | gid_t g; |
3219 | if (!arg_nogroups || !check_can_drop_all_groups()) { | 3217 | if (!arg_nogroups || !check_can_drop_all_groups()) { |
3220 | // add audio group | 3218 | // add audio groups |
3221 | if (!arg_nosound) { | 3219 | if (!arg_nosound) { |
3222 | g = get_group_id("audio"); | 3220 | g = get_group_id("audio"); |
3223 | if (g) { | 3221 | if (g) { |
3224 | sprintf(ptr, "%d %d 1\n", g, g); | 3222 | sprintf(ptr, "%d %d 1\n", g, g); |
3225 | ptr += strlen(ptr); | 3223 | ptr += strlen(ptr); |
3226 | } | 3224 | } |
3225 | g = get_group_id("pipewire"); | ||
3226 | if (g) { | ||
3227 | sprintf(ptr, "%d %d 1\n", g, g); | ||
3228 | ptr += strlen(ptr); | ||
3229 | } | ||
3227 | } | 3230 | } |
3228 | 3231 | ||
3229 | // add video group | 3232 | // add video group |
diff --git a/src/firejail/paths.c b/src/firejail/paths.c index 6bc6230f0..fea842d93 100644 --- a/src/firejail/paths.c +++ b/src/firejail/paths.c | |||
@@ -47,6 +47,16 @@ static void init_paths(void) { | |||
47 | errExit("calloc"); | 47 | errExit("calloc"); |
48 | memset(paths, 0, path_cnt * sizeof(char *)); // get rid of false positive error from GCC static analyzer | 48 | memset(paths, 0, path_cnt * sizeof(char *)); // get rid of false positive error from GCC static analyzer |
49 | 49 | ||
50 | // lots of distros set /bin as a symlink to /usr/bin; | ||
51 | // we remove /bin form the path to speed up path-based operations such as blacklist | ||
52 | int bin_symlink = 0; | ||
53 | p = realpath("/bin", NULL); | ||
54 | if (p) { | ||
55 | if (strcmp(p, "/usr/bin") == 0) | ||
56 | bin_symlink = 1; | ||
57 | } | ||
58 | free(p); | ||
59 | |||
50 | // fill in 'paths' with pointers to elements of 'path' | 60 | // fill in 'paths' with pointers to elements of 'path' |
51 | unsigned int i = 0, j; | 61 | unsigned int i = 0, j; |
52 | unsigned int len; | 62 | unsigned int len; |
@@ -62,6 +72,14 @@ static void init_paths(void) { | |||
62 | if (len == 0) | 72 | if (len == 0) |
63 | goto skip; | 73 | goto skip; |
64 | 74 | ||
75 | //deal with /bin - /usr/bin symlink | ||
76 | if (bin_symlink > 0) { | ||
77 | if (strcmp(elt, "/bin") == 0 || strcmp(elt, "/usr/bin") == 0) | ||
78 | bin_symlink++; | ||
79 | if (bin_symlink == 3) | ||
80 | goto skip; | ||
81 | } | ||
82 | |||
65 | // filter out duplicate entries | 83 | // filter out duplicate entries |
66 | for (j = 0; j < i; j++) | 84 | for (j = 0; j < i; j++) |
67 | if (strcmp(elt, paths[j]) == 0) | 85 | if (strcmp(elt, paths[j]) == 0) |
diff --git a/src/firejail/profile.c b/src/firejail/profile.c index bdaaed433..8cc5c1166 100644 --- a/src/firejail/profile.c +++ b/src/firejail/profile.c | |||
@@ -484,7 +484,7 @@ int profile_check_line(char *ptr, int lineno, const char *fname) { | |||
484 | #endif | 484 | #endif |
485 | return 0; | 485 | return 0; |
486 | } | 486 | } |
487 | else if (strncmp("dbus-user ", ptr, 10) == 0) { | 487 | else if (strncmp(ptr, "dbus-user ", 10) == 0) { |
488 | #ifdef HAVE_DBUSPROXY | 488 | #ifdef HAVE_DBUSPROXY |
489 | ptr += 10; | 489 | ptr += 10; |
490 | if (strcmp("filter", ptr) == 0) { | 490 | if (strcmp("filter", ptr) == 0) { |
@@ -551,7 +551,7 @@ int profile_check_line(char *ptr, int lineno, const char *fname) { | |||
551 | #endif | 551 | #endif |
552 | return 1; | 552 | return 1; |
553 | } | 553 | } |
554 | else if (strncmp("dbus-system ", ptr, 12) == 0) { | 554 | else if (strncmp(ptr, "dbus-system ", 12) == 0) { |
555 | #ifdef HAVE_DBUSPROXY | 555 | #ifdef HAVE_DBUSPROXY |
556 | ptr += 12; | 556 | ptr += 12; |
557 | if (strcmp("filter", ptr) == 0) { | 557 | if (strcmp("filter", ptr) == 0) { |
diff --git a/src/firejail/sandbox.c b/src/firejail/sandbox.c index 538f5be67..827be5d85 100644 --- a/src/firejail/sandbox.c +++ b/src/firejail/sandbox.c | |||
@@ -878,7 +878,8 @@ int sandbox(void* sandbox_arg) { | |||
878 | //**************************** | 878 | //**************************** |
879 | // appimage | 879 | // appimage |
880 | //**************************** | 880 | //**************************** |
881 | appimage_mount(); | 881 | if (arg_appimage) |
882 | appimage_mount(); | ||
882 | 883 | ||
883 | //**************************** | 884 | //**************************** |
884 | // private mode | 885 | // private mode |
diff --git a/src/firejail/util.c b/src/firejail/util.c index 970832b38..bd32181b5 100644 --- a/src/firejail/util.c +++ b/src/firejail/util.c | |||
@@ -207,6 +207,8 @@ static void clean_supplementary_groups(gid_t gid) { | |||
207 | if (!arg_nosound) { | 207 | if (!arg_nosound) { |
208 | copy_group_ifcont("audio", groups, ngroups, | 208 | copy_group_ifcont("audio", groups, ngroups, |
209 | new_groups, &new_ngroups, MAX_GROUPS); | 209 | new_groups, &new_ngroups, MAX_GROUPS); |
210 | copy_group_ifcont("pipewire", groups, ngroups, | ||
211 | new_groups, &new_ngroups, MAX_GROUPS); | ||
210 | } | 212 | } |
211 | 213 | ||
212 | if (!arg_novideo) { | 214 | if (!arg_novideo) { |
