├── .gitattributes
├── www
    ├── .htaccess
    ├── foot.php
    ├── header.php
    ├── mindate.php
    ├── head.php
    ├── head-r.php
    ├── charthitsperhour.php
    ├── chartblocksperhour.php
    ├── chartblocksperday.php
    ├── ipmap.php
    ├── charttotalblocksperday.php
    ├── head-gr.php
    ├── mapdata.php
    ├── charthitsperdaycombined.php
    ├── blocks-ps.php
    ├── head-g.php
    ├── ptr.php
    ├── dialtodayblocks.php
    ├── dialtodayrepeats.php
    ├── charthitsperday.php
    ├── datepicker.php
    ├── reban-country.php
    ├── reban-br.php
    ├── dialtodayhits.php
    ├── release-country.php
    ├── config.php
    ├── release-br.php
    ├── release-date.php
    ├── reban-date.php
    ├── safe-unmark.php
    ├── release-ip.php
    ├── duplicates.php
    ├── safe-mark.php
    ├── stylesheet.css
    ├── reban-ip.php
    ├── blocks.php
    ├── repeats-ip-day.php
    ├── release-country-view.php
    ├── reban-br-view.php
    ├── ids.php
    ├── reban-country-view.php
    ├── repeats-ip.php
    ├── release-br-view.php
    ├── blocks-view.php
    ├── release-date-view.php
    ├── reban-date-view.php
    ├── repeats-date.php
    ├── release-iprange.php
    ├── reban-iprange.php
    ├── repeats.php
    ├── repeats-view.php
    ├── search-date.php
    ├── release.php
    ├── charthitsperweekcombined.php
    ├── reban.php
    ├── search.php
    └── functions.php
├── Events
    ├── CommonCode.vbs
    └── Config.INI
├── hmsRetroAddPTR.ps1
├── hmsRetroConsolidateRules.ps1
├── hmsRetroAddBlocksIPTable.ps1
├── hmsRetroAddRuleName.ps1
├── Config.ps1
├── hmsFirewallBanDBSetup.ps1
├── hmsConsolidateRules.ps1
├── hmsDuplicateRuleFinder.ps1
├── BlockCount.ps1
└── hmsConsolidateRulesMonthly.ps1


/.gitattributes:
--------------------------------------------------------------------------------
1 | # Auto detect text files and perform LF normalization
2 | * text=auto
3 | 


--------------------------------------------------------------------------------
/www/.htaccess:
--------------------------------------------------------------------------------
1 | order deny,allow
2 | deny from all
3 | allow from 127.0.0.1
4 | allow from 192.168.1


--------------------------------------------------------------------------------
/www/foot.php:
--------------------------------------------------------------------------------
 1 | 
 2 | <br><br>
 3 | 
 4 | <div class="footer">
 5 | 
 6 | </div>
 7 | 
 8 | </div> <!-- end WRAPPER -->
 9 | </body>
10 | </html>


--------------------------------------------------------------------------------
/www/header.php:
--------------------------------------------------------------------------------
1 | <div class="header">
2 | 	<div class="banner"><h1>hMailServer Firewall Ban</h1></div>
3 | 	<div class="headlinks">
4 | 		<div class="headlinkswidth">
5 | 			<a href="./">stats</a> | <a href="search.php">search</a> | <a href="release.php">release</a> | <a href="reban.php">reban</a> | <a href="ids.php">ids</a> | <a href="repeats.php">blocks</a>
6 | 		</div>
7 | 	</div>
8 | </div>
9 | 


--------------------------------------------------------------------------------
/www/mindate.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 	include_once("config.php");
 3 | 	include_once("functions.php");
 4 | 
 5 | 
 6 | 	$sql = $pdo->prepare("
 7 | 		SELECT 
 8 | 			".DBCastDateTimeFieldAsDate('timestamp')." AS date 
 9 | 		FROM hm_fwban 
10 | 		".DBLimitRowsWithOffset(DBCastDateTimeFieldAsDate('timestamp'),'ASC',0,0,0,1)
11 | 	);
12 | 	$sql->execute();
13 | 	while($row = $sql->fetch(PDO::FETCH_ASSOC)){
14 | 		echo "'".$row['date']."',";
15 | 	}
16 | ?>


