AbuseIPDB Integration - Anyone used it?

theprez1980

I saw this post:
https://docs.mailcow.email/third_party/abuseipdb/third_party-abuseipdb/

But am not sure I fully understand how to implement it.

It looks like I need to install ipset on the main host - which I’ve done. But the script errors out saying it can’t find ipset - I’m assuming its a PATH problem (this is on Debian)

Also, the link provided above doesn’t make reference to it, but I suspect I need to also install iptables on the host?

Can anyone provide any general guidance on how to install this and make it work? The link above needs some added details in my opinion. With a default debian trixie install - it doesn’t seem that ipset works directly out of the box after install.

Details:

root@mail:~# ./abuseipdb.sh --skip-abuseipdb
**ipset binary NOT found, please install package**

Thanks

DocFraggle

theprez1980 It looks like I need to install ipset on the main host - which I’ve done. But the script errors out saying it can’t find ipset - I’m assuming its a PATH problem (this is on Debian)

My script uses the command command -v ipset to determine if “ipset” is available. If you run it on your host it should look like this:

root@mailserver:~# command -v ipset
/usr/sbin/ipset

What’s the output on your system? And what’s the output of apt info ipset?

theprez1980 Also, the link provided above doesn’t make reference to it, but I suspect I need to also install iptables on the host?

As mailcow itself uses iptables it should already be installed 🙂

theprez1980

If I run command -v ipset as root, It returns nothing:

root@mail:/home/user# command -v ipset
root@mail:/home/user#

apt info ipset returns:

root@mail:/home/user# apt info ipset
Package: ipset
Version: 7.22-1+b1
Priority: optional
Section: net
Source: ipset (7.22-1)
Maintainer: Debian Netfilter Packaging Team <pkg-netfilter-team@lists.alioth.de>
Installed-Size: 143 kB
Provides: ipset-7.22
Depends: libc6 (>= 2.34), libipset13t64 (>= 7.15-1~)
Recommends: iptables
Breaks: xtables-addons-common (<< 1.41~)
Homepage: https://ipset.netfilter.org/
Tag: implemented-in::c, role::program
Download-Size: 46.6 kB
APT-Manual-Installed: yes
APT-Sources: http://deb.debian.org/debian trixie/main amd64 Packages
Description: administration tool for kernel IP sets
 IP sets are a framework inside the Linux 2.4.x and 2.6.x kernel which can be
 administered by the ipset(8) utility. Depending on the type, currently an
 IP set may store IP addresses, (TCP/UDP) port numbers or IP addresses with
 MAC addresses in a  way which ensures lightning speed when matching an
 entry against a set.
 .

From what I can tell, ipset is installed but it is not in my PATH, it resides in: /usr/sbin/
If I run:

root@mail:/home/user# /usr/sbin/ipset -v
ipset v7.22, protocol version: 7

Just so I’m on the same page, I installed ipset on my host that’s running docker, I didn’t install anything within docker.

And you’re correct - iptables is installed, it’s also in /usr/sbin

Thanks