zwitschi
9f8ab0f61c
- Implemented a new utility for querying WHOIS information and consolidating IP addresses by subnet. - Added caching mechanism for WHOIS responses to improve performance. - Introduced functions for loading and saving the WHOIS cache, querying subnets, and consolidating IPs based on a threshold. feat: create Flask web UI for intrusion detection system - Developed a Flask web application to manage the intrusion detection system. - Implemented routes for scanning, reports, blocklist management, and firewall configuration. - Added helper functions for reading files and handling requests. feat: define routes for web UI - Registered routes for various web pages and API endpoints in the Flask application. - Implemented functionality for scanning, reporting, blocklist management, and firewall state retrieval. feat: implement background scan runner for web UI - Created a background scan runner to handle scan jobs in a separate thread. - Managed an in-memory job store for tracking scan jobs and their statuses. - Added persistence for scan jobs to maintain state across application restarts. chore: update start script for Flask application - Enhanced the PowerShell start script to check for the existence of the virtual environment. - Added comments and structured the script for better readability and usability.
64 lines
1.6 KiB
Python
64 lines
1.6 KiB
Python
#!/usr/bin/env python3
|
|
"""IP helper functions for the intrusion-detection system."""
|
|
|
|
from __future__ import annotations
|
|
|
|
import ipaddress
|
|
from typing import Iterable
|
|
|
|
from .whitelists import WHITELIST_NETS as _WHITELIST_NETS
|
|
|
|
|
|
def parse_ip(value: str):
|
|
"""Return an ip_address object, or None if `value` is not an IP."""
|
|
try:
|
|
return ipaddress.ip_address(value)
|
|
except (ValueError, TypeError):
|
|
return None
|
|
|
|
|
|
def ip_version(value: str) -> int | None:
|
|
addr = parse_ip(value)
|
|
return addr.version if addr else None
|
|
|
|
|
|
def is_ipv6(value: str) -> bool:
|
|
return ip_version(value) == 6
|
|
|
|
|
|
def is_ipv4(value: str) -> bool:
|
|
return ip_version(value) == 4
|
|
|
|
|
|
def whitelist_of(value: str) -> str | None:
|
|
"""Return the whitelist name an IP belongs to, else None."""
|
|
addr = parse_ip(value)
|
|
if addr is None:
|
|
return None
|
|
for name, nets in _WHITELIST_NETS.items():
|
|
for net in nets:
|
|
if addr.version == net.version and addr in net:
|
|
return name
|
|
return None
|
|
|
|
|
|
def is_whitelisted(value: str) -> bool:
|
|
return whitelist_of(value) is not None
|
|
|
|
|
|
def sort_ips(ips: Iterable[str]) -> list[str]:
|
|
"""Numeric sort, IPv4 before IPv6, unparseable last."""
|
|
def key(ip: str):
|
|
addr = parse_ip(ip)
|
|
if addr is None:
|
|
return (9, b"", ip)
|
|
return (addr.version, addr.packed, "")
|
|
return sorted(ips, key=key)
|
|
|
|
|
|
def split_versions(ips: Iterable[str]) -> tuple[list[str], list[str]]:
|
|
"""Split an IP iterable into (sorted IPv4, sorted IPv6)."""
|
|
ips = list(ips)
|
|
return (sort_ips(ip for ip in ips if is_ipv4(ip)),
|
|
sort_ips(ip for ip in ips if is_ipv6(ip)))
|