--------------------------------------------------------------------------------
/Events/CommonCode.vbs:
--------------------------------------------------------------------------------
 1 | Function IsMySQL() : IsMySQL = False
 2 | 	If ConfigIni.GetKeyValue("hMailServer","DatabaseType") = "MySQL" Then
 3 | 		IsMySQL = True
 4 | 	End If
 5 | End Function
 6 | 
 7 | Function IsMSSQL() : IsMSSQL = False
 8 | 	If ConfigIni.GetKeyValue("hMailServer","DatabaseType") = "MSSQL" Then
 9 | 		IsMSSQL = True
10 | 	End If
11 | End Function
12 | 
13 | Function DBGetCurrentDateTime() 
14 |     DBGetCurrentDateTime = ""
15 |     If (IsMySQL() = True) Then
16 |         DBGetCurrentDateTime = "NOW()"
17 |     Elseif (IsMSSQL() = True) Then
18 |         DBGetCurrentDateTime = "GETDATE()"
19 |     End if
20 | End Function


--------------------------------------------------------------------------------
/www/head.php:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html> 
 2 | <html>
 3 | <head>
 4 | <title>hMailServer Firewall Ban</title>
 5 | <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
 6 | <meta http-equiv="Content-Style-Type" content="text/css">
 7 | <meta name="viewport" content="width=device-width, initial-scale=1">
 8 | <link rel="stylesheet" type="text/css" media="all" href="stylesheet.css">
 9 | <link href="https://fonts.googleapis.com/css?family=Roboto" rel="stylesheet">
10 | <link href="https://fonts.googleapis.com/css?family=Oswald" rel="stylesheet"> 
11 | </head>
12 | <body>
13 | <?php include("header.php") ?>
14 | <div class="wrapper">


--------------------------------------------------------------------------------
/www/head-r.php:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html> 
 2 | <html>
 3 | <head>
 4 | <title>hMailServer Firewall Ban</title>
 5 | <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
 6 | <meta http-equiv="Content-Style-Type" content="text/css">
 7 | <meta name="viewport" content="width=device-width, initial-scale=1">
 8 | <link rel="stylesheet" type="text/css" media="all" href="stylesheet.css">
 9 | <link href="https://fonts.googleapis.com/css?family=Roboto" rel="stylesheet">
10 | <link href="https://fonts.googleapis.com/css?family=Oswald" rel="stylesheet"> 
11 | <?php include("datepicker.php") ?>
12 | </head>
13 | <body>
14 | <?php include("header.php") ?>
15 | <div class="wrapper">


--------------------------------------------------------------------------------
/www/charthitsperhour.php:
--------------------------------------------------------------------------------
 1 | <?php include_once("config.php") ?>
 2 | <?php include_once("functions.php") ?>
 3 | <script type="text/javascript">
 4 | google.charts.load('current', {packages: ['corechart', 'bar']});
 5 | google.charts.setOnLoadCallback(drawChart);
 6 | 
 7 | function drawChart() {
 8 | 	var data = new google.visualization.DataTable();
 9 | 	data.addColumn('timeofday', 'Hour');
10 | 	data.addColumn('number', 'Avg Hits');
11 | 	data.addRows([<?php include_once("charthitsperhourdata.php") ?>]);
12 | 
13 | 	var chart = new google.visualization.ColumnChart(document.getElementById('chart_hitsperhour_staticdata'));
14 | 	  chart.draw(data, {
15 | 		width: 350,
16 | 		height: 200,
17 | 		legend: 'none',
18 | 		colors: ['#ff0000']
19 | 	  });
20 | }	
21 | </script>
22 | 


--------------------------------------------------------------------------------
/www/chartblocksperhour.php:
--------------------------------------------------------------------------------
 1 | <?php include_once("config.php") ?>
 2 | <?php include_once("functions.php") ?>
 3 | <script type="text/javascript">
 4 | google.charts.load('current', {packages: ['corechart', 'bar']});
 5 | google.charts.setOnLoadCallback(drawChart);
 6 | 
 7 | function drawChart() {
 8 | 	var data = new google.visualization.DataTable();
 9 | 	data.addColumn('timeofday', 'Hour');
10 | 	data.addColumn('number', 'Blocks');
11 | 	data.addRows([<?php include_once("chartblocksperhourdata.php") ?>]);
12 | 
13 | 	var chart = new google.visualization.ColumnChart(document.getElementById('chart_blocksperhour_staticdata'));
14 | 	  chart.draw(data, {
15 | 		width: 350,
16 | 		height: 200,
17 | 		legend: 'none',
18 | 		colors: ['#000000']
19 | 	  });
20 | }	
21 | </script>
22 | 


