Skip to content

feat(threat shield): join insights block list - #1887

Merged
gsanchietti merged 1 commit into
mainfrom
nethesis_insights
Oct 6, 2026
Merged

gsanchietti merged 1 commit into
mainfrom
nethesis_insights

Conversation

@gsanchietti

@gsanchietti gsanchietti commented Sep 7, 2026 •

Copy link
Copy Markdown
Member

Changes:

  • add ban hook to banip
  • configure the ban hook to send blocked IPs to a remote server
  • download the blocklist generated by remote server

Issue: #1914

@gsanchietti gsanchietti self-assigned this Sep 7, 2026
@gsanchietti
gsanchietti force-pushed the update-banip branch 2 times, most recently from 39f216a to fd8ad5c Compare September 16, 2026 08:30
Base automatically changed from update-banip to main September 16, 2026 08:32
@gsanchietti
gsanchietti force-pushed the nethesis_insights branch 2 times, most recently from b882540 to 42cdabc Compare September 25, 2026 11:02
@gsanchietti gsanchietti changed the title Join the Nethesis Insights threat shield feat(threat shield): join insights block list Sep 25, 2026
@gsanchietti
gsanchietti force-pushed the nethesis_insights branch 12 times, most recently from 11aa287 to f511b3f Compare September 25, 2026 13:42
@gsanchietti
gsanchietti marked this pull request as ready for review September 25, 2026 13:43
Comment thread packages/ns-threat_shield/files/ts-ip Outdated
Comment thread packages/ns-threat_shield/files/ts-ip Outdated
Comment thread packages/ns-threat_shield/files/ts-ip.hook Outdated
Comment thread packages/ns-threat_shield/files/send-insights-blocklist Outdated
Comment thread packages/ns-threat_shield/files/banip-insights-defaults
Comment thread packages/ns-threat_shield/files/ts-insights-hook Outdated
Comment thread packages/ns-threat_shield/files/send-insights-blocklist Outdated
Comment thread packages/ns-threat_shield/files/send-insights-blocklist Outdated
- banip: add ban_blockhook, called for every newly blocked IP
- report blocked public IPs to Nethesis Insights every 5 minutes
  from every machine with a subscription
- a custom ban_blockhook is preserved: Insights reporting is then
  disabled and a message is logged
- add the nethesisinsightslvl2 feed, selectable only with the
  Threat Shield entitlement

Assisted-by: Claude Code:claude-opus-5-5
@gsanchietti
gsanchietti merged commit 3c80006 into main Oct 6, 2026
3 checks passed
@gsanchietti
gsanchietti deleted the nethesis_insights branch October 6, 2026 09:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants