arkitecht/firewall

A Laravel 4.1+ IP whitelisting and blacklisting

Friday, July 7, 2017
by Arkitecht
Repository
1 Watchers
0 Stars
189 Installations

PHP
0 Dependents
0 Suggesters
98 Forks
0 Open issues
27 Versions
14 % Grown

The README.md

Firewall

, _(*1)

A Laravel package to help you block IP addresses from accessing your application or just some routes

Concepts

Blacklist

All IP addresses in those lists will no be able to access routes filtered by the blacklist filter., _(*2)

Whitelist

Those IP addresses can, _(*3)

Access blacklisted routes even if they are in a range of blacklisted IP addresses.
Access 'allow whitelisted' filtered routes.
If a route is filtered by the 'allow whitelisted' filter and the IP is not whitelisted, the request will be redirected to an alternative url or route name.

Playground & Bootstrap App

Click here to see it working and in case you need a help figuring out things, try this repository., _(*4)

Playground's screenshot:, _(*5)

playground , _(*6)

Routes

This package provides two middleware groups to use in your routes:, _(*7)

'fw-block-bl': to block all blacklisted IP addresses to access filtered routes, _(*8)

'fw-allow-wl': to allow all whitelisted IP addresses to access filtered routes, _(*9)

So, for instance, you could have a blocking group and put all your routes inside it:, _(*10)

Route::group(['middleware' => 'fw-block-bl'], function () 
{
    Route::get('/', 'HomeController@index');
});

Or you could use both. In the following example the allow group will give free access to the 'coming soon' page and block or just redirect non-whitelisted IP addresses to another, while still blocking access to the blacklisted ones., _(*11)

Route::group(['middleware' => 'fw-block-bl'], function () 
{
    Route::get('coming/soon', function()
    {
        return "We are about to launch, please come back in a few days.";
    });

    Route::group(['middleware' => 'fw-allow-wl'], function () 
    {
        Route::get('/', 'HomeController@index');
    });
});

IPs lists

IPs (white and black) lists can be stored in array, files and database. Initially database access to lists is disabled, so, to test your Firewall configuration you can publish the config file and edit the blacklist or whitelist arrays:, _(*12)

'blacklist' => array(
    '127.0.0.1',
    '192.168.17.0/24'
    '127.0.0.1/255.255.255.255'
    '10.0.0.1-10.0.0.255'
    '172.17.*.*'
    'country:br'
    '/usr/bin/firewall/blacklisted.txt',
),

The file (for instance /usr/bin/firewall/blacklisted.txt) must contain one IP, range or file name per line, and, yes, it will search for files recursivelly, so you can have a file of files if you need:, _(*13)

127.0.0.2
10.0.0.0-10.0.0.100
/tmp/blacklist.txt

Redirecting non-whitelisted IP addresses

Non-whitelisted IP addresses can be blocked or redirected. To configure redirection you'll have to publish the config.php file and configure:, _(*14)

'redirect_non_whitelisted_to' => 'coming/soon',

Artisan Commands

To blacklist or whitelist IP addresses, use the artisan commands:, _(*15)

  firewall:list               List all IP address, white and blacklisted.

Exclusive for database usage

firewall
  firewall:blacklist          Add an IP address to blacklist.
  firewall:clear              Remove all ip addresses from white and black lists.
  firewall:remove             Remove an IP address from white or black list.
  firewall:whitelist          Add an IP address to whitelist.

This is a result from firewall:list:, _(*16)

+--------------+-----------+-----------+
| IP Address   | Whitelist | Blacklist |
+--------------+-----------+-----------+
| 10.17.12.7   |           |     X     |
| 10.17.12.100 |     X     |           |
| 10.17.12.101 |     X     |           |
| 10.17.12.102 |     X     |           |
| 10.17.12.200 |           |     X     |
+--------------+-----------+-----------+

Facade

You can also use the Firewall Facade to manage the lists:, _(*17)

$ip = '10.17.12.1';

$whitelisted = Firewall::isWhitelisted($ip);
$blacklisted = Firewall::isBlacklisted($ip);

Firewall::whitelist($ip);
Firewall::blacklist($ip, true); /// true = force in case IP is whitelisted

if (Firewall::whichList($ip))  // returns false, 'whitelist' or 'blacklist'
{
    Firewall::remove($ip);
}

Return a blocking access response:, _(*18)

return Firewall::blockAccess();

