Download the PHP package someshwer/firewall without Composer
On this page you can find all versions of the php package someshwer/firewall. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download someshwer/firewall
More information about someshwer/firewall
Files in someshwer/firewall
Package firewall
Short Description This package allows us to protect our website from un authorized users by providing access to only whitelisted ip addresses or by blocking ip addresses by blacklist.
License MIT
Homepage https://github.com/bsomeshwer/firewall
Informations about the package firewall
Firewall
Firewall enables us to whitelist and blacklist IP addresses for LARAVEL applications. This package detects an unknown ip addresses using filtering mechanism based on whitelist and blacklist arrays and configuration options.
Features of the package:
• Blacklist and Whitelist IP addresses.
• Enabling and disabling whitelist and blacklist.
• Tracking which IP address is blacklisted and which is whitelisted.
• Provides accept and reject options for range of IP addresses or IP range.
This option is not implemented yet and will be introduced soon.
• Tracking/logging all incoming requests into database table and enabling/disabling this option.
• Tracking/logging specific requests to database and enabling/disabling this option.
• Tracking and logging exceptions raised by the application and enabling/disabling this option.
• Customize redirect URL. Also redirect view can be customized.
• Enable/disable option for pagination of logs. Also, there is an option to set number of records
per page in configuration.
• Filter log data with from date and to date.
• And many helper methods and commands are provided. Those helper methods are discussed in their
respective sections of this documnent.
Installation
Open terminal, go to root directory and run the following command:
composer require someshwer/firewall
Now, the package will be installed.
Add 'Someshwer\MyWorld\WorldDataServiceProvider::class' class to 'providers' array in config/app.php file.
Ex:- 'providers' => [
...,
Someshwer\Firewall\FirewallServiceProvider::class,
]
Now add this alias to 'aliases' array in config/app.php`
Ex:- 'aliases' => [
...,
'Firewall' => Someshwer\Firewall\Facades\Firewall::class,
]
Now publish the configuration and migrations.
$ php artisan vendor:publish --provider="Someshwer\Firewall\FirewallServiceProvider"
This package has two migration files to create two tables
- firewall_log
-
firewall_requests_log
Next, run 'php artisan migrate' command to create tables in your database.
Next, add middleware i.e.; 'Someshwer\Firewall\Middleware\FirewallRequestsLog::class' to $middlewareGroups array in 'app\Http\Kernel.php'.
EX:- protected $middlewareGroups = [
'web' => [
...,
Someshwer\Firewall\Middleware\FirewallRequestsLog::class
],
'api' => [
...
],
];
This logs and stores every incoming request in 'firewall_request_log' table with all request and response data.
Next, add another middleware i.e.; 'Someshwer\Firewall\Middleware\FirewallMiddleware::class' to $routeMiddleware array in 'app\Http\Kernel.php'.
Ex:- protected $routeMiddleware = [
...,
'firewall' => \Someshwer\Firewall\Middleware\FirewallMiddleware::class
];
This is a route specific middleware and it must be used with individual routes or route groups. This middleware works for those routes which assigned with this middleware.
Note: The route which is configured as redirect route must not be assigned with this middleware.
This middleware should not be used with redirect route. Here, redirect route is one where
the request will be redirected to that route when the request is blocked.
The routes or requests which has this middleware can be logged and stored in 'firewall_log' table along with request data, response data, and whitelist, blacklist, accept, and ignore data.
Important Notice:- This middleware must be used as route specific middleware and must be added
to '$routeMiddleware' property in 'app\Http\Kernel.php'. The package will not work if you add this
middleware in any other property in 'app\Http\Kernel.php'. Let us say if you add this to web
middleware group i.e.; $middlewareGroups in 'app\Http\Kernel.php' then package will not be
worked and leads to infinite loop.
#Using route specific middleware i.e; 'firewall' middleware for route:
Route::group(['middleware' => 'firewall'], function () {
Route::get('/', function () {
// Uses firewall middleware
});
Route::get('/test', function () {
// Uses firewall middleware
});
});
(OR)
Route::get('/test', function () {
// Uses firewall middleware
})->middleware('firewall');
Or you can also use this in controller constructor based on your interest.
That's it !! You are done with package installation...
Usage
Blacklist
In order to block requests from any ip address:
First blacklist configuration option must be enabled by setting 'enable_blacklist' option to TRUE in the 'firewall' config file. And then add the ip addresses those need to be blocked to 'blacklist' array in 'firewall' config file. If multiple ip addresses are the to be blocked then add all those ip addresses to 'blacklist' array, and they must be seperated with comma.
Note: If blacklist is enabled then all the requests from specified ip addresses in
blacklist array will be blocked. And the requests from other ip adresses which you
have not added to blacklist will be executed successfully.
Whitelist
In order to allow the requests only from specific ip addresses, use whitelist:
For this, whitelist configuration option must be enabled by setting 'enable_whitelist' to TRUE in the 'firewall' config file. And then add the ip addresses those must be allowed to 'whitelist' array in 'firewall' configuration file. If multiple ip addresses are there to be allowed then list them in 'whitelist' array and they must be seperated with comma.
Note: If whitelist is enabled then all the requests from specified ip addresses in
whitelist array will be allowed. And the requests from other ip adresses which you
have not added to whitelist will be blocked.
Important Information: You can not enable both whitelist and blacklist at the same time. In case you set
both of them to TRUE then the preference will be given to blacklist and the whitelist
will not be considered.
Accept & Reject
In order to allow or block requests from any ip addresses irrespective of whitelist and blacklist then in that case, must use accept and ignore configuration options.
Let us assume, some ip addresses added to whitelist and still you want to block them then add them to 'reject' array in config file. The ip addresses those added to 'reject' array must be blocked even if they are in 'whitelist' array and whitelist configuration option is enabled.
