Release 2.1.3 (#69)

devnulli · xcjs · web-flow · commit 763f89f2009e · 2021-09-14T20:31:20.000+02:00
* turning up version number * negative permabancount means disabled (fixes #73) * #64 dont return whitelisted ips for temp ban list (#75) * #58 add all temp bans to perma (#76) * Add configuration for the Windows OpenSSH service. (#77) * Add configuration for the Windows OpenSSH service. * fixing a potential sec vulnerability * Update CONTRIBUTING.md (#78) * disable tasks with non existing bugs (#79) * finishing the release 2.1.3 Co-authored-by: Zackary Lowery <zlowery@xcjs.com>
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
@@ -4,7 +4,7 @@ If there is anything you can contribute, PLEASE do so, for whatever reason (spec
 Just make a pull request, and request it to be merged. If there are any issues you resolve with the pull request, make sure to link to them.
 
 ## Making a pull request.
-There is always branch for version that is currently up next (for example "v2.1.3" ). When you make a pull request, please let it base on that branch, never on master.
+There is always branch for version that is currently up next (for example "v2.1.4" ). When you make a pull request, please let it base on that branch, never on master.
 Thats all.
 
 Every once in a while, all the things in the new version branch will be put to the test and finally become a new release.
diff --git a/NEWS.md b/NEWS.md
@@ -1,6 +1,14 @@
 ## NEWS 
 
-### 2021-06-03 release of v.2. was completed
+### 2021-06-03 release of v.2.1.3 was completed
+- a negative perma-ban setting means that perma banning is disabled 
+- whitelisted ips will - though they are not really banned - no longer show up in the temp ban list of the console
+- there is now a button that will add all temporary bans to the permanent ban list 
+- will now protect openssh out of the box
+- fixed a potential security issue 
+- tasks that rely on log sources that are not present are now disabled, instead of throwing an error on every iteration (30 secs default)
+
+### 2021-06-03 release of v.2.1.2 was completed
 - a small typo in the license was fixed
 - severity of some messages was adjusted (moved from info to verbose) to keep a cleaner event log
 - it contains minor bugfixes and corrections, but nothing interesting apart from that its signed now.
diff --git a/README.md b/README.md
@@ -5,7 +5,7 @@ It's basically a fail2ban for windows. Its goals are also mainly what we love ab
 - *no-initial-fucking-around-with-scripts-or-config-files*
 - *install-and-forget*
 
-You can download it [here](https://github.com/devnulli/EvlWatcher/blob/master/Versions/v2/EvlWatcher-v2.1.2-setup.exe) :new: ( v2.1.2 - June 2021 ) :new: .
+You can download it [here](https://github.com/devnulli/EvlWatcher/blob/master/Versions/v2/EvlWatcher-v2.1.3-setup.exe) ( v2.1.3 - September 2021 ) .
 
 ## Also, we love issues!
 
diff --git a/SECURITY.md b/SECURITY.md
@@ -2,10 +2,10 @@
 
 ## Supported Versions
 
-| Version | Supported          |
-| ------- | ------------------ |
-| 2.x     | :white_check_mark: |
-| < 2.x   | :x:                |
+| Version | Supported          
+| ------- | ------------------ 
+| 2.1.3   | :white_check_mark: 
+| < 2.1.3 | :x:                
 