diff --git a/src/fnettrace/main.c b/src/fnettrace/main.c index 5a0b97e89..4db8e7478 100644 --- a/src/fnettrace/main.c +++ b/src/fnettrace/main.c | |||
@@ -308,6 +308,8 @@ static inline const char *common_port(uint16_t port) { | |||
308 | return "Tor"; | 308 | return "Tor"; |
309 | else if (port == 9030) | 309 | else if (port == 9030) |
310 | return "Tor"; | 310 | return "Tor"; |
311 | else if (port == 9040) | ||
312 | return "Tor"; | ||
311 | else if (port == 9050) | 313 | else if (port == 9050) |
312 | return "Tor"; | 314 | return "Tor"; |
313 | else if (port == 9051) | 315 | else if (port == 9051) |
@@ -506,16 +508,16 @@ static void print_stats(FILE *fp) { | |||
506 | 508 | ||
507 | fprintf(fp, "\n\nIP map"); | 509 | fprintf(fp, "\n\nIP map"); |
508 | if (fp == stdout) | 510 | if (fp == stdout) |
509 | ansi_faint(" - server-address network (packets)\n"); | 511 | ansi_faint(" - network (packets)\n"); |
510 | else | 512 | else |
511 | fprintf(fp, " - server-address network (packets)\n"); | 513 | fprintf(fp, " - network (packets)\n"); |
512 | radix_print(fp, 1); | 514 | radix_print(fp, 1); |
513 | 515 | ||
514 | fprintf(fp, "\n\nEvents %d", ev_cnt); | 516 | fprintf(fp, "\n\nEvents %d", ev_cnt); |
515 | if (fp == stdout) | 517 | if (fp == stdout) |
516 | ansi_faint(" - time address:port data\n"); | 518 | ansi_faint(" - time address data\n"); |
517 | else | 519 | else |
518 | fprintf(fp, " - time address:port data\n"); | 520 | fprintf(fp, " - time address data\n"); |
519 | ev_print(fp); | 521 | ev_print(fp); |
520 | 522 | ||
521 | } | 523 | } |
diff --git a/src/fnettrace/static-ip-map.txt b/src/fnettrace/static-ip-map.txt index fa6c74b62..aeac58c6a 100644 --- a/src/fnettrace/static-ip-map.txt +++ b/src/fnettrace/static-ip-map.txt | |||
@@ -188,6 +188,7 @@ | |||
188 | 104.244.40.0/21 Twitter | 188 | 104.244.40.0/21 Twitter |
189 | 108.160.160.0/20 Dropbox | 189 | 108.160.160.0/20 Dropbox |
190 | 108.175.32.0/20 Netflix | 190 | 108.175.32.0/20 Netflix |
191 | 129.144.0.0/12 Oracle | ||
191 | 129.134.0.0/16 Facebook | 192 | 129.134.0.0/16 Facebook |
192 | 140.82.112.0/20 GitHub | 193 | 140.82.112.0/20 GitHub |
193 | 143.55.64.0/20 GitHub | 194 | 143.55.64.0/20 GitHub |
@@ -221,7 +222,6 @@ | |||
221 | 185.125.188.0/22 Ubuntu One | 222 | 185.125.188.0/22 Ubuntu One |
222 | 185.199.108.0/22 GitHub | 223 | 185.199.108.0/22 GitHub |
223 | 185.205.69.0/24 Tutanota | 224 | 185.205.69.0/24 Tutanota |
224 | 185.238.113.0/24 Bitchute | ||
225 | 188.64.224.0/21 Twitter | 225 | 188.64.224.0/21 Twitter |
226 | 190.217.33.0/24 Steam | 226 | 190.217.33.0/24 Steam |
227 | 192.0.64.0/18 Wordpress | 227 | 192.0.64.0/18 Wordpress |
@@ -253,7 +253,12 @@ | |||
253 | 63.141.247.168/29 BitChute | 253 | 63.141.247.168/29 BitChute |
254 | 63.141.247.240/29 BitChute | 254 | 63.141.247.240/29 BitChute |
255 | 69.30.200.200/29 BitChute | 255 | 69.30.200.200/29 BitChute |
256 | 69.30.230.64/29 BitChute | ||
257 | 69.30.241.40/29 BitChute | ||
256 | 69.30.241.48/29 BitChute | 258 | 69.30.241.48/29 BitChute |
259 | 69.30.243.168/29 BitChute | ||
260 | 69.30.245.232/29 BitChute | ||
261 | 69.30.253.16/29 BitChute | ||
257 | 69.197.182.184/29 BitChute | 262 | 69.197.182.184/29 BitChute |
258 | 74.91.28.208/29 BitChute | 263 | 74.91.28.208/29 BitChute |
259 | 74.91.29.208/29 BitChute | 264 | 74.91.29.208/29 BitChute |
@@ -263,27 +268,40 @@ | |||
263 | 107.150.45.120/29 BitChute | 268 | 107.150.45.120/29 BitChute |
264 | 142.54.180.104/29 BitChute | 269 | 142.54.180.104/29 BitChute |
265 | 142.54.181.184/29 BitChute | 270 | 142.54.181.184/29 BitChute |
271 | 142.54.188.112/29 BitChute | ||
266 | 142.54.189.192/29 BitChute | 272 | 142.54.189.192/29 BitChute |
267 | 173.208.154.8/29 BitChute | 273 | 173.208.154.8/29 BitChute |
268 | 173.208.154.160/29 BitChute | 274 | 173.208.154.160/29 BitChute |
275 | 173.208.176.128/29 BitChute | ||
269 | 173.208.185.200/29 BitChute | 276 | 173.208.185.200/29 BitChute |
277 | 173.208.203.224/29 BitChute | ||
270 | 173.208.203.248/29 BitChute | 278 | 173.208.203.248/29 BitChute |
271 | 173.208.211.224/29 BitChute | 279 | 173.208.211.224/29 BitChute |
272 | 173.208.216.40/29 BitChute | 280 | 173.208.216.40/29 BitChute |
273 | 173.208.219.112/29 BitChute | 281 | 173.208.219.112/29 BitChute |
274 | 173.208.246.160/29 BitChute | 282 | 173.208.246.160/29 BitChute |
283 | 185.238.113.0/24 BitChute | ||
284 | 192.151.147.16/29 BitChute | ||
275 | 192.151.158.136/29 BitChute | 285 | 192.151.158.136/29 BitChute |
276 | 192.187.97.88/29 BitChute | 286 | 192.187.97.88/29 BitChute |
277 | 192.187.114.16/29 BitChute | 287 | 192.187.114.16/29 BitChute |
278 | 192.187.114.96/29 BitChute | 288 | 192.187.114.96/29 BitChute |
289 | 192.187.118.168/29 BitChute | ||
290 | 192.187.121.208/29 BitChute | ||
279 | 192.187.123.112/29 BitChute | 291 | 192.187.123.112/29 BitChute |
280 | 192.187.126.0/29 BitChute | 292 | 192.187.126.0/29 BitChute |
