mirror of
https://github.com/C24Be/AS_Network_List.git
synced 2026-01-24 15:06:17 +03:00
Updated README.md with short scripts descriptions (#23)
* Add nftables support with config generator and IP checker - Add generate_nft_blacklist.py for generating nftables configurations - Add check_nft_blacklist.py for verifying IPs against blacklist - Add blacklists_updater_nftables.sh for automated updates - Add blacklists_nftables/ directory with generated configs - Add GitHub Actions workflow for daily nftables updates - Update README.md with nftables usage instructions nftables is a modern replacement for iptables with better performance and lower memory usage, especially for large rulesets. This addition complements the existing iptables and nginx blacklist formats. * Added nftables scripts help * Updated README.md
This commit is contained in:
33
.github/workflows/update_nftables.yml
vendored
Normal file
33
.github/workflows/update_nftables.yml
vendored
Normal file
@@ -0,0 +1,33 @@
|
||||
name: Update nftables Blacklists
|
||||
|
||||
on:
|
||||
schedule:
|
||||
- cron: '30 2 * * *' # Daily at 02:30 UTC
|
||||
workflow_dispatch:
|
||||
|
||||
jobs:
|
||||
update-nftables:
|
||||
runs-on: ubuntu-latest
|
||||
|
||||
steps:
|
||||
- name: Checkout repository
|
||||
uses: actions/checkout@v4
|
||||
|
||||
- name: Set up Python
|
||||
uses: actions/setup-python@v5
|
||||
with:
|
||||
python-version: '3.x'
|
||||
|
||||
- name: Generate nftables blacklists
|
||||
run: |
|
||||
chmod +x blacklists_updater_nftables.sh
|
||||
./blacklists_updater_nftables.sh
|
||||
|
||||
- name: Commit and push if changed
|
||||
run: |
|
||||
git config --local user.email "github-actions[bot]@users.noreply.github.com"
|
||||
git config --local user.name "github-actions[bot]"
|
||||
git add blacklists_nftables/
|
||||
git diff --quiet && git diff --staged --quiet || \
|
||||
(git commit -m "Auto-update nftables blacklists [skip ci]" && git push)
|
||||
|
||||
@@ -20,6 +20,8 @@ This repository contains Python scripts that allow you to retrieve network lists
|
||||
- `get_info_from_ripe.py`: Retrieves information about Russian AS numbers and Networks from RIPE database for the further analysis.
|
||||
- `get_description.py`: Retrieves network names, AS names and organisation names from RIPE. Updates the lists in the folder `auto/`.
|
||||
- `parse_ripe_db.py`: Parses the whole RIPE database to get information about Networks for the further analysis.
|
||||
- `generate_nft_blacklist.py`: Takes text blacklist on the input and generates nftables config with sets.
|
||||
- `check_nft_blacklist.py`: Checks IPv4/IPv6 address against generated nftables config.
|
||||
|
||||
### Blacklist Generators
|
||||
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
# Autogenerated nftables blacklist
|
||||
# Generated: 2026-01-12T10:00:52.332355Z
|
||||
# Generated: 2026-01-12T09:09:01.967693Z
|
||||
# Source: /tmp/blacklist-v4.txt
|
||||
# IPv4: 816, IPv6: 0
|
||||
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
# Autogenerated nftables blacklist
|
||||
# Generated: 2026-01-12T10:00:52.366124Z
|
||||
# Generated: 2026-01-12T09:09:02.010763Z
|
||||
# Source: /tmp/blacklist-v6.txt
|
||||
# IPv4: 0, IPv6: 17
|
||||
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
# Autogenerated nftables blacklist
|
||||
# Generated: 2026-01-12T10:00:52.283144Z
|
||||
# Source: /home/runner/work/AS_Network_List/AS_Network_List/blacklists/blacklist.txt
|
||||
# Generated: 2026-01-12T09:09:01.912886Z
|
||||
# Source: /home/user/AS_Network_List/blacklists/blacklist.txt
|
||||
# IPv4: 816, IPv6: 17
|
||||
|
||||
table inet filter {
|
||||
|
||||
Reference in New Issue
Block a user