zwitschi
9f8ab0f61c
- Implemented a new utility for querying WHOIS information and consolidating IP addresses by subnet. - Added caching mechanism for WHOIS responses to improve performance. - Introduced functions for loading and saving the WHOIS cache, querying subnets, and consolidating IPs based on a threshold. feat: create Flask web UI for intrusion detection system - Developed a Flask web application to manage the intrusion detection system. - Implemented routes for scanning, reports, blocklist management, and firewall configuration. - Added helper functions for reading files and handling requests. feat: define routes for web UI - Registered routes for various web pages and API endpoints in the Flask application. - Implemented functionality for scanning, reporting, blocklist management, and firewall state retrieval. feat: implement background scan runner for web UI - Created a background scan runner to handle scan jobs in a separate thread. - Managed an in-memory job store for tracking scan jobs and their statuses. - Added persistence for scan jobs to maintain state across application restarts. chore: update start script for Flask application - Enhanced the PowerShell start script to check for the existence of the virtual environment. - Added comments and structured the script for better readability and usability.
190 lines
3.5 KiB
JSON
190 lines
3.5 KiB
JSON
[
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "defconf:",
|
|
"connection-state": "established,related,untracked"
|
|
},
|
|
{
|
|
"action": "drop",
|
|
"chain": "input",
|
|
"comment": "defconf:",
|
|
"connection-state": "invalid"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "defconf:",
|
|
"protocol": "icmpv6"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "defconf:",
|
|
"port": "33434-33534",
|
|
"protocol": "udp"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "defconf:",
|
|
"dst-port": "546",
|
|
"protocol": "udp",
|
|
"src-address": "fe80::/10"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "defconf:",
|
|
"dst-port": "500,4500",
|
|
"protocol": "udp"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "defconf:",
|
|
"protocol": "ipsec-ah"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "defconf:",
|
|
"protocol": "ipsec-esp"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "defconf:",
|
|
"ipsec-policy": "in,ipsec"
|
|
},
|
|
{
|
|
"action": "drop",
|
|
"chain": "input",
|
|
"comment": "defconf:",
|
|
"in-interface-list": "!LAN"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"connection-state": "established,related,untracked"
|
|
},
|
|
{
|
|
"action": "drop",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"connection-state": "invalid"
|
|
},
|
|
{
|
|
"action": "drop",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"src-address-list": "bad_ipv6"
|
|
},
|
|
{
|
|
"action": "drop",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"dst-address-list": "bad_ipv6"
|
|
},
|
|
{
|
|
"action": "drop",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"hop-limit": "equal:1",
|
|
"protocol": "icmpv6"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "forward",
|
|
"comment": "ids",
|
|
"log": "no",
|
|
"log-prefix": "",
|
|
"src-address-list": "Openfactory"
|
|
},
|
|
{
|
|
"action": "drop",
|
|
"chain": "forward",
|
|
"comment": "ids",
|
|
"src-address-list": "Blocked"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"protocol": "icmpv6"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"protocol": "139"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"dst-port": "500,4500",
|
|
"protocol": "udp"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"protocol": "ipsec-ah"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"protocol": "ipsec-esp"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"ipsec-policy": "in,ipsec"
|
|
},
|
|
{
|
|
"action": "drop",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"in-interface-list": "!LAN"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "forward",
|
|
"comment": "Allow",
|
|
"protocol": "icmpv6"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "Allow",
|
|
"protocol": "icmpv6"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "ids",
|
|
"src-address-list": "Openfactory"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "ids",
|
|
"src-address-list": "Cloudflare"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "ids",
|
|
"src-address-list": "PaloAlto"
|
|
},
|
|
{
|
|
"action": "drop",
|
|
"chain": "input",
|
|
"comment": "ids",
|
|
"src-address-list": "Blocked"
|
|
}
|
|
] |