--------------------------------------------------------------------------------
/www/chartblocksperday.php:
--------------------------------------------------------------------------------
 1 | <?php include_once("config.php") ?>
 2 | <?php include_once("functions.php") ?>
 3 | <script type="text/javascript">
 4 | google.load("visualization", "1", {packages:["corechart", "line"]});
 5 | google.setOnLoadCallback(drawChart);
 6 | function drawChart() {
 7 | 	var data = new google.visualization.DataTable();
 8 | 	data.addColumn('date', 'Date');
 9 | 	data.addColumn('number', 'Blocks');
10 | 	data.addRows([<?php include_once("chartblocksperdaydata.php") ?>]);
11 | 
12 | 	var chart = new google.visualization.LineChart(document.getElementById('chart_blocksperday'));
13 | 	  chart.draw(data, {
14 | 		width: 350,
15 | 		height: 200,
16 | 		colors: ['#000000'],
17 | 		legend: 'none',
18 | 		trendlines: { 0: { 
19 | 			type: 'polynomial',
20 | 			degree: 2,
21 | 			visibleInLegend: true,
22 | 			},
23 | 		},
24 | 	  });
25 | }	
26 | </script>
27 | 


--------------------------------------------------------------------------------
/www/ipmap.php:
--------------------------------------------------------------------------------
 1 | <script type="text/javascript" src="https://www.google.com/jsapi"></script>
 2 | <script type="text/javascript">
 3 | 	google.load("visualization", "1", {packages:["geochart"]});
 4 | 	google.setOnLoadCallback(drawChart);
 5 | 	function drawChart() {
 6 | 
 7 | 		var data = new google.visualization.DataTable();
 8 | 		<?php include_once("mapdata.php") ?>
 9 | 
10 | 		var container = document.getElementById('map_div');
11 | 		var geochart = new google.visualization.GeoChart(container);
12 | 		google.visualization.events.addListener(geochart, 'select', function() {
13 | 			var selectionIdx = geochart.getSelection()[0].row;
14 | 			var countryName = data.getValue(selectionIdx, 0);
15 | 			window.open('./search.php?search=' + countryName, '_self');
16 | 		});
17 | 		geochart.draw(data, {
18 | 			colors: ['#ffe6e6','#ff0000'],
19 | 			legend: 0
20 | 		  });
21 | 	}	
22 | </script>


--------------------------------------------------------------------------------
/www/charttotalblocksperday.php:
--------------------------------------------------------------------------------
 1 | <?php include_once("config.php") ?>
 2 | <?php include_once("functions.php") ?>
 3 | <script type="text/javascript">
 4 | google.load("visualization", "1", {packages:["corechart", "line"]});
 5 | google.setOnLoadCallback(drawChart);
 6 | function drawChart() {
 7 | 	var data = new google.visualization.DataTable();
 8 | 	data.addColumn('date', 'Date');
 9 | 	data.addColumn('number', 'Blocks');
10 | 	data.addRows([<?php include_once("charttotalblocksperdaydata.php") ?>]);
11 | 
12 | 	var chart = new google.visualization.LineChart(document.getElementById('chart_totalblocksperday_staticdata'));
13 | 	  chart.draw(data, {
14 | 		width: 350,
15 | 		height: 200,
16 | 		colors: ['#000000'],
17 | 		legend: 'none',
18 | 		trendlines: { 0: { 
19 | 			type: 'polynomial',
20 | 			degree: 2,
21 | 			visibleInLegend: true,
22 | 			},
23 | 		},
24 | 	  });
25 | }	
26 | </script>
27 | 


--------------------------------------------------------------------------------
/www/head-gr.php:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html> 
 2 | <html>
 3 | <head>
 4 | <title>hMailServer Firewall Ban</title>
 5 | <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
 6 | <meta http-equiv="Content-Style-Type" content="text/css">
 7 | <meta name="viewport" content="width=device-width, initial-scale=1">
 8 | <link rel="stylesheet" type="text/css" media="all" href="stylesheet.css">
 9 | <link href="https://fonts.googleapis.com/css?family=Roboto" rel="stylesheet">
10 | <link href="https://fonts.googleapis.com/css?family=Oswald" rel="stylesheet"> 
11 | <script type="text/javascript" src="https://www.google.com/jsapi"></script>
12 | <script type="text/javascript" src="https://www.gstatic.com/charts/loader.js"></script>
13 | <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js"></script>
14 | <?php include("charttotalblocksperday.php") ?>
15 | <?php include("chartblocksperhour.php") ?>
16 | <?php include("datepicker.php") ?>
17 | </head>
18 | <body>
19 | <?php include("header.php") ?>
20 | <div class="wrapper">


