zwitschi
9f8ab0f61c
- Implemented a new utility for querying WHOIS information and consolidating IP addresses by subnet. - Added caching mechanism for WHOIS responses to improve performance. - Introduced functions for loading and saving the WHOIS cache, querying subnets, and consolidating IPs based on a threshold. feat: create Flask web UI for intrusion detection system - Developed a Flask web application to manage the intrusion detection system. - Implemented routes for scanning, reports, blocklist management, and firewall configuration. - Added helper functions for reading files and handling requests. feat: define routes for web UI - Registered routes for various web pages and API endpoints in the Flask application. - Implemented functionality for scanning, reporting, blocklist management, and firewall state retrieval. feat: implement background scan runner for web UI - Created a background scan runner to handle scan jobs in a separate thread. - Managed an in-memory job store for tracking scan jobs and their statuses. - Added persistence for scan jobs to maintain state across application restarts. chore: update start script for Flask application - Enhanced the PowerShell start script to check for the existence of the virtual environment. - Added comments and structured the script for better readability and usability.
135 lines
2.6 KiB
JSON
135 lines
2.6 KiB
JSON
[
|
|
{
|
|
"action": "passthrough",
|
|
"chain": "forward",
|
|
"comment": "special"
|
|
},
|
|
{
|
|
"action": "fasttrack-connection",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"connection-state": "established,related",
|
|
"hw-offload": "yes",
|
|
"log": "no",
|
|
"log-prefix": ""
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"connection-state": "established,related",
|
|
"log": "no",
|
|
"log-prefix": ""
|
|
},
|
|
{
|
|
"action": "drop",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"connection-state": "invalid",
|
|
"log": "no",
|
|
"log-prefix": ""
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "forward",
|
|
"comment": "Allow",
|
|
"connection-nat-state": "dstnat"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "forward",
|
|
"comment": "allow",
|
|
"connection-state": "new",
|
|
"dst-address": "192.168.88.25",
|
|
"dst-port": "6667",
|
|
"log": "no",
|
|
"log-prefix": "",
|
|
"protocol": "tcp"
|
|
},
|
|
{
|
|
"action": "drop",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"connection-nat-state": "!dstnat",
|
|
"connection-state": "new",
|
|
"in-interface-list": "WAN",
|
|
"log": "no",
|
|
"log-prefix": ""
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"log": "no",
|
|
"log-prefix": "",
|
|
"protocol": "icmp"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"connection-state": "established",
|
|
"log": "no",
|
|
"log-prefix": ""
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "allow",
|
|
"dst-port": "500",
|
|
"protocol": "udp"
|
|
},
|
|
{
|
|
"action": "drop",
|
|
"chain": "input",
|
|
"comment": "Block",
|
|
"dst-port": "80,443",
|
|
"in-interface-list": "WAN",
|
|
"protocol": "tcp"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "Allow",
|
|
"dst-port": "80,443",
|
|
"in-interface-list": "LAN",
|
|
"protocol": "tcp",
|
|
"src-address": "192.168.88.0/24"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "ids",
|
|
"src-address-list": "Openfactory"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "ids",
|
|
"src-address-list": "Cloudflare"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "ids",
|
|
"src-address-list": "PaloAlto"
|
|
},
|
|
{
|
|
"action": "drop",
|
|
"chain": "input",
|
|
"comment": "ids",
|
|
"src-address-list": "Blocked"
|
|
},
|
|
{
|
|
"action": "drop",
|
|
"chain": "forward",
|
|
"comment": "ids",
|
|
"src-address-list": "Blocked"
|
|
},
|
|
{
|
|
"action": "drop",
|
|
"chain": "input",
|
|
"comment": "drop",
|
|
"in-interface": "pppoe-out1",
|
|
"log": "no",
|
|
"log-prefix": ""
|
|
}
|
|
] |