verita84/firewall
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix

Browse Source
This commit is contained in:
Your Name 2024-09-25 13:49:47 -06:00
parent bec4acd12e
commit b9a2d677dd
3 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
firewall.sh
View File

@ -7,6 +7,7 @@ ACCESS="/tmp/minute.log"
HTTP_LIMIT="100" HTTP_LIMIT="100"
RATE_LIMITED_HTTP="30" RATE_LIMITED_HTTP="30"
MODULES="/opt/firewall/modules" MODULES="/opt/firewall/modules"
TMP_BLOCK_TIMEOUT="20"
grep $DATE $NGINX_ACCESS >$ACCESS grep $DATE $NGINX_ACCESS >$ACCESS
#Firewall Port Configuration #Firewall Port Configuration
# #
@ -331,6 +332,8 @@ watch() {
bash $MODULES/module-rate-limit.sh $HTTP_LIMIT bash $MODULES/module-rate-limit.sh $HTTP_LIMIT
else else
bash $MODULES/module-rate-limit.sh $RATE_LIMITED_HTTP bash $MODULES/module-rate-limit.sh $RATE_LIMITED_HTTP
sleep $TMP_BLOCK_TIMEOUT
forgive
fi fi
} }

3
modules/module-akkoma-accounts.sh
View File

@ -5,12 +5,13 @@ ACCESS="/tmp/minute.log"
ATTACK="module-akkoma-accounts" ATTACK="module-akkoma-accounts"
SEARCH_SPAM=$(grep $2 $ACCESS | grep "api/v1/accounts" | grep $1 | wc -l) SEARCH_SPAM=$(grep $2 $ACCESS | grep "api/v1/accounts" | grep $1 | wc -l)
CHECK=$(cat $NFT_CACHE | sort -u | grep $1) CHECK=$(cat $NFT_CACHE | sort -u | grep $1)
if [[ "$SEARCH_SPAM" -gt 30 ]]; then if [[ "$SEARCH_SPAM" -gt 100 ]]; then
echo "$IP $CHECK $COUNT" echo "$IP $CHECK $COUNT"
if [ "$CHECK" = "" ]; then if [ "$CHECK" = "" ]; then
bash $FIREWALL ipBlockParser "$1" bash $FIREWALL ipBlockParser "$1"
bash $FIREWALL message "$ATTACK-$1" bash $FIREWALL message "$ATTACK-$1"
redis-cli SADD tmp_block $1 redis-cli SADD tmp_block $1
cp -f $ACCESS /tmp/debug-$ATTACK-$1.txt
echo "$ATTACK $1" echo "$ATTACK $1"
else else
echo "$ATTACK Ignoring Duplicate IP: $1" echo "$ATTACK Ignoring Duplicate IP: $1"

3
modules/module-go.sh
View File

@ -2,9 +2,10 @@
FIREWALL="/opt/firewall/firewall.sh" FIREWALL="/opt/firewall/firewall.sh"
ACCESS="/tmp/minute.log" ACCESS="/tmp/minute.log"
ATTACK="module-go" ATTACK="module-go"
GO_SPAM=$(grep $2 $ACCESS | grep -E "Go-http-client" | wc -l) GO_SPAM=$(grep $2 $ACCESS | grep "Go-http-client" | grep $1 | wc -l)
if [[ "$GO_SPAM" -gt 10 ]]; then if [[ "$GO_SPAM" -gt 10 ]]; then
bash $FIREWALL ipBlockParser "$1" bash $FIREWALL ipBlockParser "$1"
bash $FIREWALL message "$ATTACK-$1" bash $FIREWALL message "$ATTACK-$1"
redis-cli SADD tmp_block $1 redis-cli SADD tmp_block $1
cp $ACCESS /tmp/debug-$ATTACK-$1.txt
fi fi