BlacklistMonitor

Copyright (c) by respective owners. All rights reserved.  Released under license as described in the file LICENSE.txt

Application for monitoring Domains and IPs on RBLs. With blacklistmonitor you can monitor and document IP ranges and domain names for showing up on RBL servers. It is intended for ISPs, Web Hosting, anyone who provides IP space to monitor and protect their networks.

Docker Version

This is a useful unoffical docker container from a 3rd party. Docker Download

Features

Supports All Major Blacklists. You can customize this list
Monitor blocks of IPs in CIDR Format and your domains
Web based reporting
API for integration or access the mysql database directly
Email, SMS, and Twitter Alerts

Prerequisite software

MySQL or MariaDB are needed for the database.
Most likely you'll need your own DNS server as well. You can use Bind or even unbound. Bind is easier, unbound may be faster. You can attempt to use your ISPs name servers (see your /etc/resolve.conf). Some large ISPs name servers won't work and you'll need to run your own. Blacklistmonitor will not by default use your OS name servers.
Apache or Nginx
SMTP Mail server like postfix

Installation Ubuntu Server 14.04 LTS

#install
apt-get -y install apache2
apt-get -y install mariadb-server mariadb-client mariadb-common
apt-get -y install php5 php5-mysqlnd php5-cli php5-curl
apt-get -y install bind9 dnsutils

#set to start on boot
update-rc.d bind9 defaults
update-rc.d apache2 defaults
update-rc.d mysql defaults

Go into the directory you want to install BlacklistMonitor into and clone the git repo. Usually this would be a web server directory like /var/www/html/. The rest of the commands below assume you're using this dir and the default config files do as well.

cd /var/www/html/
git clone git://github.com/mikelynn2/blacklistmonitor.git

Initialize Data

mysql -p < /var/www/html/blacklistmonitor/setup/blacklistmonitor.sql

Setup Apache

cp /var/www/html/blacklistmonitor/setup/blacklistmonitor-apache.conf /etc/apache2/sites-enabled/

Copy Default Config

cp /var/www/html/blacklistmonitor/setup/blacklistmonitor.cfg /etc/

After you've copied the config file you need to edit it to customize it for your setup here: /etc/blacklistmonitor.cfg

Don't even try to use google or opendns public DNS servers. Many RBLs block these from queries.

Schedule Cron

Add the contents of this file into cron

cat /var/www/html/blacklistmonitor/setup/blacklistmonitor.cron

edit crontab

crontab -e

Service

cp /var/www/html/blacklistmonitor/setup/blacklistmonitor-ubuntu-upstart.conf /etc/init/blacklistmonitor.conf

start/stop/restart

start blacklistmonitor
stop blacklistmonitor
restart blacklistmonitor

Website

The default username and password to the portal is admin/pa55w0rd It's recommended to change both. Especially if you're installing this on a public network.

Timezone Setup

dpkg-reconfigure tzdata

Then edit your the value for date.timezone in /etc/php5/apache2/php.ini

Watch your log for issues/performance

tail -f /var/log/blacklistmonitor.log

mikelynn2 / blacklistmonitor

readme