281 | 198.204.226.120/29 BitChute | 293 | 198.204.226.120/29 BitChute |
282 | 198.204.228.48/29 BitChute | 294 | 198.204.228.48/29 BitChute |
295 | 198.204.235.88/29 BitChute | ||
296 | 198.204.235.216/29 BitChute | ||
283 | 198.204.245.32/29 BitChute | 297 | 198.204.245.32/29 BitChute |
284 | 198.204.245.88/29 BitChute | 298 | 198.204.245.88/29 BitChute |
285 | 198.204.250.208/29 BitChute | 299 | 198.204.250.208/29 BitChute |
300 | 198.204.253.64/29 BitChute | ||
301 | 198.204.253.184/29 BitChute | ||
286 | 199.168.96.24/29 BitChute | 302 | 199.168.96.24/29 BitChute |
303 | 199.168.96.64/29 BitChute | ||
304 | 204.12.220.136/29 BitChute | ||
287 | 204.12.194.176/29 BitChute | 305 | 204.12.194.176/29 BitChute |
288 | 204.12.194.248/29 BitChute | 306 | 204.12.194.248/29 BitChute |
289 | 204.12.220.232/29 BitChute | 307 | 204.12.220.232/29 BitChute |
@@ -292,6 +310,7 @@ | |||
292 | # WholeSale Internet | 310 | # WholeSale Internet |
293 | 69.30.192.0/18 WholeSale Internet | 311 | 69.30.192.0/18 WholeSale Internet |
294 | 69.197.128.0/18 WholeSale Internet | 312 | 69.197.128.0/18 WholeSale Internet |
313 | 142.54.160.0/19 WholeSale Internet | ||
295 | 173.208.128.0/17 WholeSale Internet | 314 | 173.208.128.0/17 WholeSale Internet |
296 | 204.12.192.0/18 WholeSale Internet | 315 | 204.12.192.0/18 WholeSale Internet |
297 | 208.67.0.0/21 WholeSale Internet | 316 | 208.67.0.0/21 WholeSale Internet |
@@ -322,6 +341,7 @@ | |||
322 | 66.243.0.0/17 Level 3 | 341 | 66.243.0.0/17 Level 3 |
323 | 66.243.128.0/18 Level 3 | 342 | 66.243.128.0/18 Level 3 |
324 | 66.251.192.0/19 Level 3 | 343 | 66.251.192.0/19 Level 3 |
344 | 74.202.0.0/15 Level 3 | ||
325 | 205.128.0.0/14 Level 3 | 345 | 205.128.0.0/14 Level 3 |
326 | 205.180.0.0/14 Level 3 | 346 | 205.180.0.0/14 Level 3 |
327 | 205.184.0.0/19 Level 3 | 347 | 205.184.0.0/19 Level 3 |
@@ -350,6 +370,7 @@ | |||
350 | 69.16.173.0/24 StackPath | 370 | 69.16.173.0/24 StackPath |
351 | 69.16.174.0/23 StackPath | 371 | 69.16.174.0/23 StackPath |
352 | 69.16.176.0/20 StackPath | 372 | 69.16.176.0/20 StackPath |
373 | 74.209.128.0/20 StackPath | ||
353 | 151.139.0.0/16 StackPath | 374 | 151.139.0.0/16 StackPath |
354 | 205.185.194.0/23 StackPath | 375 | 205.185.194.0/23 StackPath |
355 | 205.185.196.0/23 StackPath | 376 | 205.185.196.0/23 StackPath |
@@ -379,6 +400,7 @@ | |||
379 | 45.79.0.0/16 Linode | 400 | 45.79.0.0/16 Linode |
380 | 50.116.0.0/18 Linode | 401 | 50.116.0.0/18 Linode |
381 | 66.175.208.0/20 Linode | 402 | 66.175.208.0/20 Linode |
403 | 74.207.224.0/19 Linode | ||
382 | 103.29.68.0/22 Linode | 404 | 103.29.68.0/22 Linode |
383 | 104.200.16.0/21 Linode | 405 | 104.200.16.0/21 Linode |
384 | 104.200.24.0/22 Linode | 406 | 104.200.24.0/22 Linode |
@@ -486,6 +508,7 @@ | |||
486 | 23.72.0.0/13 Akamai | 508 | 23.72.0.0/13 Akamai |
487 | 23.192.0.0/11 Akamai | 509 | 23.192.0.0/11 Akamai |
488 | 72.246.0.0/15 Akamai | 510 | 72.246.0.0/15 Akamai |
511 | 74.121.124.0/22 Akamai | ||
489 | 92.122.160.0/20 Akamai | 512 | 92.122.160.0/20 Akamai |
490 | 96.6.0.0/15 Akamai | 513 | 96.6.0.0/15 Akamai |
491 | 96.16.0.0/15 Akamai | 514 | 96.16.0.0/15 Akamai |
@@ -559,6 +582,7 @@ | |||
559 | 20.48.0.0/12 Microsoft | 582 | 20.48.0.0/12 Microsoft |
560 | 20.128.0.0/16 Microsoft | 583 | 20.128.0.0/16 Microsoft |
561 | 20.192.0.0/10 Microsoft | 584 | 20.192.0.0/10 Microsoft |
585 | 23.96.0.0/13 Microsoft | ||
562 | 40.76.0.0/14 Microsoft | 586 | 40.76.0.0/14 Microsoft |
563 | 40.96.0.0/12 Microsoft | 587 | 40.96.0.0/12 Microsoft |
564 | 40.112.0.0/13 Microsoft | 588 | 40.112.0.0/13 Microsoft |
@@ -567,11 +591,38 @@ | |||
567 | 40.80.0.0/12 Microsoft | 591 | 40.80.0.0/12 Microsoft |
568 | 40.120.0.0/14 Microsoft | 592 | 40.120.0.0/14 Microsoft |
569 | 40.125.0.0/17 Microsoft | 593 | 40.125.0.0/17 Microsoft |
594 | 51.4.0.0/15 Microsoft | ||
595 | 51.8.0.0/16 Microsoft | ||
596 | 51.10.0.0/14 Microsoft | ||
597 | 51.51.0.0/16 Microsoft | ||
598 | 51.53.0.0/16 Microsoft | ||
599 | 51.103.0.0/16 Microsoft | ||
600 | 51.107.0.0/16 Microsoft | ||
601 | 51.116.0.0/16 Microsoft | ||
602 | 51.120.0.0/16 Microsoft | ||
603 | 51.124.0.0/16 Microsoft | ||
604 | 51.132.0.0/16 Microsoft | ||
605 | 51.136.0.0/16 Microsoft | ||
606 | 51.140.0.0/15 Microsoft | ||
607 | 52.96.0.0/12 Microsoft | ||
608 | 52.112.0.0/14 Microsoft | ||
609 | 52.120.0.0/14 Microsoft | ||
610 | 52.125.0.0/16 Microsoft | ||
611 | 52.126.0.0/15 Microsoft | ||
612 | 52.132.0.0/14 Microsoft | ||
613 | 52.136.0.0/13 Microsoft | ||
570 | 52.145.0.0/16 Microsoft | 614 | 52.145.0.0/16 Microsoft |
615 | 52.146.0.0/15 Microsoft | ||
571 | 52.148.0.0/14 Microsoft | 616 | 52.148.0.0/14 Microsoft |
572 | 52.152.0.0/13 Microsoft | 617 | 52.152.0.0/13 Microsoft |
573 | 52.146.0.0/15 Microsoft | ||
574 | 52.160.0.0/11 Microsoft | 618 | 52.160.0.0/11 Microsoft |
619 | 52.224.0.0/11 Microsoft | ||
620 | 74.160.0.0/14 Microsoft | ||
