bundlewrap/libs/firewall.py

52 lines
1.2 KiB
Python
Raw Permalink Normal View History

2023-02-05 16:30:58 +00:00
from ipaddress import IPv4Network, ip_network
from os.path import abspath, dirname, join
REPO_PATH = dirname(dirname(abspath(__file__)))
def generate_ip_list_from_routes(filename):
# generated using:
# whois -i origin as8881 | awk '/^route/ {print $2}' > configs/as8881.txt
with open(join(REPO_PATH, 'configs', f'{filename}.txt')) as f:
networks = f.read().splitlines()
result = {
'ipv4': set(),
'ipv6': set(),
}
for line in networks:
line = line.strip()
if not line or line.startswith('#'):
continue
ip = ip_network(line)
if isinstance(ip, IPv4Network):
result['ipv4'].add(ip)
else:
result['ipv6'].add(ip)
return result
named_networks = {
'versatel': generate_ip_list_from_routes('as8881'),
2021-12-14 15:09:31 +00:00
'telekom': generate_ip_list_from_routes('as3320'),
'rfc1918': {
'ipv4': {
'10.0.0.0/8',
'172.16.0.0/12',
'192.168.0.0/16',
},
'ipv6': {
'fc00::/7', # actually RFC 4193, but good enough here
},
},
}
global_ip4_blocklist = {
"141.98.11.0/24", # 2024-01-21, smtp login bruteforce
}
global_ip6_blocklist = set()