Compare commits
3 Commits
1bbbd97190
...
424f5db9af
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
424f5db9af | ||
|
|
1cc9f3d191 | ||
|
|
f46d3242b6 |
22
README.md
22
README.md
@@ -0,0 +1,22 @@
|
|||||||
|
# BanForge
|
||||||
|
|
||||||
|
Log-based IPS system written in Go for Linux based system.
|
||||||
|
|
||||||
|
# Table of contents
|
||||||
|
1. [Overview](#overview)
|
||||||
|
2. [Requirements](#requirements)
|
||||||
|
3. [Installation](#installation)
|
||||||
|
4. [Usage](#usage)
|
||||||
|
5. [License](#license)
|
||||||
|
|
||||||
|
# Overview
|
||||||
|
BanForge is a simple IPS for replacement fail2ban in Linux system.
|
||||||
|
The project is currently in its early stages of development.
|
||||||
|
All release are available on my self-hosted [Gitea](https://gitea.d3m0k1d.ru/d3m0k1d/BanForge) because Github have limit for Actions.
|
||||||
|
If you have any questions or suggestions, create issue on [Github](https://github.com/d3m0k1d/BanForge/issues).
|
||||||
|
|
||||||
|
## Roadmap
|
||||||
|
- [ ] Real-time Nginx log monitoring
|
||||||
|
- [ ] Add support for other service
|
||||||
|
- [ ] Add support for user service with regular expressions
|
||||||
|
- [ ] TUI interface
|
||||||
|
|||||||
@@ -16,13 +16,25 @@ func NewUfw(logger *logger.Logger) *Ufw {
|
|||||||
}
|
}
|
||||||
|
|
||||||
func (ufw *Ufw) Ban(ip string) error {
|
func (ufw *Ufw) Ban(ip string) error {
|
||||||
|
validateIP(ip)
|
||||||
cmd := exec.Command("sudo", "ufw", "--force", "deny", "from", ip)
|
cmd := exec.Command("sudo", "ufw", "--force", "deny", "from", ip)
|
||||||
ufw.logger.Info("Banning " + ip)
|
output, err := cmd.CombinedOutput()
|
||||||
return cmd.Run()
|
if err != nil {
|
||||||
|
ufw.logger.Error(err.Error())
|
||||||
|
return err
|
||||||
|
}
|
||||||
|
ufw.logger.Info("Banning " + ip + " " + string(output))
|
||||||
|
return nil
|
||||||
}
|
}
|
||||||
|
|
||||||
func (ufw *Ufw) Unban(ip string) error {
|
func (ufw *Ufw) Unban(ip string) error {
|
||||||
|
validateIP(ip)
|
||||||
cmd := exec.Command("sudo", "ufw", "--force", "delete", "deny", "from", ip)
|
cmd := exec.Command("sudo", "ufw", "--force", "delete", "deny", "from", ip)
|
||||||
ufw.logger.Info("Unbanning " + ip)
|
output, err := cmd.CombinedOutput()
|
||||||
return cmd.Run()
|
if err != nil {
|
||||||
|
ufw.logger.Error(err.Error())
|
||||||
|
return err
|
||||||
|
}
|
||||||
|
ufw.logger.Info("Unbanning " + ip + " " + string(output))
|
||||||
|
return nil
|
||||||
}
|
}
|
||||||
|
|||||||
18
internal/blocker/validators.go
Normal file
18
internal/blocker/validators.go
Normal file
@@ -0,0 +1,18 @@
|
|||||||
|
package blocker
|
||||||
|
|
||||||
|
import (
|
||||||
|
"fmt"
|
||||||
|
"net"
|
||||||
|
)
|
||||||
|
|
||||||
|
func validateIP(ip string) error {
|
||||||
|
if ip == "" {
|
||||||
|
return fmt.Errorf("empty IP")
|
||||||
|
}
|
||||||
|
|
||||||
|
if net.ParseIP(ip) == nil {
|
||||||
|
return fmt.Errorf("invalid IP: %s", ip)
|
||||||
|
}
|
||||||
|
|
||||||
|
return nil
|
||||||
|
}
|
||||||
Reference in New Issue
Block a user