 ## Reporting a Vulnerability
 
diff --git a/Source/EvlWatcher/EvlWatcher.WCF/IEvlWatcherService.cs b/Source/EvlWatcher/EvlWatcher.WCF/IEvlWatcherService.cs
@@ -25,6 +25,9 @@ public interface IEvlWatcherService
         void SetPermanentBan(IPAddress address);
         [OperationContract]
         [FaultContract(typeof(ServiceFaultDTO))]
+        void SetPermanentBans(IPAddress[] address);
+        [OperationContract]
+        [FaultContract(typeof(ServiceFaultDTO))]
         void ClearPermanentBan(IPAddress address);
         [OperationContract]
         [FaultContract(typeof(ServiceFaultDTO))]
diff --git a/Source/EvlWatcher/EvlWatcher.WCF/Properties/AssemblyInfo.cs b/Source/EvlWatcher/EvlWatcher.WCF/Properties/AssemblyInfo.cs
@@ -32,5 +32,5 @@
 // You can specify all the values or you can default the Build and Revision Numbers
 // by using the '*' as shown below:
 // [assembly: AssemblyVersion("1.0.*")]
-[assembly: AssemblyVersion("1.0.0.0")]
-[assembly: AssemblyFileVersion("1.0.0.0")]
+[assembly: AssemblyVersion("2.1.3.0")]
+[assembly: AssemblyFileVersion("2.1.3.0")]
diff --git a/Source/EvlWatcher/EvlWatcher/EvlWatcher.cs b/Source/EvlWatcher/EvlWatcher/EvlWatcher.cs
@@ -44,7 +44,7 @@ public class EvlWatcher : ServiceBase, IEvlWatcherService
         /// <summary>
         /// all loaded tasks
         /// </summary>
-        private static readonly IList<LogTask> _logTasks = new List<LogTask>();
+        private static readonly List<LogTask> _logTasks = new List<LogTask>();
 
         /// <summary>
         /// adds some extra output
@@ -142,7 +142,7 @@ public void SetPermanentBan(IPAddress address)
         {
             EnsureClientPrivileges();
 
-            SetPermanentBanInternal(address);
+            SetPermanentBanInternal(new IPAddress[] { address });
         }
 
         public void ClearPermanentBan(IPAddress address)
@@ -181,6 +181,7 @@ public IPAddress[] GetTemporarilyBannedIPs()
                 List<IPAddress> result = new List<IPAddress>(_lastPolledTempBans);
 
                 result.RemoveAll(p => _serviceconfiguration.BlacklistAddresses.Contains(p));
+                result.RemoveAll(p => IsWhiteListed(p));
 
                 return result.ToArray();
             }
@@ -296,7 +297,6 @@ private void EnsureClientPrivileges()
         /// <summary>
         /// creates generic log tasks from configuration
         /// </summary>
-        /// <param name="d"></param>
         private void InitWorkersFromConfig(IQueryable<IPersistentTaskConfiguration> taskConfigurations)
         {
             lock (_syncObject)
@@ -409,7 +409,7 @@ private void Run()
                         eventTypesToTimeFramedEvents.Clear();
 
                         //first read all relevant events (events that are required by any of the tasks)
-                        foreach (string requiredEventType in requiredEventTypesToLogTasks.Keys)
+                        foreach (string requiredEventType in requiredEventTypesToLogTasks.Keys.ToList())
                         {
                             _logger.Dump($"Scanning {requiredEventType}", SeverityLevel.Debug);
                             eventTypesToNewEvents.Add(requiredEventType, new List<ExtractedEventRecord>());
@@ -462,7 +462,10 @@ private void Run()
                             }
                             catch (EventLogNotFoundException)
                             {
-                                _logger.Dump($"Event Log {requiredEventType} was not found, tasks that require these events will not work", SeverityLevel.Error);
+                                _logger.Dump($"Event Log {requiredEventType} was not found, tasks that require these events will not work and are disabled.", SeverityLevel.Info);
+                                _logTasks.RemoveAll(l => l.EventPath.Contains(requiredEventType));
+                                requiredEventTypesToLogTasks.Remove(requiredEventType);
+
                             }
                         }
 
@@ -507,8 +510,7 @@ private void Run()
                         {
                             if (t is IPBlockingLogTask ipTask)
                             {
-                                foreach (IPAddress perma in ipTask.GetPermaBanVictims())
-                                    SetPermanentBanInternal(perma);
+                                SetPermanentBanInternal(ipTask.GetPermaBanVictims().ToArray());
 
                                 List<IPAddress> blockedIPs = ipTask.GetTempBanVictims();
 
