banip: new package to block incoming & outgoing ip addresses 7373/head
authorDirk Brenken <dev@brenken.org>
Sat, 10 Nov 2018 10:01:45 +0000 (11:01 +0100)
committerDirk Brenken <dev@brenken.org>
Sat, 10 Nov 2018 10:01:45 +0000 (11:01 +0100)
commitb17588a8568a3e23c2a86802b2b8f3dbdbf411dd
treeb99dbfa5ce7bbc8171221b1814f492f085020f57
parentd785b15857284e103e3252c76b4be6a6853b47ac
banip: new package to block incoming & outgoing ip addresses

a new script based package called "banIP" to block
incoming & outgoing ip adresses/subnets via ipset.

Features:
* a shell script which uses ipset and iptables
  to ban a large number of IP addresses
  published in various IP blacklists (bogon, firehol etc.)
* support blocking by ASN numbers
* support blocking by iso country codes
* support local white & blacklist (IPv4, IPv6 & CIDR notation)
* auto-add unsuccessful ssh login attempts to local blacklist
* auto-add the uplink subnet to local whitelist
* per source configuration of SRC (incoming) and DST (outgoing)
* supports IPv4 & IPv6

Strong LuCI support:
* easy interface to track & change all aspects of your ipset
  configuration on the fly
* integrated IPSet-Lookup
* integrated RIPE-Lookup
* Log-Viewer & online configuration of white- & blacklist

LuCI-Screenshots will follow in the second post.
Forum discussion:
https://forum.openwrt.org/t/banip-new-project-needs-testers-feedback/16985

Signed-off-by: Dirk Brenken <dev@brenken.org>
net/banip/Makefile [new file with mode: 0644]
net/banip/files/README.md [new file with mode: 0644]
net/banip/files/banip.blacklist [new file with mode: 0644]
net/banip/files/banip.conf [new file with mode: 0644]
net/banip/files/banip.hotplug [new file with mode: 0644]
net/banip/files/banip.init [new file with mode: 0755]
net/banip/files/banip.sh [new file with mode: 0755]
net/banip/files/banip.whitelist [new file with mode: 0644]