--------------------------------------------------------------------------------
/www/mapdata.php:
--------------------------------------------------------------------------------
 1 | <?php 
 2 | 	include_once("config.php");
 3 | 	include_once("functions.php");
 4 | 	
 5 | 	$sql = $pdo->prepare("
 6 | 		SELECT 
 7 | 			COUNT(DISTINCT(country)) AS count
 8 | 		FROM hm_fwban
 9 | 	");
10 | 	$sql->execute();
11 | 	$countcountries = $sql->fetchColumn();
12 | 	
13 | 	echo "data.addRows(".$countcountries.");";
14 | 	echo "data.addColumn('string', 'Country');";
15 | 	echo "data.addColumn('number', 'Blocked IPs');";
16 | 
17 | 	$sql = $pdo->prepare("
18 | 		SELECT 
19 | 			country,
20 | 			COUNT(country) AS count
21 | 		FROM hm_fwban
22 | 		GROUP BY country
23 | 	");
24 | 	$sql->execute();
25 | 	$N=0;
26 | 	while($row = $sql->fetch(PDO::FETCH_ASSOC)){
27 | 		if (($row['country']===NULL)||($row['country']=="")||($row['country']=="NOT FOUND")) {
28 | 			echo "data.setValue(".$N.", 0, 'Nowhereland".$N."');";
29 | 			echo "data.setValue(".$N.", 1, 0);";
30 | 		} else {
31 | 			echo "data.setValue(".$N.", 0, '".$row['country']."');";
32 | 			echo "data.setValue(".$N.", 1, ".$row['count'].");";
33 | 		}
34 | 		$N++;
35 | 	}
36 | ?>
37 | 


--------------------------------------------------------------------------------
/www/charthitsperdaycombined.php:
--------------------------------------------------------------------------------
 1 | <?php include_once("config.php") ?>
 2 | <?php include_once("functions.php") ?>
 3 | <script type="text/javascript">
 4 | google.load("visualization", "1", {packages:["corechart", "line"]});
 5 | google.setOnLoadCallback(drawChart);
 6 | function drawChart() {
 7 | 	var data = new google.visualization.DataTable();
 8 | 	data.addColumn('date', 'Date');
 9 | 	data.addColumn('number', 'IPs Added');
10 | 	data.addColumn('number', 'IPs Blocked');
11 | 	data.addRows([<?php include_once("charthitsperdaycombineddata.php") ?>]);
12 | 
13 | 	var chart = new google.visualization.LineChart(document.getElementById('chart_combined_staticdata'));
14 | 	  chart.draw(data, {
15 | 		width: 350,
16 | 		height: 200,
17 | 		colors: ['#ff0000','#000000'],
18 | 		legend: { position: 'bottom' },
19 | 		trendlines: { 
20 | 			0: { 
21 | 				type: 'polynomial',
22 | 				degree: 2,
23 | 				visibleInLegend: false,
24 | 				},
25 | 			1: { 
26 | 				type: 'polynomial',
27 | 				degree: 2,
28 | 				visibleInLegend: false,
29 | 				},
30 | 		},
31 | 	  });
32 | }	
33 | </script>
34 | 


--------------------------------------------------------------------------------
/Events/Config.INI:
--------------------------------------------------------------------------------
 1 | ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
 2 | ;  _  _ _  _  _  _ _    ____ ____ ____ _  _ ____ ____     ;
 3 | ;  |__| |\/| /_\ | |    [__  |___ |__/ |  | |___ |__/     ;
 4 | ;  |  | |  |/   \| |___ ___] |___ |  \  \/  |___ |  \     ;
 5 | ;  ____ _ ____ ____ _ _ _  _  _    _       ___   _  _  _  ;
 6 | ;  |___ | |__/ |___ | | | /_\ |    |       |__] /_\ |\ |  ;
 7 | ;  |    | |  \ |___ |_|_|/   \|___ |___    |__]/   \| \|  ;
 8 | ;                                                         ;
 9 | ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
10 | ;                                                         ;
11 | ;  #############      USER VARIABLES      ##############  ;
12 | ;                                                         ;
13 | ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
14 | 
15 | [hMailServer]
16 | AdminUser=Administrator
17 | AdminPassword=supersecretpassword
18 | EventDir=C:\Program Files (x86)\hMailServer\Events
19 | LogDir=C:\Program Files (x86)\hMailServer\Logs
20 | TempDir=C:\Program Files (x86)\hMailServer\Temp
21 | idsTable=hm_ids
22 | DatabaseType=MySQL


