Add firewalld and iptables ban realization, add firewall config file in config types

internal/blocker/firewalld.go

@@ -0,0 +1,58 @@
+package blocker
+
+import (
+	"github.com/d3m0k1d/BanForge/internal/logger"
+	"os/exec"
+)
+
+type Firewalld struct {
+	logger *logger.Logger
+}
+
+func NewFirewalld(logger *logger.Logger) *Firewalld {
+	return &Firewalld{
+		logger: logger,
+	}
+}
+
+func (f *Firewalld) Ban(ip string) error {
+	err := validateIP(ip)
+	if err != nil {
+		return err
+	}
+	cmd := exec.Command("sudo", "firewall-cmd", "--zone=drop", "--add-source="+ip, "--permanent")
+	output, err := cmd.CombinedOutput()
+	if err != nil {
+		f.logger.Error(err.Error())
+		return err
+	}
+	f.logger.Info("Add source " + ip + " " + string(output))
+	output, err = exec.Command("sudo", "firewall-cmd", "--reload").CombinedOutput()
+	if err != nil {
+		f.logger.Error(err.Error())
+		return err
+	}
+	f.logger.Info("Reload " + string(output))
+	return nil
+}
+
+func (f *Firewalld) Unban(ip string) error {
+	err := validateIP(ip)
+	if err != nil {
+		return err
+	}
+	cmd := exec.Command("sudo", "firewall-cmd", "--zone=drop", "--remove-source="+ip, "--permanent")
+	output, err := cmd.CombinedOutput()
+	if err != nil {
+		f.logger.Error(err.Error())
+		return err
+	}
+	f.logger.Info("Remove source " + ip + " " + string(output))
+	output, err = exec.Command("sudo", "firewall-cmd", "--reload").CombinedOutput()
+	if err != nil {
+		f.logger.Error(err.Error())
+		return err
+	}
+	f.logger.Info("Reload " + string(output))
+	return nil
+}

internal/blocker/iptables.go

@@ -0,0 +1,63 @@
+package blocker
+
+import (
+	"os/exec"
+
+	"github.com/d3m0k1d/BanForge/internal/logger"
+)
+
+type Iptables struct {
+	logger *logger.Logger
+	config string
+}
+
+func NewIptables(logger *logger.Logger, config string) *Iptables {
+	return &Iptables{
+		logger: logger,
+		config: config,
+	}
+}
+
+func (f *Iptables) Ban(ip string) error {
+	err := validateIP(ip)
+	if err != nil {
+		return err
+	}
+	cmd := exec.Command("sudo", "iptables", "-A", "INPUT", "-s", ip, "-j", "DROP")
+	output, err := cmd.CombinedOutput()
+	if err != nil {
+		f.logger.Error(err.Error())
+		return err
+	}
+	f.logger.Info("Banning " + ip + " " + string(output))
+	cmd = exec.Command("sudo", "iptables-save", "-f", f.config)
+	output, err = cmd.CombinedOutput()
+	if err != nil {
+		f.logger.Error(err.Error())
+		return err
+	}
+	f.logger.Info("Config saved " + string(output))
+	return nil
+}
+
+func (f *Iptables) Unban(ip string) error {
+	err := validateIP(ip)
+	if err != nil {
+		return err
+	}
+	cmd := exec.Command("sudo", "iptables", "-D", "INPUT", "-s", ip, "-j", "DROP")
+	output, err := cmd.CombinedOutput()
+	if err != nil {
+		f.logger.Error(err.Error())
+		return err
+	}
+	f.logger.Info("Unbanning " + ip + " " + string(output))
+	cmd = exec.Command("sudo", "iptables-save", "-f", f.config)
+	output, err = cmd.CombinedOutput()
+	if err != nil {
+		f.logger.Error(err.Error())
+		return err
+	}
+	f.logger.Info("Config saved " + string(output))
+	return nil
+}

internal/blocker/nftables.go

@@ -0,0 +1 @@
+package blocker

internal/config/types.go

@@ -2,6 +2,7 @@ package config
 
 type Firewall struct {
 	Name    string `toml:"name"`
+	Config  string `toml:"config"`
 	BanTime int    `toml:"ban_time"`
 }