mirror of
https://github.com/C24Be/AS_Network_List.git
synced 2026-01-24 23:26:38 +03:00
Updated README.md with short scripts descriptions (#23)
* Add nftables support with config generator and IP checker - Add generate_nft_blacklist.py for generating nftables configurations - Add check_nft_blacklist.py for verifying IPs against blacklist - Add blacklists_updater_nftables.sh for automated updates - Add blacklists_nftables/ directory with generated configs - Add GitHub Actions workflow for daily nftables updates - Update README.md with nftables usage instructions nftables is a modern replacement for iptables with better performance and lower memory usage, especially for large rulesets. This addition complements the existing iptables and nginx blacklist formats. * Added nftables scripts help * Updated README.md
This commit is contained in:
33
.github/workflows/update_nftables.yml
vendored
Normal file
33
.github/workflows/update_nftables.yml
vendored
Normal file
@@ -0,0 +1,33 @@
|
|||||||
|
name: Update nftables Blacklists
|
||||||
|
|
||||||
|
on:
|
||||||
|
schedule:
|
||||||
|
- cron: '30 2 * * *' # Daily at 02:30 UTC
|
||||||
|
workflow_dispatch:
|
||||||
|
|
||||||
|
jobs:
|
||||||
|
update-nftables:
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
|
||||||
|
steps:
|
||||||
|
- name: Checkout repository
|
||||||
|
uses: actions/checkout@v4
|
||||||
|
|
||||||
|
- name: Set up Python
|
||||||
|
uses: actions/setup-python@v5
|
||||||
|
with:
|
||||||
|
python-version: '3.x'
|
||||||
|
|
||||||
|
- name: Generate nftables blacklists
|
||||||
|
run: |
|
||||||
|
chmod +x blacklists_updater_nftables.sh
|
||||||
|
./blacklists_updater_nftables.sh
|
||||||
|
|
||||||
|
- name: Commit and push if changed
|
||||||
|
run: |
|
||||||
|
git config --local user.email "github-actions[bot]@users.noreply.github.com"
|
||||||
|
git config --local user.name "github-actions[bot]"
|
||||||
|
git add blacklists_nftables/
|
||||||
|
git diff --quiet && git diff --staged --quiet || \
|
||||||
|
(git commit -m "Auto-update nftables blacklists [skip ci]" && git push)
|
||||||
|
|
||||||
@@ -20,6 +20,8 @@ This repository contains Python scripts that allow you to retrieve network lists
|
|||||||
- `get_info_from_ripe.py`: Retrieves information about Russian AS numbers and Networks from RIPE database for the further analysis.
|
- `get_info_from_ripe.py`: Retrieves information about Russian AS numbers and Networks from RIPE database for the further analysis.
|
||||||
- `get_description.py`: Retrieves network names, AS names and organisation names from RIPE. Updates the lists in the folder `auto/`.
|
- `get_description.py`: Retrieves network names, AS names and organisation names from RIPE. Updates the lists in the folder `auto/`.
|
||||||
- `parse_ripe_db.py`: Parses the whole RIPE database to get information about Networks for the further analysis.
|
- `parse_ripe_db.py`: Parses the whole RIPE database to get information about Networks for the further analysis.
|
||||||
|
- `generate_nft_blacklist.py`: Takes text blacklist on the input and generates nftables config with sets.
|
||||||
|
- `check_nft_blacklist.py`: Checks IPv4/IPv6 address against generated nftables config.
|
||||||
|
|
||||||
### Blacklist Generators
|
### Blacklist Generators
|
||||||
|
|
||||||
|
|||||||
@@ -1,5 +1,5 @@
|
|||||||
# Autogenerated nftables blacklist
|
# Autogenerated nftables blacklist
|
||||||
# Generated: 2026-01-12T10:00:52.332355Z
|
# Generated: 2026-01-12T09:09:01.967693Z
|
||||||
# Source: /tmp/blacklist-v4.txt
|
# Source: /tmp/blacklist-v4.txt
|
||||||
# IPv4: 816, IPv6: 0
|
# IPv4: 816, IPv6: 0
|
||||||
|
|
||||||
|
|||||||
@@ -1,5 +1,5 @@
|
|||||||
# Autogenerated nftables blacklist
|
# Autogenerated nftables blacklist
|
||||||
# Generated: 2026-01-12T10:00:52.366124Z
|
# Generated: 2026-01-12T09:09:02.010763Z
|
||||||
# Source: /tmp/blacklist-v6.txt
|
# Source: /tmp/blacklist-v6.txt
|
||||||
# IPv4: 0, IPv6: 17
|
# IPv4: 0, IPv6: 17
|
||||||
|
|
||||||
|
|||||||
@@ -1,6 +1,6 @@
|
|||||||
# Autogenerated nftables blacklist
|
# Autogenerated nftables blacklist
|
||||||
# Generated: 2026-01-12T10:00:52.283144Z
|
# Generated: 2026-01-12T09:09:01.912886Z
|
||||||
# Source: /home/runner/work/AS_Network_List/AS_Network_List/blacklists/blacklist.txt
|
# Source: /home/user/AS_Network_List/blacklists/blacklist.txt
|
||||||
# IPv4: 816, IPv6: 17
|
# IPv4: 816, IPv6: 17
|
||||||
|
|
||||||
table inet filter {
|
table inet filter {
|
||||||
|
|||||||
Reference in New Issue
Block a user