bobs
/
SYN-Scan-Firewall
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Port Scanning with block that IP with a banner...
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
10 Commits
1 Branch
0 Tags
4.2 MiB
 
 
Tag: Branch: Tree: main
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'main'
${ noResults }
Robert b662ab2564
delay 3 seconds for Banner to display, then block access. 		10 months ago
.gitignore build update 10 months ago
AppArmor.policy init 10 months ago
LICENSE init 10 months ago
README.md init 10 months ago
SYN-Scan-Firewall.go delay 3 seconds for Banner to display, then block access. 10 months ago
SYN-Scan-Firewall.service init 10 months ago
banner.service Commited out IP Deny... 10 months ago
banner_service.go init 10 months ago
config-example.yaml init 10 months ago
go.mod init 10 months ago
go.sum init 10 months ago
install.sh run banner 10 months ago
reBuild.sh if checks1 10 months ago
seccomp.conf init 10 months ago

README.md

SYN-Scan-Firewall

To block the IP from port scans...

./install.sh

/etc/SYN-Scan-Firewall/config.yaml

blockDuration: 10m
maxScanAttempts: 5
device: "enp2s0"              # Ethernet Device name  

logging:
  filePath: "/var/log/SYN-Scan-Firewall.log"
  maxSizeMB: 10               # Max log size in megabytes
  backups: 5                  # Number of backup logs to keep
  compressBackups: true       # Whether to gzip old logs
  timestampFormat: "2006-01-02T15:04:05" # Go time format

ignoredPorts:
  - 80    # HTTP
  - 443   # HTTPS
  - 9980  # php -S
  - 631   # CUPS (printing)
  - 9100  # print server ports
  - 53    # DNS
  - 123   # NTP
  - 68    # DHCP client
#  - 22    # SSH

whitelistedIPs:
  - "192.168.10.2"   # own IP
  - "192.168.1.100"  # Example local admin
  - "10.0.0.50"      # Example monitoring server
  - "127.0.0.1"      # Localhost