621 | 74.176.0.0/14 Microsoft | ||
622 | 74.224.0.0/14 Microsoft | ||
623 | 74.234.0.0/15 Microsoft | ||
624 | 74.240.0.0/14 Microsoft | ||
625 | 74.248.0.0/15 Microsoft | ||
575 | 168.61.0.0/16 Microsoft | 626 | 168.61.0.0/16 Microsoft |
576 | 168.62.0.0/15 Microsoft | 627 | 168.62.0.0/15 Microsoft |
577 | 628 | ||
@@ -587,6 +638,7 @@ | |||
587 | 206.190.32.0/19 Yahoo | 638 | 206.190.32.0/19 Yahoo |
588 | 209.73.160.0/19 Yahoo | 639 | 209.73.160.0/19 Yahoo |
589 | 209.191.64.0/18 Yahoo | 640 | 209.191.64.0/18 Yahoo |
641 | 212.82.100.0/22 Yahoo | ||
590 | 216.115.96.0/20 Yahoo | 642 | 216.115.96.0/20 Yahoo |
591 | 643 | ||
592 | 644 | ||
@@ -596,6 +648,18 @@ | |||
596 | 8.35.192.0/20 Google | 648 | 8.35.192.0/20 Google |
597 | 23.236.48.0/20 Google | 649 | 23.236.48.0/20 Google |
598 | 23.251.128.0/19 Google | 650 | 23.251.128.0/19 Google |
651 | 34.4.16.0/20 Google | ||
652 | 34.4.64.0/18 Google | ||
653 | 34.4.6.0/23 Google | ||
654 | 34.16.0.0/12 Google | ||
655 | 34.32.0.0/11 Google | ||
656 | 34.4.128.0/17 Google | ||
657 | 34.8.0.0/13 Google | ||
658 | 34.4.8.0/21 Google | ||
659 | 34.5.0.0/16 Google | ||
660 | 34.6.0.0/15 Google | ||
661 | 34.4.32.0/19 Google | ||
662 | 34.4.5.0/24 Google | ||
599 | 34.64.0.0/10 Google | 663 | 34.64.0.0/10 Google |
600 | 34.128.0.0/10 Google | 664 | 34.128.0.0/10 Google |
601 | 35.184.0.0/13 Google | 665 | 35.184.0.0/13 Google |
@@ -1846,6 +1910,7 @@ | |||
1846 | 34.192.0.0/12 Amazon | 1910 | 34.192.0.0/12 Amazon |
1847 | 34.208.0.0/12 Amazon | 1911 | 34.208.0.0/12 Amazon |
1848 | 34.224.0.0/12 Amazon | 1912 | 34.224.0.0/12 Amazon |
1913 | 34.225.127.72/10 Amazon | ||
1849 | 34.240.0.0/13 Amazon | 1914 | 34.240.0.0/13 Amazon |
1850 | 34.248.0.0/13 Amazon | 1915 | 34.248.0.0/13 Amazon |
1851 | 35.71.64.0/22 Amazon | 1916 | 35.71.64.0/22 Amazon |
@@ -3394,7 +3459,7 @@ | |||
3394 | 54.93.0.0/16 Amazon | 3459 | 54.93.0.0/16 Amazon |
3395 | 54.94.0.0/16 Amazon | 3460 | 54.94.0.0/16 Amazon |
3396 | 54.95.0.0/16 Amazon | 3461 | 54.95.0.0/16 Amazon |
3397 | 54.144.0.0/14 Amazon | 3462 | 54.144.0.0/12 Amazon |
3398 | 54.148.0.0/15 Amazon | 3463 | 54.148.0.0/15 Amazon |
3399 | 54.150.0.0/16 Amazon | 3464 | 54.150.0.0/16 Amazon |
3400 | 54.151.0.0/17 Amazon | 3465 | 54.151.0.0/17 Amazon |
@@ -3405,7 +3470,7 @@ | |||
3405 | 54.154.0.0/16 Amazon | 3470 | 54.154.0.0/16 Amazon |
3406 | 54.155.0.0/16 Amazon | 3471 | 54.155.0.0/16 Amazon |
3407 | 54.156.0.0/14 Amazon | 3472 | 54.156.0.0/14 Amazon |
3408 | 54.160.0.0/13 Amazon | 3473 | 54.160.0.0/11 Amazon |
3409 | 54.168.0.0/16 Amazon | 3474 | 54.168.0.0/16 Amazon |
3410 | 54.169.0.0/16 Amazon | 3475 | 54.169.0.0/16 Amazon |
3411 | 54.170.0.0/15 Amazon | 3476 | 54.170.0.0/15 Amazon |
@@ -3418,7 +3483,7 @@ | |||
3418 | 54.182.0.0/16 Amazon | 3483 | 54.182.0.0/16 Amazon |
3419 | 54.183.0.0/16 Amazon | 3484 | 54.183.0.0/16 Amazon |
3420 | 54.184.0.0/13 Amazon | 3485 | 54.184.0.0/13 Amazon |
3421 | 54.192.0.0/16 Amazon | 3486 | 54.192.0.0/12 Amazon |
3422 | 54.193.0.0/16 Amazon | 3487 | 54.193.0.0/16 Amazon |
3423 | 54.194.0.0/15 Amazon | 3488 | 54.194.0.0/15 Amazon |
3424 | 54.196.0.0/15 Amazon | 3489 | 54.196.0.0/15 Amazon |
@@ -3429,12 +3494,12 @@ | |||
3429 | 54.204.0.0/15 Amazon | 3494 | 54.204.0.0/15 Amazon |
3430 | 54.206.0.0/16 Amazon | 3495 | 54.206.0.0/16 Amazon |
3431 | 54.207.0.0/16 Amazon | 3496 | 54.207.0.0/16 Amazon |
3432 | 54.208.0.0/15 Amazon | 3497 | 54.208.0.0/13 Amazon |
3433 | 54.210.0.0/15 Amazon | 3498 | 54.210.0.0/15 Amazon |
3434 | 54.212.0.0/15 Amazon | 3499 | 54.212.0.0/15 Amazon |
3435 | 54.214.0.0/16 Amazon | 3500 | 54.214.0.0/16 Amazon |
3436 | 54.215.0.0/16 Amazon | 3501 | 54.215.0.0/16 Amazon |
3437 | 54.216.0.0/15 Amazon | 3502 | 54.216.0.0/14 Amazon |
3438 | 54.218.0.0/16 Amazon | 3503 | 54.218.0.0/16 Amazon |
3439 | 54.219.0.0/16 Amazon | 3504 | 54.219.0.0/16 Amazon |
3440 | 54.220.0.0/16 Amazon | 3505 | 54.220.0.0/16 Amazon |
@@ -3694,6 +3759,10 @@ | |||
3694 | 72.21.192.0/19 Amazon | 3759 | 72.21.192.0/19 Amazon |
3695 | 72.41.0.0/20 Amazon | 3760 | 72.41.0.0/20 Amazon |
3696 | 72.44.32.0/19 Amazon | 3761 | 72.44.32.0/19 Amazon |
3762 | 74.127.0.0/18 Amazon | ||
3763 | 74.190.0.0/16 Amazon | ||
3764 | 74.230.0.0/16 Amazon | ||
3765 | 74.250.0.0/16 Amazon | ||
3697 | 75.2.0.0/17 Amazon | 3766 | 75.2.0.0/17 Amazon |
3698 | 75.101.128.0/17 Amazon | 3767 | 75.101.128.0/17 Amazon |
3699 | 76.223.0.0/17 Amazon | 3768 | 76.223.0.0/17 Amazon |
@@ -5675,3 +5744,374 @@ | |||
5675 | 64.120.69.0/24 Leaseweb | 5744 | 64.120.69.0/24 Leaseweb |
5676 | 69.147.236.0/24 Leaseweb | 5745 | 69.147.236.0/24 Leaseweb |
5677 | 70.32.34.0/24 Leaseweb | 5746 | 70.32.34.0/24 Leaseweb |
5747 | |||
5748 | |||
5749 | |||
5750 | # GoDaddy | ||
5751 | 103.1.172.0/22 GoDaddy | ||
5752 | 103.1.172.0/24 GoDaddy | ||
5753 | 103.1.174.0/24 GoDaddy | ||
5754 | 103.1.175.0/24 GoDaddy | ||
5755 | 104.238.64.0/18 GoDaddy | ||
