BanForge

Log-based IPS system written in Go for Linux-based system.

Table of contents

1. Overview
2. Requirements
3. Installation
4. Usage
5. License

Overview

BanForge is a simple IPS for replacement fail2ban in Linux system. All release are available on my self-hosted Gitea after release v1.0.0 are available on Github release page. If you have any questions or suggestions, create issue on Github.

Roadmap

• Rule system
• Nginx and Sshd support
• Working with ufw/iptables/nftables/firewalld
• Add support for most popular web-service
• User regexp for custom services
• TUI interface

Requirements

• Go 1.25+
• ufw/iptables/nftables/firewalld

Installation

Search for a release on the Gitea releases page and download it. Then create or copy(/build dir) a systemd unit(openrc script) file. Or clone the repo and use the Makefile.

git clone https://gitea.d3m0k1d.ru/d3m0k1d/BanForge.git
cd BanForge
sudo make build-daemon
cd bin

Usage

For first steps use this commands

banforge init   # Create config files and database
banforge daemon # Start BanForge daemon (use systemd or another init system to create a service)

You can edit the config file with examples in

• /etc/banforge/config.toml main config file
• /etc/banforge/rules.toml ban rules For more information see the docs.

License

The project is licensed under the GPL-3.0