secubox-openwrt/package/secubox/secubox-dns-guard/Makefile
CyberMind-FR 0e0749ed08 feat: Add threat-analyst, dns-guard, mcp-server and DNS provider DynDNS
New packages:
- secubox-threat-analyst: AI-powered threat analysis with CrowdSec integration
- luci-app-threat-analyst: LuCI dashboard for threat intelligence
- secubox-dns-guard: DNS security monitoring and blocking
- secubox-mcp-server: Model Context Protocol server for AI assistant integration

Enhancements:
- dns-provider: Add DynDNS support (dyndns, get, update, domains commands)
- gandi.sh: Full DynDNS with WAN IP detection and record updates
- luci-app-dnsguard: Upgrade to v1.1.0 with improved dashboard

Infrastructure:
- BIND9 DNS setup for secubox.in with CAA records
- Wildcard SSL certificates via DNS-01 challenge
- HAProxy config fixes for secubox.in subdomains
- Mail server setup with Roundcube webmail

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-05 08:30:28 +01:00

58 lines
1.6 KiB
Makefile

# SPDX-License-Identifier: Apache-2.0
# Copyright (C) 2026 CyberMind.fr
include $(TOPDIR)/rules.mk
PKG_NAME:=secubox-dns-guard
PKG_VERSION:=1.0.0
PKG_RELEASE:=1
PKG_MAINTAINER:=CyberMind <contact@cybermind.fr>
PKG_LICENSE:=Apache-2.0
include $(INCLUDE_DIR)/package.mk
define Package/secubox-dns-guard
SECTION:=secubox
CATEGORY:=SecuBox
TITLE:=AI-Powered DNS Anomaly Detection
DEPENDS:=+dnsmasq +jsonfilter +curl
PKGARCH:=all
endef
define Package/secubox-dns-guard/description
SecuBox DNS Guard provides AI-powered DNS anomaly detection using LocalAI.
Features include:
- DGA (Domain Generation Algorithm) detection
- DNS tunneling and exfiltration detection
- High query rate anomaly detection
- Known malicious domain lookup
- Unusual TLD pattern detection
- Automatic blocklist generation with approval workflow
endef
define Package/secubox-dns-guard/conffiles
/etc/config/dns-guard
endef
define Build/Compile
endef
define Package/secubox-dns-guard/install
$(INSTALL_DIR) $(1)/etc/config
$(INSTALL_CONF) ./files/etc/config/dns-guard $(1)/etc/config/dns-guard
$(INSTALL_DIR) $(1)/etc/init.d
$(INSTALL_BIN) ./files/etc/init.d/dns-guard $(1)/etc/init.d/dns-guard
$(INSTALL_DIR) $(1)/usr/bin
$(INSTALL_BIN) ./files/usr/bin/dns-guard $(1)/usr/bin/dns-guard
$(INSTALL_DIR) $(1)/usr/lib/dns-guard
$(INSTALL_DATA) ./files/usr/lib/dns-guard/analyzer.sh $(1)/usr/lib/dns-guard/analyzer.sh
$(INSTALL_DATA) ./files/usr/lib/dns-guard/detector.sh $(1)/usr/lib/dns-guard/detector.sh
$(INSTALL_DATA) ./files/usr/lib/dns-guard/blocklist.sh $(1)/usr/lib/dns-guard/blocklist.sh
endef
$(eval $(call BuildPackage,secubox-dns-guard))