5756 | 104.238.64.0/19 GoDaddy | ||
5757 | 104.238.64.0/22 GoDaddy | ||
5758 | 104.238.64.0/24 GoDaddy | ||
5759 | 107.180.0.0/17 GoDaddy | ||
5760 | 107.180.0.0/18 GoDaddy | ||
5761 | 107.180.100.0/22 GoDaddy | ||
5762 | 107.180.104.0/22 GoDaddy | ||
5763 | 107.180.108.0/22 GoDaddy | ||
5764 | 107.180.120.0/22 GoDaddy | ||
5765 | 107.180.64.0/19 GoDaddy | ||
5766 | 118.139.160.0/19 GoDaddy | ||
5767 | 118.139.160.0/21 GoDaddy | ||
5768 | 132.148.0.0/16 GoDaddy | ||
5769 | 132.148.16.0/20 GoDaddy | ||
5770 | 132.148.16.0/22 GoDaddy | ||
5771 | 132.148.164.0/22 GoDaddy | ||
5772 | 132.148.184.0/21 GoDaddy | ||
5773 | 132.148.192.0/20 GoDaddy | ||
5774 | 132.148.20.0/22 GoDaddy | ||
5775 | 132.148.24.0/22 GoDaddy | ||
5776 | 132.148.32.0/21 GoDaddy | ||
5777 | 148.66.128.0/19 GoDaddy | ||
5778 | 148.66.128.0/22 GoDaddy | ||
5779 | 148.66.136.0/22 GoDaddy | ||
5780 | 148.66.140.0/22 GoDaddy | ||
5781 | 148.66.144.0/21 GoDaddy | ||
5782 | 148.72.0.0/17 GoDaddy | ||
5783 | 148.72.16.0/22 GoDaddy | ||
5784 | 148.72.204.0/22 GoDaddy | ||
5785 | 148.72.204.0/24 GoDaddy | ||
5786 | 148.72.206.0/23 GoDaddy | ||
5787 | 148.72.208.0/21 GoDaddy | ||
5788 | 148.72.220.0/22 GoDaddy | ||
5789 | 148.72.224.0/19 GoDaddy | ||
5790 | 148.72.224.0/20 GoDaddy | ||
5791 | 148.72.240.0/22 GoDaddy | ||
5792 | 148.72.244.0/22 GoDaddy | ||
5793 | 148.72.32.0/21 GoDaddy | ||
5794 | 148.72.32.0/23 GoDaddy | ||
5795 | 148.72.34.0/24 GoDaddy | ||
5796 | 148.72.36.0/24 GoDaddy | ||
5797 | 148.72.4.0/22 GoDaddy | ||
5798 | 148.72.44.0/22 GoDaddy | ||
5799 | 148.72.88.0/22 GoDaddy | ||
5800 | 160.153.32.0/19 GoDaddy | ||
5801 | 160.153.64.0/18 GoDaddy | ||
5802 | 160.153.64.0/19 GoDaddy | ||
5803 | 160.153.96.0/19 GoDaddy | ||
5804 | 166.62.0.0/19 GoDaddy | ||
5805 | 166.62.0.0/22 GoDaddy | ||
5806 | 166.62.0.0/24 GoDaddy | ||
5807 | 166.62.100.0/22 GoDaddy | ||
5808 | 166.62.10.0/23 GoDaddy | ||
5809 | 166.62.1.0/24 GoDaddy | ||
5810 | 166.62.112.0/20 GoDaddy | ||
5811 | 166.62.116.0/22 GoDaddy | ||
5812 | 166.62.120.0/22 GoDaddy | ||
5813 | 166.62.12.0/22 GoDaddy | ||
5814 | 166.62.12.0/24 GoDaddy | ||
5815 | 166.62.13.0/24 GoDaddy | ||
5816 | 166.62.15.0/24 GoDaddy | ||
5817 | 166.62.16.0/22 GoDaddy | ||
5818 | 166.62.17.0/24 GoDaddy | ||
5819 | 166.62.20.0/22 GoDaddy | ||
5820 | 166.62.2.0/24 GoDaddy | ||
5821 | 166.62.23.0/24 GoDaddy | ||
5822 | 166.62.24.0/22 GoDaddy | ||
5823 | 166.62.24.0/24 GoDaddy | ||
5824 | 166.62.25.0/24 GoDaddy | ||
5825 | 166.62.26.0/23 GoDaddy | ||
5826 | 166.62.28.0/22 GoDaddy | ||
5827 | 166.62.3.0/24 GoDaddy | ||
5828 | 166.62.32.0/19 GoDaddy | ||
5829 | 166.62.32.0/22 GoDaddy | ||
5830 | 166.62.36.0/22 GoDaddy | ||
5831 | 166.62.40.0/22 GoDaddy | ||
5832 | 166.62.4.0/22 GoDaddy | ||
5833 | 166.62.4.0/24 GoDaddy | ||
5834 | 166.62.44.0/22 GoDaddy | ||
5835 | 166.62.5.0/24 GoDaddy | ||
5836 | 166.62.52.0/22 GoDaddy | ||
5837 | 166.62.56.0/22 GoDaddy | ||
5838 | 166.62.60.0/22 GoDaddy | ||
5839 | 166.62.6.0/23 GoDaddy | ||
5840 | 166.62.64.0/18 GoDaddy | ||
5841 | 166.62.64.0/19 GoDaddy | ||
5842 | 166.62.80.0/22 GoDaddy | ||
5843 | 166.62.8.0/22 GoDaddy | ||
5844 | 166.62.8.0/24 GoDaddy | ||
5845 | 166.62.84.0/22 GoDaddy | ||
5846 | 166.62.88.0/22 GoDaddy | ||
5847 | 166.62.9.0/24 GoDaddy | ||
5848 | |||
5849 | # IBM cloud service | ||
5850 | # https://cloud.ibm.com/docs/cloud-infrastructure?topic=cloud-infrastructure-ibm-cloud-ip-ranges | ||
5851 | # last update Aug 2023 | ||
5852 | 159.8.198.0/23 IBM | ||
5853 | 169.38.118.0/23 IBM | ||
5854 | 173.192.118.0/23 IBM | ||
5855 | 192.255.18.0/24 IBM | ||
5856 | 198.23.118.0/23 IBM | ||
5857 | 169.46.118.0/23 IBM | ||
5858 | 169.47.118.0/23 IBM | ||
5859 | 169.48.118.0/24 IBM | ||
5860 | 159.122.118.0/23 IBM | ||
5861 | 161.156.118.0/24 IBM | ||
5862 | 149.81.118.0/23 IBM | ||
5863 | 5.10.118.0/23 IBM | ||
5864 | 158.175.127.0/24 IBM | ||
5865 | 141.125.118.0/23 IBM | ||
5866 | 158.176.118.0/23 IBM | ||
5867 | 159.122.138.0/23 IBM | ||
5868 | 169.54.118.0/23 IBM | ||
5869 | 163.68.118.0/24 IBM | ||
5870 | 163.69.118.0/24 IBM | ||
5871 | 163.73.118.0/24 IBM | ||
5872 | 159.8.118.0/23 IBM | ||
5873 | 169.57.138.0/23 IBM | ||
5874 | 50.23.118.0/23 IBM | ||
5875 | 169.45.118.0/23 IBM | ||
5876 | 169.62.118.0/24 IBM | ||
5877 | 174.133.118.0/23 IBM | ||
5878 | 168.1.18.0/23 IBM | ||
5879 | 130.198.118.0/23 IBM | ||
5880 | 135.90.118.0/23 IBM | ||
5881 | 161.202.118.0/23 IBM | ||
5882 | 128.168.118.0/23 IBM | ||
5883 | 165.192.118.0/23 IBM | ||
5884 | 158.85.118.0/23 IBM | ||
5885 | 163.74.118.0/23 IBM | ||
5886 | 163.75.118.0/23 IBM | ||
5887 | 208.43.118.0/23 IBM | ||
5888 | 192.255.38.0/24 IBM | ||
5889 | 169.55.118.0/23 IBM | ||
5890 | 169.60.118.0/23 IBM | ||
5891 | 169.61.118.0/23 IBM | ||
5892 | 159.8.197.0/24 IBM | ||
5893 | 169.38.117.0/24 IBM | ||
5894 | 50.23.203.0/24 IBM | ||
5895 | 108.168.157.0/24 IBM | ||
5896 | 173.192.117.0/24 IBM | ||
5897 | 192.155.205.0/24 IBM | ||
