mirror of
https://github.com/CyberMind-FR/secubox-deb.git
synced 2026-07-30 00:19:30 +00:00
CyberMind-FR
30f138d091
Six packages in the dns + threats clusters shipped "X Module" placeholder Description headlines that didn't help operators choose between siblings. Phase 1 consolidation audit + #382 (dpi clarity) established the pattern; this completes the dns and threats halves. Each Description now: - States the actual subsystem in the headline (no "X Module" placeholders) - Names the backend it talks to (BIND, dnsmasq, unbound, CrowdSec) - Cross-references the sibling packages so operators reading apt-cache show know what to install for what DNS cluster: - secubox-dns: "Dns Module" → "authoritative BIND zone manager" - secubox-dns-guard: "Dns-guard Module" → "anomaly detection + dnsmasq blocking" - secubox-vortex-dns: "Vortex-dns Module" → "recursive firewall with RPZ + threat feeds" - (dns-provider, ad-guard already had informative headlines — not touched) Threats cluster: - secubox-threat-analyst: "Threat-analyst Module" → "AI agent that writes CrowdSec scenarios" - secubox-cve-triage: "Cve-triage Module" → "vulnerability assessment workflow" - secubox-network-anomaly: "Network-anomaly Module" → "DNS-log anomaly detection" - (threats, cyberfeed, ipblock, openclaw already had informative headlines — not touched) Also corrected the Maintainer from the placeholder "SecuBox <dev@secubox.local>" to "Gerald KERMA <devel@cybermind.fr>" on four of six packages, and added explicit Recommends: for the backend daemons each uses (dnsmasq for dns-guard + network-anomaly, unbound + dnsmasq for vortex-dns, crowdsec for threat-analyst). Patch-version bump on each (1.0.0 → 1.0.1; 1.4.0 → 1.4.1 for threat-analyst) so the metadata change ships in apt. No code, endpoints, services, nginx routes, menu entries, or inter-package dependencies changed. dpkg-parsechangelog parses cleanly on all six.
25 lines
930 B
Plaintext
25 lines
930 B
Plaintext
Source: secubox-vortex-dns
|
|
Section: admin
|
|
Priority: optional
|
|
Maintainer: Gerald KERMA <devel@cybermind.fr>
|
|
Build-Depends: debhelper-compat (= 13)
|
|
Standards-Version: 4.6.2
|
|
|
|
Package: secubox-vortex-dns
|
|
Architecture: all
|
|
Depends: ${misc:Depends}, secubox-core (>= 1.0.0)
|
|
Recommends: unbound, dnsmasq
|
|
Description: SecuBox Vortex DNS — recursive firewall with RPZ + threat feeds
|
|
Recursive DNS firewall: aggregates threat-feed blocklists into RPZ
|
|
zones and pushes them to unbound (preferred) or dnsmasq. Inline
|
|
blocking happens before resolution, so policy-violating lookups
|
|
never leave the box.
|
|
.
|
|
Distinct from sibling packages in the DNS cluster:
|
|
- secubox-dns-guard — post-resolution anomaly detection
|
|
(dnsmasq-only).
|
|
- secubox-ad-guard — ad/tracker-specific lookups with per-device
|
|
stats.
|
|
- secubox-dns — authoritative BIND zone manager (publishing).
|
|
- secubox-dns-provider — external registrar API.
|