taskSavannah Administration - Tasks: task #8847, Submission of IPQ BDB filter

 
 

task #8847: Submission of IPQ BDB filter

Submitter:  Alessandro Vesely <ale2003>
Submitted:  Sat 15 Nov 2008 12:10:33 PM UTC
   
 
Should Start On:  Fri 14 Nov 2008 11:00:00 PM UTC Should be Finished on:  Mon 24 Nov 2008 11:00:00 PM UTC
Category:  Project Approval Priority:  * 5 - Normal
Status:  Done Privacy:  Public
Assigned to:  nicalvaro Open/Closed:  Closed
* Mandatory Fields

Add a New Comment Rich Markup
   

Jump to the original submission

Sun 21 Dec 2008 11:58:40 PM UTC, comment #6: 

Hello Ale, thanks for the submission and sorry for the delay.
Nicodemo, thanks for the review.

I've approved the project and the cron jobs should complete the setup within another couple of hours.  You can switch it to use SVN instead of CVS via the project admin page (Select Features) when that's done.

Happy hacking,
-email is unavailable-

Karl Berry <karl>
Site Administrator
Fri 19 Dec 2008 12:59:07 AM UTC, comment #5: 

I am placing the mark "Need Admin" so that the Administrator could approve this when they get the chance. I believe it complies with the rules with site.

I apologize for the delay.

-Deleted Account- <nicalvaro>
Thu 18 Dec 2008 08:46:50 AM UTC, comment #4: 

Is anybody out there?

Since last month I've more or less completed the project and it has been running on my server for a while. Today's snapshot is at http:/www.ext.tana.it/ipqbdb-0.20081218.tar.gz

I'll be most grateful for any explicative reply about the status of this submission. IMHO, it should be accepted or rejected in a reasonable time.

Season greetings
Ale

Alessandro Vesely <ale2003>
Tue 18 Nov 2008 03:27:24 PM UTC, comment #3: 

Since www.ext.tana.it is not properly setup, I didn't bother to add its zone file to the external view, and then forgot it :-(
http://www.ext.tana.it/ipqbdb-0.0.tar.gz should now work.

Alessandro Vesely <ale2003>
Mon 17 Nov 2008 08:38:50 AM UTC, comment #2: 

Later I'll investigate why that url didn't work. For the time being, I uploaded a new tarball on http://rapidshare.com/files/164568376/ipqbdb-0.0.tar.gz

Alessandro Vesely <ale2003>
Sun 16 Nov 2008 09:45:23 PM UTC, comment #1: 

The link you provided to the tarball package does not seem to exist.

-Deleted Account- <nicalvaro>
Sat 15 Nov 2008 12:10:33 PM UTC, original submission:  

A new project has been registered at Savannah
This project account will remain inactive until a site admin approves or discards the registration.


Registration Administration


While this item will be useful to track the registration process, approving or discarding the registration must be done using the specific Group Administration page, accessible only to site administrators, effectively logged as site administrators (superuser):



Registration Details


  • Name: IPQ BDB filter
  • System Name:  ipqbdb
  • Type: non-GNU software & documentation
  • License: GNU General Public License v2 or later (The project license is GPLv3.


There are no media files, so any statement about them is true.)




Description:

IPtables is a popular firewall on GNU/Linux systems. It features the ability to queue IP addresses to a user space daemon that can issue a verdict for blocking the packet being examined. The IPQ BDB filter provides such user space program that looks up a Berkeley DB data base of IPv4 addresses.

The daemon is designed to block address in a fuzzy fashion, inspired by the STOCKADE daemon (see link below.) Each record features a decay and a probability. Banning an IP either inserts a new record with the given probability, or doubles the probability of an existing record. Probabilities define the likelihood that a packet will be blocked. They decrease automatically: The decay is the time in which a probability halves. It is possible to whitelist IP addresses in order to establish their initial decay. The decay is increased whenever the probability passes a certain boundary, so that repeatedly banned IPs end up with a slow decay.

Banning is accomplished by a command line utility, and by a log parsing daemon. In that respect, ipqbdb is a light version of fail2ban (see link below).

Programs are written in C.

Multiple DBs can be used for multiple netfilter queues.

stockade http://caia.swin.edu.au/stockade/
fail2ban http://www.fail2ban.org/wiki/index.php/Main_Page



Other Software Required:

Netfilter - GPLv2 or later http://www.netfilter.org/about.html
Berkeley DB - GPL and other http://www.oracle.com/technology/software/products/berkeley-db/htdocs/licensing.html
PCRE - BSD http://www.pcre.org/
Popt - GNU http://directory.fsf.org/project/popt/



Other Comments:

The project is not yet finished. (I still have to code an utility to list/delete records.)

I'm looking for an SVN server for this project. May I test svn at Savannah?

Thanks for your attention
Ale


Tarball URL:

http://www.ext.tana.it/ipqbdb-0.0.tar.gz


Alessandro Vesely <ale2003>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by karl (Posted a comment)
  • -email is unavailable- added by nicalvaro (Posted a comment)
  • -email is unavailable- added by ale2003 (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 4 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2008-12-21 karl StatusNeed Admin Done
        Open/ClosedOpen Closed
    2008-12-19 nicalvaro Assigned toNone nicalvaro
    2008-12-19 nicalvaro StatusNone Need Admin

    Back to the top

    Powered by Savane 3.13-d3ae.
    Corresponding source code