5898 | 169.46.187.0/24 IBM | ||
5899 | 198.23.117.0/24 IBM | ||
5900 | 169.46.117.0/24 IBM | ||
5901 | 169.47.117.0/24 IBM | ||
5902 | 169.48.117.0/24 IBM | ||
5903 | 159.122.117.0/24 IBM | ||
5904 | 161.156.117.0/24 IBM | ||
5905 | 149.81.117.0/24 IBM | ||
5906 | 5.10.117.0/24 IBM | ||
5907 | 158.175.117.0/24 IBM | ||
5908 | 141.125.117.0/24 IBM | ||
5909 | 158.176.117.0/24 IBM | ||
5910 | 159.122.137.0/24 IBM | ||
5911 | 169.54.117.0/24 IBM | ||
5912 | 159.8.117.0/24 IBM | ||
5913 | 169.57.137.0/24 IBM | ||
5914 | 50.23.117.0/24 IBM | ||
5915 | 169.45.117.0/24 IBM | ||
5916 | 174.133.117.0/24 IBM | ||
5917 | 168.1.17.0/24 IBM | ||
5918 | 130.198.117.0/24 IBM | ||
5919 | 135.90.117.0/24 IBM | ||
5920 | 161.202.117.0/24 IBM | ||
5921 | 128.168.117.0/24 IBM | ||
5922 | 165.192.117.0/24 IBM | ||
5923 | 158.85.117.0/24 IBM | ||
5924 | 50.22.248.0/25 IBM | ||
5925 | 169.54.27.0/24 IBM | ||
5926 | 198.11.250.0/24 IBM | ||
5927 | 208.43.117.0/24 IBM | ||
5928 | 169.55.117.0/24 IBM | ||
5929 | 169.60.117.0/24 IBM | ||
5930 | 169.61.117.0/24 IBM | ||
5931 | 12.96.160.0/24 IBM | ||
5932 | 66.98.240.192/26 IBM | ||
5933 | 67.18.139.0/24 IBM | ||
5934 | 67.19.0.0/24 IBM | ||
5935 | 70.84.160.0/24 IBM | ||
5936 | 70.85.125.0/24 IBM | ||
5937 | 75.125.126.8/32 IBM | ||
5938 | 209.85.4.0/26 IBM | ||
5939 | 216.12.193.9/32 IBM | ||
5940 | 216.40.193.0/24 IBM | ||
5941 | 216.234.234.0/24 IBM | ||
5942 | |||
5943 | # Hetzner | ||
5944 | 116.202.0.0/16 Hetzner | ||
5945 | 116.203.0.0/16 Hetzner | ||
5946 | 128.140.0.0/17 Hetzner | ||
5947 | 135.181.0.0/16 Hetzner | ||
5948 | 142.132.128.0/17 Hetzner | ||
5949 | 157.90.0.0/16 Hetzner | ||
5950 | 159.69.0.0/16 Hetzner | ||
5951 | 162.55.0.0/16 Hetzner | ||
5952 | 167.233.0.0/16 Hetzner | ||
5953 | 167.235.0.0/16 Hetzner | ||
5954 | 168.119.0.0/16 Hetzner | ||
5955 | 176.9.0.0/16 Hetzner | ||
5956 | 178.63.0.0/16 Hetzner | ||
5957 | 188.34.128.0/17 Hetzner | ||
5958 | 188.40.0.0/16 Hetzner | ||
5959 | 195.201.0.0/16 Hetzner | ||
5960 | 213.239.192.0/18 Hetzner | ||
5961 | 23.88.0.0/17 Hetzner | ||
5962 | 37.27.0.0/16 Hetzner | ||
5963 | 46.4.0.0/16 Hetzner | ||
5964 | 49.12.0.0/16 Hetzner | ||
5965 | 49.13.0.0/16 Hetzner | ||
5966 | 5.75.128.0/17 Hetzner | ||
5967 | 5.9.0.0/16 Hetzner | ||
5968 | 65.108.0.0/16 Hetzner | ||
5969 | 65.109.0.0/16 Hetzner | ||
5970 | 65.21.0.0/16 Hetzner | ||
5971 | 78.46.0.0/15 Hetzner | ||
5972 | 85.10.192.0/18 Hetzner | ||
5973 | 88.198.0.0/16 Hetzner | ||
5974 | 88.99.0.0/16 Hetzner | ||
5975 | 91.107.128.0/17 Hetzner | ||
5976 | 94.130.0.0/16 Hetzner | ||
5977 | 95.216.0.0/16 Hetzner | ||
5978 | 95.217.0.0/16 Hetzner | ||
5979 | |||
5980 | # Liquid Web | ||
5981 | 159.135.48.0/20 Liquid Web | ||
5982 | 162.212.134.0/24 Liquid Web | ||
5983 | 162.252.104.0/22 Liquid Web | ||
5984 | 172.255.59.0/24 Liquid Web | ||
5985 | 173.199.128.0/18 Liquid Web | ||
5986 | 184.106.55.0/24 Liquid Web | ||
5987 | 192.126.88.0/22 Liquid Web | ||
5988 | 192.133.82.0/24 Liquid Web | ||
5989 | 192.138.16.0/21 Liquid Web | ||
5990 | 192.190.220.0/22 Liquid Web | ||
5991 | 192.251.32.0/24 Liquid Web | ||
5992 | 199.189.224.0/22 Liquid Web | ||
5993 | 199.195.118.0/24 Liquid Web | ||
5994 | 205.174.24.0/22 Liquid Web | ||
5995 | 207.246.248.0/21 Liquid Web | ||
5996 | 208.75.148.0/22 Liquid Web | ||
5997 | 208.79.232.0/21 Liquid Web | ||
5998 | 208.86.152.0/21 Liquid Web | ||
5999 | 209.124.89.0/24 Liquid Web | ||
6000 | 209.188.80.0/20 Liquid Web | ||
6001 | 209.59.128.0/18 Liquid Web | ||
6002 | 50.28.0.0/18 Liquid Web | ||
6003 | 50.28.5.0/24 Liquid Web | ||
6004 | 50.28.64.0/19 Liquid Web | ||
6005 | 50.57.240.0/20 Liquid Web | ||
6006 | 64.50.144.0/20 Liquid Web | ||
6007 | 64.50.144.0/23 Liquid Web | ||
6008 | 64.50.148.0/22 Liquid Web | ||
6009 | 64.50.152.0/21 Liquid Web | ||
6010 | 64.91.224.0/19 Liquid Web | ||
6011 | 67.225.128.0/17 Liquid Web | ||
6012 | 67.227.128.0/17 Liquid Web | ||
6013 | 67.43.0.0/20 Liquid Web | ||
6014 | 68.66.211.0/24 Liquid Web | ||
6015 | 69.160.56.0/24 Liquid Web | ||
6016 | 69.16.192.0/18 Liquid Web | ||
6017 | 69.16.222.0/23 Liquid Web | ||
6018 | 69.167.128.0/18 Liquid Web | ||
6019 | 72.52.128.0/17 Liquid Web | ||
6020 | 96.30.0.0/18 Liquid Web | ||
6021 | |||
6022 | # OVH | ||
6023 | 107.189.64.0/18 OVH | ||
6024 | 135.125.0.0/17 OVH | ||
6025 | 135.125.128.0/17 OVH | ||
6026 | 135.148.0.0/17 OVH | ||
6027 | 135.148.128.0/17 OVH | ||
6028 | 137.74.0.0/16 OVH | ||
6029 | 139.99.0.0/17 OVH | ||
6030 | 139.99.128.0/17 OVH | ||
6031 | 141.94.0.0/16 OVH | ||
6032 | 141.95.0.0/17 OVH | ||
6033 | 141.95.128.0/17 OVH | ||
6034 | 142.4.192.0/19 OVH | ||
6035 | 142.44.128.0/17 OVH | ||
6036 | 144.217.0.0/16 OVH | ||
6037 | 145.239.0.0/16 OVH | ||
6038 | 146.59.0.0/16 OVH | ||
6039 | 146.59.0.0/17 OVH | ||
6040 | 147.135.0.0/17 OVH | ||
6041 | 147.135.128.0/17 OVH | ||
6042 | 148.113.0.0/18 OVH | ||
