security/maltrail: sync with master

security/maltrail/Makefile

@@ -1,6 +1,6 @@
 PLUGIN_NAME=		maltrail
 PLUGIN_VERSION=		1.10
-PLUGIN_REVISION=	2
+PLUGIN_REVISION=	3
 PLUGIN_COMMENT=		Malicious traffic detection system
 PLUGIN_DEPENDS=		maltrail
 PLUGIN_MAINTAINER=	[email protected]

security/maltrail/pkg-descr

@@ -5,8 +5,6 @@ custom user defined lists, where trail can be anything from domain name,
 URL, IP address or HTTP User-Agent header value. Also, it uses advanced
 heuristic mechanisms that can help in discovery of unknown threats.
 
-WWW: https://github.com/stamparm/maltrail
-
 
 Changelog
 ---------
@@ -16,6 +14,7 @@ Changelog
 * Add CHECK_HOST_DOMAINS option
 * Fix CUSTOM_TRAILS_DIR (contributed by codiflow)
 * Fix python3 binary use in RC scripting (contributed by Tom Reid)
+* Fix missing FAIL2BAN_ALLOWLIST to allow localhost access to fail2ban endpoint (contributed by whitej46)
 
 1.9
 

security/maltrail/src/opnsense/service/templates/OPNsense/Maltrail/maltrail.conf

@@ -9,6 +9,8 @@ USE_SSL false
 
 # Regular expression to be used in external /fail2ban calls for extraction of attacker source IPs
 FAIL2BAN_REGEX attacker|reputation|potential[^"]*(web scan|directory traversal|injection|remote code)|spammer|mass scanner
+# Allow localhost to access fail2ban endpoint
+FAIL2BAN_ALLOWLIST 127.0.0.1
 
 {%   if helpers.exists('OPNsense.maltrail.server.loglistenaddress') and OPNsense.maltrail.server.loglistenaddress != '' %}
 UDP_ADDRESS {{ OPNsense.maltrail.server.loglistenaddress }}