@@ -568,9 +570,10 @@ private void Run()
             }
         }
 
-        private void SetPermanentBanInternal(IPAddress address)
+        private void SetPermanentBanInternal(IPAddress[] addressList)
         {
-            _serviceconfiguration.AddBlackListAddress(address);
+            foreach (IPAddress address in addressList)
+                _serviceconfiguration.AddBlackListAddress(address);
 
             PushBanList();
         }
@@ -624,6 +627,13 @@ public void RemoveTemporaryBan(IPAddress address)
             }
         }
 
+        public void SetPermanentBans(IPAddress[] addressList)
+        {
+            EnsureClientPrivileges();
+
+            SetPermanentBanInternal(addressList);
+        }
+
         #endregion
     }
 }
diff --git a/Source/EvlWatcher/EvlWatcher/NSIS/Signing instructions.pdf b/Source/EvlWatcher/EvlWatcher/NSIS/Signing instructions.pdf
diff --git a/Source/EvlWatcher/EvlWatcher/NSIS/make.nsi b/Source/EvlWatcher/EvlWatcher/NSIS/make.nsi
@@ -2,7 +2,7 @@ Name "EvlWatcher"
 
 ; The file to write
 Icon EvlWatcher.ico
-OutFile "EvlWatcher-v2.1.2-setup.exe"
+OutFile "EvlWatcher-v2.1.3-setup.exe"
 
 ; The default installation directory
 InstallDir $PROGRAMFILES\EvlWatcher
@@ -78,7 +78,7 @@ Section "EvlWatcher Service"
   WriteRegDWORD HKLM "Software\Microsoft\Windows\CurrentVersion\Uninstall\EvlWatcher" "NoRepair" 1
   WriteUninstaller "uninstall.exe"
   
-  nsSCM::Install /NOUNLOAD "EvlWatcher" "EvlWatcher service" 16 2 "$INSTDIR\EvlWatcher.exe" "" "" "" ""
+  nsSCM::Install /NOUNLOAD "EvlWatcher" "EvlWatcher service" 16 2 "$\"$INSTDIR\EvlWatcher.exe$\"" "" "" "" ""
   nsSCM::Start /NOUNLOAD "EvlWatcher"
 
 SectionEnd
diff --git a/Source/EvlWatcher/EvlWatcher/Properties/AssemblyInfo.cs b/Source/EvlWatcher/EvlWatcher/Properties/AssemblyInfo.cs
@@ -28,5 +28,5 @@
 //      Build Number
 //      Revision
 //
-[assembly: AssemblyVersion("2.1.2.0")]
-[assembly: AssemblyFileVersion("2.1.2.0")]
+[assembly: AssemblyVersion("2.1.3.0")]
+[assembly: AssemblyFileVersion("2.1.3.0")]
diff --git a/Source/EvlWatcher/EvlWatcher/config.xml b/Source/EvlWatcher/EvlWatcher/config.xml
@@ -46,7 +46,7 @@
         5
       </TriggerCount>
 
-      <!-- after this amount of times temporarily banned, the ban will become permanent -->
+      <!-- after this amount of times temporarily banned, the ban will become permanent (enter a negative number to disable permanent bans) -->
       <PermaBanCount>
         3
       </PermaBanCount>
@@ -96,7 +96,7 @@
         5
       </TriggerCount>
 
-      <!-- after this amount of times temporarily banned, the ban will become permanent -->
+      <!-- after this amount of times temporarily banned, the ban will become permanent (enter a negative number to disable permanent bans) -->
       <PermaBanCount>
         3
       </PermaBanCount>
@@ -145,7 +145,7 @@
           5
         </TriggerCount>
 
-        <!-- after this amount of times temporarily banned, the ban will become permanent -->
+        <!-- after this amount of times temporarily banned, the ban will become permanent (enter a negative number to disable permanent bans) -->
         <PermaBanCount>
           3
         </PermaBanCount>
@@ -167,5 +167,44 @@
         </Regex>
 