Assume that, you have added ip addresses to blacklist and still you want to allow them then in that case they must be added to 'accept' array in 'firewall' config file. The ip addresses those added to 'accept' array in 'firewall' config file must be allowed or executed even if they are in 'blacklist' array and blacklist configuration option is enabled.
Redirect url:
Every blocked request must be redirected to specific web page which has configured in 'firewall' configuration file. By default it will be redirected to firewall's block page. If you want you can change the url by setting your own url to 'redirect_url' config option in 'firewall' config page.
Note: The route which is configured as redirect route must not be assigned with 'firewall' middleware.
The 'firewall' middleware should not be used with redirect route. Here, redirect route is one where
the request will be redirected to that url when the request is blocked.
Commands:
-> To display all ip addresses that are added to whitelist array
php artisan firewall:whitelist
This command displays all whitelisted ip addresses on console.
-> To display all ip addresses that are added to blacklist array
php artisan firewall:blacklist
This command displays all blacklisted ip addresses on console.
-> To display all ip addresses that are added to accept and reject array are
php artisan ip:list --accept
php artisan ip:list --reject
This commands will display all accept and reject listed ip addresses on console.
If no option is given then 'NoOptionException' will be thrown.
Firewall Log
This tracks and logs every request which assigned with this middleware into firewall_log table. This firewall_log table contains all request and response data that belongs all requests which assigned with the firewall middleware.
Note: This option can also be enabled/disabled. In order to enable this option goto 'firewall' config file and set 'firewall_log'
option to TRUE. To disable set 'firewall_log' to FALSE. If this option is enabled then all asscociated requests will be logged
into 'firewall_log' table. If disabled nothing is logged into 'firewall_log' table.
Firewall Requests Log
This tracks and logs every incoming request into the application. This firewall_requests_log table holds request and response data of all requests that entered into the application.
Note: This option can also be enabled/disabled. In order to enable this option goto 'firewall' config file and set 'log_request'
option to TRUE. To disable set 'log_request' to FALSE. If this option is enabled then every incoming request to the application
will be logged into 'firewall_requests_log' table. If disabled nothing is logged into 'firewall_requests_log' table.
Exceptions Log
This tracks and logs every exception raised by the application. This exception_log table holds request and exception data of all requests those raised exception.
Note: This option can also be enabled/disabled. In order to enable this option goto 'firewall' config file and set 'log_exceptions'
option to TRUE. To disable set 'log_exceptions' to FALSE. If this option is enabled then every exception raised by the application
can be logged into 'exception_log' table. If disabled nothing is logged into 'exception_log' table.
Ip Helpers
Firewall::whitelist();
It returns all ip addresses in whitelist array in 'firewall' config file.
Firewall::blacklist();
It returns all ip addresses in blacklist array.
Firewall::whiteAndBlackList();
It returns all ip addresses in both blacklist and whitelist arrays.
Firewall::acceptList();
It returns all ip addresses in 'accept' array in 'firewall' config file.
Firewall::rejectList();
It returns all ip addresses in 'reject' array.
Firewall::acceptAndRejectList();
It returns all ip addresses in both 'accept' and 'reject' array.
Firewall::getAllIpAddresses();
It returns all ip addresses in all 'whitelist', 'blacklist', 'accept' and 'reject' array in 'firewall' config file. It returns unique ip addresses along with status flag that determines whether ip address is whitelisted, blacklisted, accepted or rejected.
Note: All these arrays whitelist, blacklist, accept and reject arrays are available
in 'config/firewall.php' config file.
Log Helpers
#Firewall::log($from_date, $to_date); Note: from_date and to_dates are optional here.
This method returns all log records from firewall_log table. The results can also be paginated. The 'firewall_log_pagination.enabled' must be set to TRUE for paginating results. In order to set the number of records per page then must use 'firewall_log_pagination.per_page' config option.
This function also accepts date parameters. If 'from date' and 'to date' is given then it returns all the records between specified dates.
The date format must be 'Y-m-d'. For example: If the from date is 12-Jan-2018 then form_date must be provided as '2018-01-12'.
#Firewall::requestLog($from_date, $to_date); Note: from_date and to_dates are optional here.
This method returns all requests log records from firewall_request_log table. These results can also be paginated. The 'firewall_request_log_pagination.enabled' option must be set to TRUE for paginating results. In order to set the number of records per page then must use 'firewall_request_log_pagination.per_page' config option.
This function also accepts date parameters. If 'from_date' and 'to_date' is given then it returns all the records between specified dates.
The date format must be 'Y-m-d'. For example: If the to date is 12-Jan-2018 then to_date must be provided in the following format i.e.; '2018-01-12'.
* If wrong date format is given then all the records will be returned irrespective of dates.
Difference b/w firewall log and firewall request log
Firewall log depends on the firewall system. It tracks only those requests that assigned with 'firewall' middleware. And it stores the request and response information along with blacklist and whitelist statuses information.
Firewall request log tracks every incoming request and stores only request and response information into the database table called 'firewall_requests_log'.
#Firewall::exceptionLog($from_date, $to_date); Note: from_date and to_dates are optional here.
This method returns all records from exception_log table. These results can also be paginated. The 'exception_log_pagination.enabled' option must be set to TRUE for paginating results. In order to set the number of records per page then must use 'exception_log_pagination.per_page' config option.
This function also accepts date parameters. If 'from_date' and 'to_date' is given then it returns all the records between specified dates.
The date format must be 'Y-m-d'. For example: If the to date is 12-Jan-2018 then to_date must be provided in the following format i.e.; '2018-01-12'.
* If wrong date format is given then all the records will be returned irrespective of dates.
Note:
**If from_date and to_date is given then records will be returned including records on from_date and to_date.