--------------------------------------------------------------------------------
/www/blocks-ps.php:
--------------------------------------------------------------------------------
 1 | <?php include("head.php") ?>
 2 | 
 3 | <div class="wrapper">
 4 | <div class="section">
 5 | 	<h2>Block List Analyzer</h2>
 6 | 	
 7 | <?php
 8 | 	include("config.php");
 9 | 	include("functions.php");
10 | 
11 | 	if(!isset($_POST["submit"])){
12 | 		echo "Clicking will run BlockCount.ps1 powershell script in separate process. The script will send an email when completed.<br><br>";
13 | 		echo "<form name='testForm' id='testForm' action='blocks-ps.php' method='post' />";
14 | 		echo "	<input type='submit' name='submit' id='submit' value='Run Script' />";
15 | 		echo "</form>";
16 | 	} elseif(isset($_POST["submit"])) {
17 | 		$script_command = "Powershell.exe -ExecutionPolicy Bypass -File ".$PowershellScriptDir."BlockCount.ps1";
18 | 		pclose(popen("start /B ". $script_command, "r")); 
19 | 
20 | 		echo "Script execution initiated. You may continue browsing the web admin. You will receive an email with the results shortly.<br><br>";
21 | 		echo "Script Location: ".$PowershellScriptDir."BlockCount.ps1";
22 | 	} else {
23 | 		echo "Script running. Please check your email in a few minutes.";
24 | 	}
25 | ?>
26 | 
27 | </div>


--------------------------------------------------------------------------------
/www/head-g.php:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html> 
 2 | <html>
 3 | <head>
 4 | <title>hMailServer Firewall Ban</title>
 5 | <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
 6 | <meta http-equiv="Content-Style-Type" content="text/css">
 7 | <meta name="viewport" content="width=device-width, initial-scale=1">
 8 | <link rel="stylesheet" type="text/css" media="all" href="stylesheet.css">
 9 | <link href="https://fonts.googleapis.com/css?family=Roboto" rel="stylesheet">
10 | <link href="https://fonts.googleapis.com/css?family=Oswald" rel="stylesheet"> 
11 | <script type="text/javascript" src="https://www.google.com/jsapi"></script>
12 | <script type="text/javascript" src="https://www.gstatic.com/charts/loader.js"></script>
13 | <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js"></script>
14 | <?php include("ipmap.php") ?>
15 | <?php include("charthitsperdaycombined.php") ?>
16 | <?php include("charttotalblocksperday.php") ?>
17 | <?php include("charthitsperhour.php") ?>
18 | <?php include("chartblocksperhour.php") ?>
19 | <?php include("dialtodayhits.php") ?>
20 | <?php include("dialtodayrepeats.php") ?>
21 | <?php include("dialtodayblocks.php") ?>
22 | </head>
23 | <body>
24 | <?php include("header.php") ?>
25 | <div class="wrapper">


