From: Arjen Baart <arjen@andromeda.nl>
Date: Tue, 10 Nov 2020 07:00:02 +0000 (+0100)
Subject: Provide a web interface for dropped IP addresses
X-Git-Url: http://www.andromeda.nl/gitweb/?p=gnucomo.git;a=commitdiff_plain;h=7e2b806f26741a643fe74ed5c09be6d0189f5ac9

Provide a web interface for dropped IP addresses
---

diff --git a/src/web/dropped.php b/src/web/dropped.php
new file mode 100644
index 0000000..08264f9
--- /dev/null
+++ b/src/web/dropped.php
@@ -0,0 +1,63 @@
+<?php
+/*
+ *  Provide a list of address to be blocked on the firewall
+ *  One GET parameter "object=hostname' will select dropped addresses for
+ *  that specific host. The default is to return dropped addresses for all hosts.
+ *
+ * A remote host can obtain the list of addresses with wget, for example:
+ *
+ * wget --quiet -O gnucomo-abuses --no-check-certificate https://www.andromeda.nl/gnucomo/dropped.php?object=chronon.soleus.nu
+ *
+ */
+
+header('Content-Type: text/plain');
+ini_set('include_path', '.:./classes:../phpclasses');
+
+require_once('gnucomo_config.php');
+
+//echo "client address = " . $_SERVER['REMOTE_ADDR'] . "\n";
+
+$allowed_clients = array("82.161.249.49", "94.142.246.85");
+//echo array_search($_SERVER['REMOTE_ADDR'], $allowed_clients);
+//echo "\n";
+
+if (array_search($_SERVER['REMOTE_ADDR'], $allowed_clients) !== FALSE)
+{ 
+   $config = new gnucomo_config;
+   $config->read("gnucomo");
+
+   //  A special user for accessing dropped addresses
+
+   $name   = "firewall";
+   $passw  = "Gnuc0mo-Ab4se";
+
+   $database = pg_connect($config->Database($name, $passw));
+
+   $query = "select source from object_abuse where status='dropped' and family(source)=4";
+
+      if (!empty($_GET['object']))
+      {
+         $object_query = "SELECT objectid FROM object WHERE objectname='" . $_GET['object']."'";
+         $res = pg_exec($database, $object_query);
+         $obj = pg_fetch_object($res, 0);
+
+         $query .= " and objectid=" . $obj->objectid;
+      }
+
+   $query .= " order by source";
+
+
+   $res = pg_exec($database, $query);
+
+            for ($ip = 0; $ip < pg_num_rows($res); $ip++)
+            {
+               $abuse = pg_fetch_object($res, $ip);
+               echo $abuse->source;
+               echo "\n";
+            }
+}
+else
+{
+   echo "Permission denied.\n";
+}
+?>