     </Task>
+    <Task Name="BlockSSHBrutersByOpenSsh" Active="true">
+      <!-- the description ..-->
+      <Description>
+          This rule checks for failed SSH logins.
+      </Description>
+      <!-- this is the time a temporary ban is issued for, in seconds-->
+      <LockTime>
+          3600
+        </LockTime>
+      <!-- this is used for rules that only need new events for evaluating. If you dont know what this does, leave it set to false-->
+      <OnlyNew>
+          False
+      </OnlyNew>
+      <!-- this is the timeframe (in seconds) to be inspected-->
+      <EventAge>
+          120
+      </EventAge>
+      <!-- this is the amount of times an entry must occure within the time frame to be considered a brute force attempt-->
+      <TriggerCount>
+          5
+      </TriggerCount>
+      <!-- after this amount of times temporarily banned, the ban will become permanent -->
+      <PermaBanCount>
+          3
+      </PermaBanCount>
+      <!-- This is the place where the rule looks for entries-->
+      <EventPath>
+          OpenSSH/Operational
+      </EventPath>
+      <!-- This was introduced because sole regex matching is too CPU intensive. it incredibly speeds up the filtering when you enter some (or at least one) words that MUST be contained in the LogEntry to undergo the regex inspection-->
+      <RegexBoosters>
+        <Booster>Failed password</Booster>
+      </RegexBoosters>
+      <!-- This is the regex that tries to extract an IP from the entries that contain the booster words for more infos see regex101.com-->
+      <Regex>
+          (\b(?:[0-9]{1,3}\.){3}[0-9]{1,3}\b)
+      </Regex>
+    </Task>
+    
   </Tasks>
-</Config>
+</Config>
diff --git a/Source/EvlWatcher/EvlWatcher/tasks/GenericIPBlockingTask.cs b/Source/EvlWatcher/EvlWatcher/tasks/GenericIPBlockingTask.cs
@@ -101,13 +101,16 @@ public override List<IPAddress> GetPermaBanVictims()
             lock (_syncObject)
             {
                 List<IPAddress> permaList = new List<IPAddress>();
-                foreach (KeyValuePair<IPAddress, int> kvp in _bannedCount.Where(p => p.Value >= PermaBanCount))
+                if (PermaBanCount >= 0)
                 {
-                    permaList.Add(kvp.Key);
-                    _logger.Dump($"Permanently banned {kvp.Value} (strike count was over {PermaBanCount}) ", SeverityLevel.Info);
+                    foreach (KeyValuePair<IPAddress, int> kvp in _bannedCount.Where(p => p.Value >= PermaBanCount))
+                    {
+                        permaList.Add(kvp.Key);
+                        _logger.Dump($"Permanently banned {kvp.Value} (strike count was over {PermaBanCount}) ", SeverityLevel.Info);
+                    }
+                    foreach (IPAddress ip in permaList)
+                        _bannedCount.Remove(ip);
                 }
-                foreach (IPAddress ip in permaList)
-                    _bannedCount.Remove(ip);
 
                 return permaList;
             }
diff --git a/Source/EvlWatcherConsole/EvlWatcherConsole/EvlWatcherConsole.csproj b/Source/EvlWatcherConsole/EvlWatcherConsole/EvlWatcherConsole.csproj
@@ -65,7 +65,7 @@
   </PropertyGroup>
   <ItemGroup>
     <Reference Include="EvlWatcher.WCF">
-      <HintPath>..\..\EvlWatcher\EvlWatcher.WCF\bin\Debug\EvlWatcher.WCF.dll</HintPath>
+      <HintPath>..\..\EvlWatcher\EvlWatcher.WCF\bin\Release\EvlWatcher.WCF.dll</HintPath>
     </Reference>
     <Reference Include="System" />
     <Reference Include="System.Data" />
diff --git a/Source/EvlWatcherConsole/EvlWatcherConsole/Model/EvlWatcherModel.cs b/Source/EvlWatcherConsole/EvlWatcherConsole/Model/EvlWatcherModel.cs
@@ -143,6 +143,11 @@ internal void RemoveTemporaryBan(IPAddress selectedTemporaryIP)
             Service.RemoveTemporaryBan(selectedTemporaryIP);
         }
 