--------------------------------------------------------------------------------
/www/ptr.php:
--------------------------------------------------------------------------------
 1 | <html>
 2 | <head>
 3 | <title>hMailServer Firewall Ban</title>
 4 | <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
 5 | <meta http-equiv="Content-Style-Type" content="text/css">
 6 | <meta name="viewport" content="width=device-width, initial-scale=1">
 7 | <link rel="stylesheet" type="text/css" media="all" href="stylesheet.css">
 8 | <link href="https://fonts.googleapis.com/css?family=Roboto" rel="stylesheet">
 9 | <link href="https://fonts.googleapis.com/css?family=Oswald" rel="stylesheet"> 
10 | </head>
11 | <body onBlur="window.focus()">
12 | 
13 | <div class="wrapper">
14 | <div class="section">
15 | 
16 | <?php
17 | 	include_once("config.php");
18 | 	include_once("functions.php");
19 | 
20 | 	if (isset($_GET['ip'])) {$ip = $_GET ['ip'];} else {$ip = "";}
21 | 
22 | 	$sql = $pdo->prepare("
23 | 		SELECT 
24 | 			".DBCastDateTimeFieldAsDate('timestamp')." AS dateptr, 
25 | 			ban_reason, 
26 | 			helo, 
27 | 			ptr 
28 | 		FROM hm_fwban 
29 | 		WHERE ipaddress = '$ip'
30 | 	");
31 | 	$sql->execute();
32 | 	while($row = $sql->fetch(PDO::FETCH_ASSOC)){
33 | 		echo "IP: ".$ip."<br>";
34 | 		echo "PTR: ".$row['ptr']."<br>";
35 | 		echo "HELO: ".$row['helo']."<br>";
36 | 		echo "Ban Reason: ".$row['ban_reason']."<br>";
37 | 		echo "Ban Date: ".$row['dateptr']."<br>";
38 | 	}
39 | ?>
40 | 
41 | </div>
42 | </div>
43 | 
44 | </body>
45 | </html>


--------------------------------------------------------------------------------
/www/dialtodayblocks.php:
--------------------------------------------------------------------------------
 1 | <script type="text/javascript">
 2 | 	google.charts.load('current', {'packages':['gauge']});
 3 | 	google.charts.setOnLoadCallback(drawChart);
 4 | 
 5 | 	function drawChart() {
 6 | 
 7 | 	var data = google.visualization.arrayToDataTable([
 8 | 		['Label', 'Value'],
 9 | <?php
10 | 	include_once("config.php");
11 | 	include_once("functions.php");
12 | 	include_once("blocksdata.php");
13 | 
14 | 	//Set guage color marker points
15 | 	$redFrom = ($redToBlock / 1.2);
16 | 	$yellowTo = $redFrom;
17 | 	$yellowFrom = ($yellowTo * 0.75);
18 | 
19 | 	//Get current (today's) bans
20 | 	$sql = $pdo->prepare("
21 | 		SELECT	
22 | 			COUNT(ipaddress)
23 | 		FROM (
24 | 			SELECT * 
25 | 			FROM hm_fwban_rh 
26 | 			WHERE '".date('Y-m-d')." 00:00:00' <= timestamp
27 | 		) AS A 
28 | 		WHERE timestamp <= '".date('Y-m-d')." 23:59:59'
29 | 	");
30 | 	$sql->execute();
31 | 	$hits = $sql->fetchColumn();
32 | 	echo "['Blocks', ".$hits."]";
33 | 	echo "]);";
34 | 
35 | 	echo "var options = { ";
36 | 	echo "width: 100, height: 100, ";
37 | 	echo "min: 0, max: ".$redToBlock.", ";
38 | 	echo "redFrom: ".$redFrom.", redTo: ".$redToBlock.", ";
39 | 	echo "yellowFrom: ".$yellowFrom.", yellowTo: ".$yellowTo.", ";
40 | ?>
41 | 		minorTicks: 10
42 | 	};
43 | 
44 | 	var chart = new google.visualization.Gauge(document.getElementById('todays_blocks_dial'));
45 | 
46 | 	chart.draw(data, options);
47 | 
48 | 	}
49 | </script>
50 | 


--------------------------------------------------------------------------------
/www/dialtodayrepeats.php:
--------------------------------------------------------------------------------
 1 | <script type="text/javascript">
 2 | 	google.charts.load('current', {'packages':['gauge']});
 3 | 	google.charts.setOnLoadCallback(drawChart);
 4 | 
 5 | 	function drawChart() {
 6 | 
 7 | 	var data = google.visualization.arrayToDataTable([
 8 | 		['Label', 'Value'],
 9 | <?php
10 | 	include_once("config.php");
11 | 	include_once("functions.php");
12 | 	include_once("blocksdata.php");
13 | 
14 | 	//Set guage color marker points
15 | 	$redFrom = $redToIP / 1.2;
16 | 	$yellowTo = $redFrom;
17 | 	$yellowFrom = $yellowTo * 0.75;
18 | 
19 | 	//Get current (today's) bans
20 | 	$sql = $pdo->prepare("
21 | 		SELECT	
22 | 			COUNT(DISTINCT(ipaddress))
23 | 		FROM (
24 | 			SELECT * 
25 | 			FROM hm_fwban_rh 
26 | 			WHERE '".date('Y-m-d')." 00:00:00' <= timestamp
27 | 		) AS A 
28 | 		WHERE timestamp <= '".date('Y-m-d')." 23:59:59'
29 | 	");
30 | 	$sql->execute();
31 | 	$hits = $sql->fetchColumn();
32 | 	echo "['Repeats', ".$hits."]";
33 | 	echo "]);";
34 | 
35 | 	echo "var options = { ";
36 | 	echo "width: 100, height: 100, ";
37 | 	echo "min: 0, max: ".$redToIP.", ";
38 | 	echo "redFrom: ".$redFrom.", redTo: ".$redToIP.", ";
39 | 	echo "yellowFrom: ".$yellowFrom.", yellowTo: ".$yellowTo.", ";
40 | ?>
41 | 		minorTicks: 10
42 | 	};
43 | 
44 | 	var chart = new google.visualization.Gauge(document.getElementById('todays_repeats_dial'));
45 | 
46 | 	chart.draw(data, options);
47 | 
48 | 	}
49 | </script>
50 | 


