search

russhaun / artillery

The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
0 stars 0 forks source link

fix banip flow #51

Closed russhaun closed 1 week ago

russhaun commented 2 years ago

banip func needs to be reworked in its placement on windows. for example. when an attacker connects we alert and the ip gets banned based on the port it connected to. if u have a large # of ports that func gets called for each port u have open resulting in duplicate calls for the same ip. suggest moving func outside of socket class or rewriting banlist func to only append to a separate list maybe and update main list on a timer?

russhaun commented 2 months ago

banip() func has been reworked to a similar style as email code to eliminate duplicate entries @ runtime will be released in a future version.