+        internal void AddPermanentIPBans(IPAddress[] iPAddresses)
+        {
+            Service.SetPermanentBans(iPAddresses);
+        }
+
         #endregion
     }
 }
diff --git a/Source/EvlWatcherConsole/EvlWatcherConsole/Properties/AssemblyInfo.cs b/Source/EvlWatcherConsole/EvlWatcherConsole/Properties/AssemblyInfo.cs
@@ -49,5 +49,5 @@
 // Sie können alle Werte angeben oder die standardmäßigen Build- und Revisionsnummern 
 // übernehmen, indem Sie "*" eingeben:
 // [assembly: AssemblyVersion("1.0.*")]
-[assembly: AssemblyVersion("2.1.2.0")]
-[assembly: AssemblyFileVersion("2.1.2.0")]
+[assembly: AssemblyVersion("2.1.3.0")]
+[assembly: AssemblyFileVersion("2.1.3.0")]
diff --git a/Source/EvlWatcherConsole/EvlWatcherConsole/View/MainWindow.xaml b/Source/EvlWatcherConsole/EvlWatcherConsole/View/MainWindow.xaml
@@ -2,7 +2,7 @@
         xmlns="http://schemas.microsoft.com/winfx/2006/xaml/presentation"
         xmlns:x="http://schemas.microsoft.com/winfx/2006/xaml"
         xmlns:vm="clr-namespace:EvlWatcherConsole.ViewModel"
-        Title="EvlWatcher v2.0 Console" Height="650" Width="825" MinHeight="650" MinWidth="825" Icon="pack://application:,,,/Resources/EvlWatcher.ico" WindowStyle="ThreeDBorderWindow">
+        Title="EvlWatcher v2.1.3 Console" Height="650" Width="825" MinHeight="650" MinWidth="825" Icon="pack://application:,,,/Resources/EvlWatcher.ico" WindowStyle="ThreeDBorderWindow">
     <Window.DataContext>
         <vm:MainWindowViewModel/>
     </Window.DataContext>
@@ -41,14 +41,18 @@
                                 <ColumnDefinition Width="30"></ColumnDefinition>
                                 <ColumnDefinition Width="30"></ColumnDefinition>
                                 <ColumnDefinition Width="30"></ColumnDefinition>
+                                <ColumnDefinition Width="30"></ColumnDefinition>
                             </Grid.ColumnDefinitions>
                             <Button Grid.Column="1" Margin="5,5,5,5" Command="{Binding RemoveTemporaryBanCommand}" IsEnabled="{Binding IsServiceResponding}" ToolTip="Remove the selected IP from the temporary ban list">
                                 <Image Source="pack://application:,,,/Resources/close_32.ico"></Image>
                             </Button>
                             <Button Grid.Column="2" Command="{Binding MoveTemporaryToPermaCommand}" Margin="5,5,5,5" Grid.Row="2" IsEnabled="{Binding IsServiceResponding}" ToolTip="Move to permanent ban list">
                                 <Image Source="pack://application:,,,/Resources/lock_32.ico"></Image>
                             </Button>
-                            <Button Grid.Column="3" Command="{Binding MoveTemporaryToWhiteListCommand}" Margin="5,5,5,5" Grid.Row="2" IsEnabled="{Binding IsServiceResponding}" ToolTip="Whitelist this IP">
+                            <Button Grid.Column="3" BorderThickness="3" Command="{Binding MoveAllTemporaryToPermaCommand}" Margin="5,5,5,5" Grid.Row="2" IsEnabled="{Binding CanAddTemporaryToPerma}" ToolTip="Move all IPS to permanent ban list">
+                                <Image Source="pack://application:,,,/Resources/lock_32.ico"></Image>
+                            </Button>
+                            <Button Grid.Column="4" Command="{Binding MoveTemporaryToWhiteListCommand}" Margin="5,5,5,5" Grid.Row="2" IsEnabled="{Binding IsServiceResponding}" ToolTip="Whitelist this IP">
                                 <Image Source="pack://application:,,,/Resources/lock_open_32.ico"></Image>
                             </Button>
                         </Grid>
diff --git a/Source/EvlWatcherConsole/EvlWatcherConsole/ViewModel/MainWindowViewModel.cs b/Source/EvlWatcherConsole/EvlWatcherConsole/ViewModel/MainWindowViewModel.cs
@@ -52,11 +52,17 @@ public class MainWindowViewModel : GuiObject
 
