BlacklistIpExtractor Class Reference

#include <BlacklistIpExtractor.hpp>

Static Public Member Functions
static bool	extractAndWrite (const std::vector< std::string > &lines, const std::string &outPath="/tmp/bastionguard-firewall-ips.txt")

Detailed Description

Definition at line 25 of file BlacklistIpExtractor.hpp.

Member Function Documentation

extractAndWrite()

bool BlacklistIpExtractor::extractAndWrite ( const std::vector< std::string > & lines, const std::string & outPath = "/tmp/bastionguard-firewall-ips.txt" )

static

Definition at line 85 of file BlacklistIpExtractor.cpp.

  {
    std::unordered_set<std::string> unique;
 
    for (std::string line : lines) {
        // trim
        auto start = line.find_first_not_of(" \t\r\n");
        if (start == std::string::npos) continue;
        line.erase(0, start);
 
        if (auto pos = line.find('#'); pos != std::string::npos)
            line = line.substr(0, pos);
 
        auto end = line.find_last_not_of(" \t\r\n");
        if (end == std::string::npos) continue;
        line.erase(end + 1);
        if (is_valid_ipv4(line) ||
            is_valid_ipv4_cidr(line) ||
            is_valid_ipv6(line)) {
            unique.insert(line);
            continue;
        }
 
        std::string host;
        if (extract_host_from_url(line, host)) {
            if (is_valid_ipv4(host) || is_valid_ipv6(host)) {
                unique.insert(host);
            }
        }
    }
 
    if (unique.empty())
        return false;
 
    std::vector<std::string> ips(unique.begin(), unique.end());
    std::sort(ips.begin(), ips.end());
 
    std::string tmpl = outPath + ".XXXXXX";
    std::vector<char> path(tmpl.begin(), tmpl.end());
    path.push_back('\0');
 
    int fd = mkstemp(path.data());
    if (fd < 0) return false;
 
    FILE* f = fdopen(fd, "w");
    if (!f) { close(fd); return false; }
 
    for (const auto& ip : ips)
        fprintf(f, "%s\n", ip.c_str());
 
    fflush(f);
    fsync(fd);
    fclose(f);
 
    fs::rename(path.data(), outPath);
    fs::permissions(
        outPath,
        fs::perms::owner_read | fs::perms::owner_write,
        fs::perm_options::replace
    );
 
    return true;
}

References extract_host_from_url(), is_valid_ipv4(), is_valid_ipv4_cidr(), and is_valid_ipv6().

Referenced by anonymous_namespace{Backend.cpp}::create_secure_firewall_input().

---

The documentation for this class was generated from the following files:

• BastionGuard/src/firewall/BlacklistIpExtractor.hpp
• BastionGuard/src/firewall/BlacklistIpExtractor.cpp