github.com/Freeaqingme/Riversist/riversistd/ipChecker

Monitor and firewall network traffic based on DNSBLs


License
BSD-2-Clause
Install
go get github.com/Freeaqingme/Riversist/riversistd/ipChecker

Documentation

Riversist

Riversist is an application that monitors network traffic using libpcap for malicious traffic based on various blacklists. Once a malicious IP has been identified, a to-be-specified executable is called. This allows you to e.g. insert a firewall rule to block traffic from this IP.

For more config options, please see riversist.conf.dist

Support has been implemented for:

Getting started

export GOPATH=`pwd`/riversist/
mkdir -p riversist/{src,bin,pkg}
cd riversist/src
git clone git@github.com:Freeaqingme/RiverSist.git riversist
go get code.google.com/p/gcfg
go get code.google.com/p/gopacket
go install riversist
../bin/riversist --conf riversist/riversist.conf.dist