6043 | 148.113.128.0/17 OVH | ||
6044 | 149.202.0.0/16 OVH | ||
6045 | 149.56.0.0/16 OVH | ||
6046 | 151.80.0.0/16 OVH | ||
6047 | 15.204.0.0/17 OVH | ||
6048 | 15.204.128.0/17 OVH | ||
6049 | 152.228.128.0/17 OVH | ||
6050 | 15.235.0.0/17 OVH | ||
6051 | 15.235.128.0/17 OVH | ||
6052 | 158.69.0.0/16 OVH | ||
6053 | 162.19.0.0/17 OVH | ||
6054 | 162.19.128.0/17 OVH | ||
6055 | 164.132.0.0/16 OVH | ||
6056 | 167.114.0.0/17 OVH | ||
6057 | 167.114.128.0/18 OVH | ||
6058 | 167.114.192.0/19 OVH | ||
6059 | 176.31.0.0/16 OVH | ||
6060 | 178.32.0.0/15 OVH | ||
6061 | 185.15.68.0/22 OVH | ||
6062 | 185.45.160.0/22 OVH | ||
6063 | 188.165.0.0/16 OVH | ||
6064 | 192.240.152.0/21 OVH | ||
6065 | 192.95.0.0/18 OVH | ||
6066 | 192.99.0.0/16 OVH | ||
6067 | 193.70.0.0/17 OVH | ||
6068 | 198.100.144.0/20 OVH | ||
6069 | 198.244.128.0/17 OVH | ||
6070 | 198.245.48.0/20 OVH | ||
6071 | 198.27.64.0/18 OVH | ||
6072 | 198.27.92.0/24 OVH | ||
6073 | 198.50.128.0/17 OVH | ||
6074 | 213.186.32.0/19 OVH | ||
6075 | 213.251.128.0/18 OVH | ||
6076 | 213.32.0.0/17 OVH | ||
6077 | 217.182.0.0/16 OVH | ||
6078 | 23.92.224.0/19 OVH | ||
6079 | 37.187.0.0/16 OVH | ||
6080 | 37.59.0.0/16 OVH | ||
6081 | 40.160.0.0/17 OVH | ||
6082 | 46.105.0.0/16 OVH | ||
6083 | 46.105.198.0/24 OVH | ||
6084 | 46.105.199.0/24 OVH | ||
6085 | 46.105.200.0/24 OVH | ||
6086 | 46.105.201.0/24 OVH | ||
6087 | 46.105.202.0/24 OVH | ||
6088 | 46.105.203.0/24 OVH | ||
6089 | 46.105.204.0/24 OVH | ||
6090 | 46.105.206.0/24 OVH | ||
6091 | 46.105.207.0/24 OVH | ||
6092 | 46.244.32.0/20 OVH | ||
6093 | 51.161.0.0/17 OVH | ||
6094 | 51.161.128.0/17 OVH | ||
6095 | |||
6096 | # Ionos | ||
6097 | 74.208.0.0/16 Ionos | ||
6098 | |||
6099 | # WPEngine | ||
6100 | 141.193.213.0/24 WPEngine | ||
6101 | |||
6102 | # Dreamhost | ||
6103 | 208.113.128.0/17 Dreamhost | ||
6104 | |||
6105 | # Shopify | ||
6106 | 23.227.32.0/19 Shopify | ||
6107 | |||
6108 | # Sucuri | ||
6109 | 66.248.200.0/22 Sucuri | ||
6110 | 185.93.228.0/22 Sucuri | ||
6111 | 192.88.134.0/23 Sucuri | ||
6112 | 192.124.249.0/24 Sucuri | ||
6113 | 192.161.0.0/24 Sucuri | ||
6114 | |||
6115 | # HostGator | ||
6116 | # Bluehost | ||
6117 | # Squarespace | ||
diff --git a/src/lib/syscall.c b/src/lib/syscall.c index ca7c61c8e..602f7218c 100644 --- a/src/lib/syscall.c +++ b/src/lib/syscall.c | |||
@@ -1104,13 +1104,13 @@ static const SyscallGroupList sysgroups[] = { | |||
1104 | #ifdef SYS_pciconfig_write | 1104 | #ifdef SYS_pciconfig_write |
1105 | "pciconfig_write," | 1105 | "pciconfig_write," |
1106 | #endif | 1106 | #endif |
1107 | #ifdef SYS_s390_mmio_read | 1107 | #ifdef SYS_s390_pci_mmio_read |
1108 | "s390_mmio_read," | 1108 | "s390_pci_mmio_read," |
1109 | #endif | 1109 | #endif |
1110 | #ifdef SYS_s390_mmio_write | 1110 | #ifdef SYS_s390_pci_mmio_write |
1111 | "s390_mmio_write" | 1111 | "s390_pci_mmio_write" |
1112 | #endif | 1112 | #endif |
1113 | #if !defined(SYS_ioperm) && !defined(SYS_iopl) && !defined(SYS_pciconfig_iobase) && !defined(SYS_pciconfig_read) && !defined(SYS_pciconfig_write) && !defined(SYS_s390_mmio_read) && !defined(SYS_s390_mmio_write) | 1113 | #if !defined(SYS_ioperm) && !defined(SYS_iopl) && !defined(SYS_pciconfig_iobase) && !defined(SYS_pciconfig_read) && !defined(SYS_pciconfig_write) && !defined(SYS_s390_pci_mmio_read) && !defined(SYS_s390_pci_mmio_write) |
1114 | "__dummy_syscall__" // workaround for s390x which doesn't have any of above defined and empty syscall lists are not allowed | 1114 | "__dummy_syscall__" // workaround for s390x which doesn't have any of above defined and empty syscall lists are not allowed |
1115 | #endif | 1115 | #endif |
1116 | }, | 1116 | }, |
diff --git a/src/man/firejail.1.in b/src/man/firejail.1.in index 19fc94ebd..06969e851 100644 --- a/src/man/firejail.1.in +++ b/src/man/firejail.1.in | |||
@@ -788,7 +788,6 @@ $ firejail \-\-list | |||
788 | .br | 788 | .br |
789 | $ firejail \-\-dns.print=3272 | 789 | $ firejail \-\-dns.print=3272 |
790 | 790 | ||
791 | #ifdef HAVE_NETWORK | ||
792 | .TP | 791 | .TP |
793 | \fB\-\-dnstrace[=name|pid] | 792 | \fB\-\-dnstrace[=name|pid] |
794 | Monitor DNS queries. The sandbox can be specified by name or pid. Only networked sandboxes | 793 | Monitor DNS queries. The sandbox can be specified by name or pid. Only networked sandboxes |
@@ -828,7 +827,6 @@ $ sudo firejail --dnstrace | |||
828 | .br | 827 | .br |
829 | 11:32:08 9.9.9.9 www.youtube.com (type 1) | 828 | 11:32:08 9.9.9.9 www.youtube.com (type 1) |
830 | .br | 829 | .br |
831 | #endif | ||
832 | 830 | ||
833 | .TP | 831 | .TP |
834 | \fB\-\-env=name=value | 832 | \fB\-\-env=name=value |
@@ -930,7 +928,6 @@ $ firejail --ignore=seccomp --ignore=caps firefox | |||
930 | $ firejail \-\-ignore="net eth0" firefox | 928 | $ firejail \-\-ignore="net eth0" firefox |
931 | #endif | 929 | #endif |
932 | 930 | ||
933 | #ifdef HAVE_NETWORK | ||
934 | .TP | 931 | .TP |