         public MainWindowViewModel()
         {
+            TemporarilyBannedIPs.CollectionChanged += TemporarilyBannedIPs_CollectionChanged;
             _model = new EvlWatcherModel();
 
             StartUpdating();
         }
 
+        private void TemporarilyBannedIPs_CollectionChanged(object sender, System.Collections.Specialized.NotifyCollectionChangedEventArgs e)
+        {
+            Notify(nameof(CanAddTemporaryToPerma));
+        }
+
         ~MainWindowViewModel()
         {
             StopUpdating();
@@ -229,6 +235,8 @@ public string SelectedTaskName
             }
         }
 
+        public bool CanAddTemporaryToPerma => IsServiceResponding && TemporarilyBannedIPs.Count > 0;
+
         public string CurrentTaskRegex
         {
             get
@@ -401,6 +409,14 @@ public ICommand MoveTemporaryToPermaCommand
                 return new RelayCommand(p => { _model.AddPermanentIPBan(SelectedTemporaryIP); }, p => { return SelectedTemporaryIP != null; });
             }
         }
+        public ICommand MoveAllTemporaryToPermaCommand
+        {
+            get
+            {
+                return new RelayCommand(p => { _model.AddPermanentIPBans(TemporarilyBannedIPs.ToArray()); }, p => { return CanAddTemporaryToPerma; });
+            }
+        }
+
 
         public bool IsIPTabSelected
         {
@@ -554,6 +570,7 @@ private set
             {
                 _isServiceResponding = value;
                 Notify(nameof(IsServiceResponding));
+                Notify(nameof(CanAddTemporaryToPerma));
             }
         }
 
diff --git a/Versions/v2/EvlWatcher-v2.1.3 release notes.txt b/Versions/v2/EvlWatcher-v2.1.3 release notes.txt
diff --git a/Versions/v2/EvlWatcher-v2.1.3-setup.exe b/Versions/v2/EvlWatcher-v2.1.3-setup.exe

