From 598b297b398814ce0c7ce0171540ba8b81804ece Mon Sep 17 00:00:00 2001
From: Clemens Schwaighofer <clemens.schwaighofer@egplusww.com>
Date: Tue, 19 Nov 2024 13:41:04 +0900
Subject: [PATCH] Akamai Site Shield IP list update with Open IP entries

---
 etc/apache2/conf-include/akamai.proxy.list    | 29 +++++++------------
 .../conf-include/akamai.site-shield.list      | 24 +++++++++++++--
 2 files changed, 32 insertions(+), 21 deletions(-)

diff --git a/etc/apache2/conf-include/akamai.proxy.list b/etc/apache2/conf-include/akamai.proxy.list
index a105290..813651a 100644
--- a/etc/apache2/conf-include/akamai.proxy.list
+++ b/etc/apache2/conf-include/akamai.proxy.list
@@ -1,23 +1,14 @@
 # https://techdocs.akamai.com/property-mgr/docs/origin-ip-access-control
-# per: 2022/9/8
-# Use the site-shield list for WAF setups
-23.32.0.0/11
-23.192.0.0/11
+# https://techdocs.akamai.com/origin-ip-acl/docs/update-your-origin-server
+# per: 2024/11/19
+# IPv4
 2.16.0.0/13
-104.64.0.0/10
-184.24.0.0/13
 23.0.0.0/12
+23.192.0.0/11
+23.32.0.0/11
 95.100.0.0/15
-92.122.0.0/15
-172.232.0.0/13
-184.50.0.0/15
-88.221.0.0/16
-23.64.0.0/14
-72.246.0.0/15
-96.16.0.0/15
-96.6.0.0/15
-69.192.0.0/16
-23.72.0.0/13
-173.222.0.0/15
-118.214.0.0/16
-184.84.0.0/14
\ No newline at end of file
+184.24.0.0/13
+# IPv6
+2a02:26f0::/32
+2600:1400::/24
+2405:9600::/32
diff --git a/etc/apache2/conf-include/akamai.site-shield.list b/etc/apache2/conf-include/akamai.site-shield.list
index a0caf45..1bdc4ca 100644
--- a/etc/apache2/conf-include/akamai.site-shield.list
+++ b/etc/apache2/conf-include/akamai.site-shield.list
@@ -1,4 +1,21 @@
-IP Addresses - Omnicom Site Shield Sites_20221118.csv
+# Copy in from akamai.proxy.list
+# https://techdocs.akamai.com/property-mgr/docs/origin-ip-access-control
+# https://techdocs.akamai.com/origin-ip-acl/docs/update-your-origin-server
+# per: 2024/11/19
+# IPv4
+2.16.0.0/13
+23.0.0.0/12
+23.192.0.0/11
+23.32.0.0/11
+95.100.0.0/15
+184.24.0.0/13
+# IPv6
+2a02:26f0::/32
+2600:1400::/24
+2405:9600::/32
+
+# OLD List, possible outdated
+# IP Addresses - Omnicom Site Shield Sites_20221118.csv
 104.75.169.0/24
 104.88.195.0/24
 104.93.21.0/24
@@ -43,4 +60,7 @@ IP Addresses - Omnicom Site Shield Sites_20221118.csv
 96.17.111.0/24
 96.17.149.0/24
 96.7.218.0/24
-96.7.74.0/24
\ No newline at end of file
+96.7.74.0/24
+# 2024/11/19: NEW, but not confirmed by Akamaibut not sure
+23.211.177.0/24
+23.213.31.0/24
\ No newline at end of file