935 | \fB\-\-icmptrace[=name|pid] | 932 | \fB\-\-icmptrace[=name|pid] |
936 | Monitor ICMP traffic. The sandbox can be specified by name or pid. Only networked sandboxes | 933 | Monitor ICMP traffic. The sandbox can be specified by name or pid. Only networked sandboxes |
@@ -956,7 +953,6 @@ $ sudo firejail --icmptrace | |||
956 | .br | 953 | .br |
957 | 20:53:55 192.168.1.60 -> 1.1.1.1 - 154 bytes - Destination unreachable/Port unreachable | 954 | 20:53:55 192.168.1.60 -> 1.1.1.1 - 154 bytes - Destination unreachable/Port unreachable |
958 | .br | 955 | .br |
959 | #endif | ||
960 | 956 | ||
961 | .TP | 957 | .TP |
962 | \fB\-\-\include=file.profile | 958 | \fB\-\-\include=file.profile |
@@ -1643,6 +1639,7 @@ PID User RX(KB/s) TX(KB/s) Command | |||
1643 | 1294 netblue 53.355 1.473 firejail \-\-net=eth0 firefox | 1639 | 1294 netblue 53.355 1.473 firejail \-\-net=eth0 firefox |
1644 | .br | 1640 | .br |
1645 | 7383 netblue 9.045 0.112 firejail \-\-net=eth0 transmission | 1641 | 7383 netblue 9.045 0.112 firejail \-\-net=eth0 transmission |
1642 | #endif | ||
1646 | .TP | 1643 | .TP |
1647 | \fB\-\-nettrace[=name|pid] | 1644 | \fB\-\-nettrace[=name|pid] |
1648 | Monitor received TCP. UDP, and ICMP traffic. The sandbox can be specified by name or pid. Only networked sandboxes | 1645 | Monitor received TCP. UDP, and ICMP traffic. The sandbox can be specified by name or pid. Only networked sandboxes |
@@ -1658,17 +1655,15 @@ Example: | |||
1658 | .br | 1655 | .br |
1659 | $ sudo firejail --nettrace | 1656 | $ sudo firejail --nettrace |
1660 | .br | 1657 | .br |
1661 | 95 KB/s geoip 457, IP database 4436 | 1658 | 93 KB/s address:port (protocol) network |
1662 | .br | ||
1663 | 52 KB/s *********** 64.222.84.207:443 United States | ||
1664 | .br | 1659 | .br |
1665 | 33 KB/s ******* 89.147.74.105:63930 Hungary | 1660 | 14 B/s ** 104.24.8.4:443(QUIC) Cloudflare |
1666 | .br | 1661 | .br |
1667 | 0 B/s 45.90.28.0:443 NextDNS | 1662 | 80 KB/s ***************** 192.187.97.90:443(TLS) BitChute |
1668 | .br | 1663 | .br |
1669 | 0 B/s 94.70.122.176:52309(UDP) Greece | 1664 | 1 B/s 149.56.228.45:443(DoH) Canada |
1670 | .br | 1665 | .br |
1671 | 339 B/s 104.26.7.35:443 Cloudflare | 1666 | (D)isplay, (S)ave, (C)lear, e(X)it |
1672 | .br | 1667 | .br |
1673 | 1668 | ||
1674 | .br | 1669 | .br |
@@ -1677,7 +1672,6 @@ the country the traffic originates from is added to the trace. | |||
1677 | We also use the static IP map in /usr/lib/firejail/static-ip-map | 1672 | We also use the static IP map in /usr/lib/firejail/static-ip-map |
1678 | to print the domain names for some of the more common websites and cloud platforms. | 1673 | to print the domain names for some of the more common websites and cloud platforms. |
1679 | No external services are contacted for reverse IP lookup. | 1674 | No external services are contacted for reverse IP lookup. |
1680 | #endif | ||
1681 | .TP | 1675 | .TP |
1682 | \fB\-\-nice=value | 1676 | \fB\-\-nice=value |
1683 | Set nice value for all processes running inside the sandbox. | 1677 | Set nice value for all processes running inside the sandbox. |
@@ -2263,6 +2257,18 @@ All modifications are discarded when the sandbox is closed. | |||
2263 | Example: | 2257 | Example: |
2264 | .br | 2258 | .br |
2265 | $ firejail --private-opt=firefox /opt/firefox/firefox | 2259 | $ firejail --private-opt=firefox /opt/firefox/firefox |
2260 | .br | ||
2261 | |||
2262 | .br | ||
2263 | Note: Program installations in /opt tend to be relatively large and private-opt | ||
2264 | copies the entire path(s) into RAM, which may significantly increase RAM usage | ||
2265 | and break \fBfile-copy-limit\fR in firejail.config. | ||
2266 | Therefore, in general it is recommended to use "whitelist /opt/PATH" instead of | ||
2267 | "private-opt PATH". | ||
2268 | For details, see | ||
2269 | .UR https://github.com/netblue30/firejail/discussions/5307 | ||
2270 | #5307 | ||
2271 | .UE | ||
2266 | 2272 | ||
2267 | .TP | 2273 | .TP |
2268 | \fB\-\-private-srv=file,directory | 2274 | \fB\-\-private-srv=file,directory |
@@ -2850,7 +2856,6 @@ $ firejail \-\-list | |||
2850 | .br | 2856 | .br |
2851 | $ firejail \-\-shutdown=3272 | 2857 | $ firejail \-\-shutdown=3272 |
2852 | 2858 | ||
2853 | #ifdef HAVE_NETWORK | ||
2854 | .TP | 2859 | .TP |
2855 | \fB\-\-snitrace[=name|pid] | 2860 | \fB\-\-snitrace[=name|pid] |
2856 | Monitor Server Name Indication (TLS/SNI). The sandbox can be specified by name or pid. Only networked sandboxes | 2861 | Monitor Server Name Indication (TLS/SNI). The sandbox can be specified by name or pid. Only networked sandboxes |
@@ -2892,7 +2897,6 @@ $ sudo firejail --snitrace | |||
2892 | .br | 2897 | .br |
2893 | 07:53:11 192.0.73.2 1.gravatar.com | 2898 | 07:53:11 192.0.73.2 1.gravatar.com |
2894 | .br | 2899 | .br |
2895 | #endif | ||
2896 | 2900 | ||
2897 | .TP | 2901 | .TP |
2898 | \fB\-\-tab | 2902 | \fB\-\-tab |