Original file line number	Diff line number	Diff line change
`@@ -44,7 +44,7 @@ public class EvlWatcher : ServiceBase, IEvlWatcherService`
`44`	`44`	`/// <summary>`
`45`	`45`	`/// all loaded tasks`
`46`	`46`	`/// </summary>`
`47`		`- private static readonly IList<LogTask> _logTasks = new List<LogTask>();`
	`47`	`+ private static readonly List<LogTask> _logTasks = new List<LogTask>();`
`48`	`48`
`49`	`49`	`/// <summary>`
`50`	`50`	`/// adds some extra output`
`@@ -142,7 +142,7 @@ public void SetPermanentBan(IPAddress address)`
`142`	`142`	`{`
`143`	`143`	`EnsureClientPrivileges();`
`144`	`144`
`145`		`- SetPermanentBanInternal(address);`
	`145`	`+ SetPermanentBanInternal(new IPAddress[] { address });`
`146`	`146`	`}`
`147`	`147`
`148`	`148`	`public void ClearPermanentBan(IPAddress address)`
`@@ -181,6 +181,7 @@ public IPAddress[] GetTemporarilyBannedIPs()`
`181`	`181`	`List<IPAddress> result = new List<IPAddress>(_lastPolledTempBans);`
`182`	`182`
`183`	`183`	`result.RemoveAll(p => _serviceconfiguration.BlacklistAddresses.Contains(p));`
	`184`	`+ result.RemoveAll(p => IsWhiteListed(p));`
`184`	`185`
`185`	`186`	`return result.ToArray();`
`186`	`187`	`}`
`@@ -296,7 +297,6 @@ private void EnsureClientPrivileges()`
`296`	`297`	`/// <summary>`
`297`	`298`	`/// creates generic log tasks from configuration`
`298`	`299`	`/// </summary>`
`299`		`- /// <param name="d"></param>`
`300`	`300`	`private void InitWorkersFromConfig(IQueryable<IPersistentTaskConfiguration> taskConfigurations)`
`301`	`301`	`{`
`302`	`302`	`lock (_syncObject)`
`@@ -409,7 +409,7 @@ private void Run()`
`409`	`409`	`eventTypesToTimeFramedEvents.Clear();`
`410`	`410`
`411`	`411`	`//first read all relevant events (events that are required by any of the tasks)`
`412`		`- foreach (string requiredEventType in requiredEventTypesToLogTasks.Keys)`
	`412`	`+ foreach (string requiredEventType in requiredEventTypesToLogTasks.Keys.ToList())`
`413`	`413`	`{`
`414`	`414`	`_logger.Dump($"Scanning {requiredEventType}", SeverityLevel.Debug);`
`415`	`415`	`eventTypesToNewEvents.Add(requiredEventType, new List<ExtractedEventRecord>());`
`@@ -462,7 +462,10 @@ private void Run()`
`462`	`462`	`}`
`463`	`463`	`catch (EventLogNotFoundException)`
`464`	`464`	`{`
`465`		`- _logger.Dump($"Event Log {requiredEventType} was not found, tasks that require these events will not work", SeverityLevel.Error);`
	`465`	`+ _logger.Dump($"Event Log {requiredEventType} was not found, tasks that require these events will not work and are disabled.", SeverityLevel.Info);`
	`466`	`+ _logTasks.RemoveAll(l => l.EventPath.Contains(requiredEventType));`
	`467`	`+ requiredEventTypesToLogTasks.Remove(requiredEventType);`
	`468`	`+`
`466`	`469`	`}`
`467`	`470`	`}`
`468`	`471`
`@@ -507,8 +510,7 @@ private void Run()`
`507`	`510`	`{`
`508`	`511`	`if (t is IPBlockingLogTask ipTask)`
`509`	`512`	`{`
`510`		`- foreach (IPAddress perma in ipTask.GetPermaBanVictims())`
`511`		`- SetPermanentBanInternal(perma);`
	`513`	`+ SetPermanentBanInternal(ipTask.GetPermaBanVictims().ToArray());`
`512`	`514`
`513`	`515`	`List<IPAddress> blockedIPs = ipTask.GetTempBanVictims();`
`514`	`516`
`@@ -568,9 +570,10 @@ private void Run()`
`568`	`570`	`}`
`569`	`571`	`}`
`570`	`572`
`571`		`- private void SetPermanentBanInternal(IPAddress address)`
	`573`	`+ private void SetPermanentBanInternal(IPAddress[] addressList)`
`572`	`574`	`{`
`573`		`- _serviceconfiguration.AddBlackListAddress(address);`
	`575`	`+ foreach (IPAddress address in addressList)`
	`576`	`+ _serviceconfiguration.AddBlackListAddress(address);`
`574`	`577`
`575`	`578`	`PushBanList();`
`576`	`579`	`}`
`@@ -624,6 +627,13 @@ public void RemoveTemporaryBan(IPAddress address)`
`624`	`627`	`}`
`625`	`628`	`}`
`626`	`629`
	`630`	`+ public void SetPermanentBans(IPAddress[] addressList)`
	`631`	`+ {`
	`632`	`+ EnsureClientPrivileges();`
	`633`	`+`
	`634`	`+ SetPermanentBanInternal(addressList);`
	`635`	`+ }`
	`636`	`+`
`627`	`637`	`#endregion`
`628`	`638`	`}`
`629`	`639`	`}`