Suspicious events will be (if you wish) logged, so tail it:, _(*19)

php artisan tail

Blocking Whole Countries

You can block a country by, instead of an ip address, pass country:<2-letter ISO code>. So, to block all Brazil's IP addresses, you do:, _(*20)

php artisan firewall:blacklist country:br

You will have to add this requirement to your composer.json file:, _(*21)

"geoip/geoip": "~1.14"

or, _(*22)

"geoip2/geoip2": "~2.0"

You can find those codes here: isocodes, _(*23)

Session Blocking

You can block users from accessing some pages only for the current session, by using those methods:, _(*24)

Firewall::whitelistOnSession($ip);
Firewall::blacklistOnSession($ip);
Firewall::removeFromSession($ip);

Installation

Compatible with

Laravel 4+ and 5+

Installing

Require the Firewall package using Composer:, _(*25)

composer require pragmarx/firewall

Laravel 5.5 and up, _(*26)

You don't have to do anything else, this package uses Package Auto-Discovery's feature, and should be available as soon as you install it via Composer., _(*27)
Laravel 5.4 and below, _(*28)

Add the Service Provider and the Facade to your app/config/app.php:, _(*29)

PragmaRX\Firewall\Vendor\Laravel\ServiceProvider::class,

'Firewall' => PragmaRX\Firewall\Vendor\Laravel\Facade::class,

Add the Middleware groups fw-block-bl and fw-allow-wl to your app/Http/Kernel.php, _(*30)

protected $middlewareGroups = [
        ...

        'fw-block-bl' => [
            \PragmaRX\Firewall\Middleware\FirewallBlacklist::class,
        ],
        'fw-allow-wl' => [
            \PragmaRX\Firewall\Middleware\FirewallWhitelist::class,
        ],        
];

Note: You can add other middleware you have already created to the new groups by simply adding it to the fw-allow-wl or fw-block-bl middleware group., _(*31)

Create the migration:, _(*32)

php artisan firewall:tables

Migrate it, _(*33)

php artisan migrate

To publish the configuration file you'll have to:, _(*34)

Laravel 4, _(*35)

php artisan config:publish pragmarx/firewall

Laravel 5, _(*36)

php artisan vendor:publish

TODO

Tests, tests, tests.

Author

Antonio Carlos Ribeiro, _(*37)

License

Firewall is licensed under the BSD 3-Clause License - see the LICENSE file for details, _(*38)

Contributing

Pull requests and issues are more than welcome., _(*39)

The Versions

07/07 2017

dev-master

9999999-dev

A Laravel 4.1+ IP whitelisting and blacklisting

library firewall

A Laravel 4.1+ IP whitelisting and blacklisting

arkitecht/firewall

The README.md

Firewall

A Laravel package to help you block IP addresses from accessing your application or just some routes

Concepts

Blacklist

Whitelist

Playground & Bootstrap App

Routes

IPs lists

Redirecting non-whitelisted IP addresses

Artisan Commands

Exclusive for database usage

Facade

Blocking Whole Countries

Session Blocking

Installation

Compatible with

Installing

TODO

Author

License

Contributing

The Versions

dev-master

The Requires

by Antonio Carlos Ribeiro

v1.0.9.1

The Requires

by Antonio Carlos Ribeiro

dev-group

The Requires

by Antonio Carlos Ribeiro

v1.0.9

The Requires

by Antonio Carlos Ribeiro

v1.0.8

The Requires

by Antonio Carlos Ribeiro

v1.0.7

The Requires

by Antonio Carlos Ribeiro

v1.0.6

The Requires

by Antonio Carlos Ribeiro

v1.0.5

The Requires

by Antonio Carlos Ribeiro

v1.0.4

The Requires

by Antonio Carlos Ribeiro

v1.0.3

The Requires

by Antonio Carlos Ribeiro

v1.0.2

The Requires

by Antonio Carlos Ribeiro

v1.0.1

The Requires

by Antonio Carlos Ribeiro

v1.0.0

The Requires

by Antonio Carlos Ribeiro

0.5.x-dev

The Requires

by Antonio Carlos Ribeiro

v0.5.4

The Requires

by Antonio Carlos Ribeiro

v0.5.3

The Requires

by Antonio Carlos Ribeiro

v0.5.2

The Requires

by Antonio Carlos Ribeiro

v0.5.1

The Requires

by Antonio Carlos Ribeiro