Add firewall rules from abuser blacklists

Find a file

Stefan Tatschner 69f8189612 Revert "https seems to be broken in openbl.org" This reverts commit `c5fd766024`. It seems to work again.		2016-10-25 14:32:38 +02:00
.gitignore	Initial commit	2016-10-22 15:28:20 +02:00
fetch.go	Revert "https seems to be broken in openbl.org"	2016-10-25 14:32:38 +02:00
firewall.go	Yeah... I decided to remove logrus now	2016-10-24 11:50:58 +02:00
firewall_dummy.go	Yeah... I decided to remove logrus now	2016-10-24 11:50:58 +02:00
firewall_ipfw.go	Yeah... I decided to remove logrus now	2016-10-24 11:50:58 +02:00
LICENSE	Initial commit	2016-10-22 15:28:20 +02:00
main.go	Add a starting log message	2016-10-24 11:55:06 +02:00
README.md	Updated README with some useful sentences...	2016-10-24 17:11:22 +02:00

README.md

openbl

This is a remake of my openbl.org Python script. It is about seven times faster than the Python implementation on FreeBSD. It also, does not create wrong firewall tables any more.

What's this?

A program that downloads a list of ip addresses from so called blacklists. These blacklists collect ip addresses which have been suspicious due to detected ssh, ftp, ... break in attemps. In order to benefit from such blacklists (openbl.org, spamhouse) a program is needed that downloads those lists, validates the downloaded strings and adds them to an appropriate firewall table. This go progam, openbl, does exactly this.

Usage

# export GOPATH="$HOME/Go"
# go get -u github.com/rumpelsepp/openbl
# ~/Go/bin/openbl
2016/10/24 17:07:38 Starting mainLoop().
2016/10/24 17:08:34 Added 25969 addresses to firewall using ipfw backend.
2016/10/24 17:08:34 Finished.

Supported platforms

Currently there is only FreeBSD's ipfw firewall supported. Other firewall backends can be added easily. Just look at the (rather short) source code!

A note from me

This project emerged because I wanted to learn Go. If there is anything in the code that looks messy, then please let me know! :)