--------------------------------------------------------------------------------
/www/charthitsperday.php:
--------------------------------------------------------------------------------
 1 | <?php include_once("config.php") ?>
 2 | <?php include_once("functions.php") ?>
 3 | <script type="text/javascript">
 4 | google.load("visualization", "1", {packages:["corechart", "line"]});
 5 | google.setOnLoadCallback(drawChart);
 6 | function drawChart() {
 7 | 	var data = new google.visualization.DataTable();
 8 | 	data.addColumn('date', 'Date');
 9 | 	data.addColumn('number', 'Hits');
10 | 	data.addRows([
11 | <?php 
12 | 	$query = "
13 | 		SELECT 
14 | 			".DBCastDateTimeFieldAsDate('timestamp')." AS daily, 
15 | 			".DBFormatDate('timestamp', '%Y')." AS year,
16 | 			(".DBFormatDate('timestamp', '%c')." - 1) AS month,
17 | 			".DBFormatDate('timestamp', '%e')." AS day,
18 | 			COUNT(id) AS ipperday 
19 | 		FROM hm_fwban 
20 | 		WHERE ".DBCastDateTimeFieldAsDate('timestamp')." < ".DBCastDateTimeFieldAsDate(DBGetCurrentDateTime())." 
21 | 		GROUP BY daily ASC";
22 | 	$exec = mysqli_query($con,$query);
23 | 	while($row = mysqli_fetch_array($exec)){
24 | 		echo "[new Date(".$row['year'].", ".$row['month'].", ".$row['day']."), ".$row['ipperday']."],";
25 | 	}
26 | ?>
27 | 	]);
28 | 
29 | 	var chart = new google.visualization.LineChart(document.getElementById('chart_hitsperday'));
30 | 	  chart.draw(data, {
31 | 		width: 350,
32 | 		height: 200,
33 | 		colors: ['#ff0000'],
34 | 		legend: 'none',
35 | 		trendlines: { 0: { 
36 | 			type: 'polynomial',
37 | 			degree: 1,
38 | 			visibleInLegend: true,
39 | 			}
40 | 		}
41 | 	  });
42 | }	
43 | </script>
44 | 


--------------------------------------------------------------------------------
/www/datepicker.php:
--------------------------------------------------------------------------------
 1 | <?php include_once("config.php") ?>
 2 | <?php include_once("functions.php") ?>
 3 | 
 4 | <link rel="stylesheet" href="//code.jquery.com/ui/1.12.1/themes/base/jquery-ui.css">
 5 | <!-- <link rel="stylesheet" href="/resources/demos/style.css"> -->
 6 | <script src="https://code.jquery.com/jquery-1.12.4.js"></script>
 7 | <script src="https://code.jquery.com/ui/1.12.1/jquery-ui.js"></script>
 8 | <script type="text/javascript">
 9 | $(function () {
10 |     $("#dateFrom").datepicker({
11 |         dateFormat: "yy-mm-dd",
12 | 		minDate: <?php
13 | 	$sql = $pdo->prepare("
14 | 		SELECT 
15 | 			".DBCastDateTimeFieldAsDate('timestamp')." AS date 
16 | 		FROM hm_fwban 
17 | 		".DBLimitRowsWithOffset((DBCastDateTimeFieldAsDate('timestamp')),'ASC',0,0,0,1)
18 | 	);
19 | 	$sql->execute();
20 | 	while($row = $sql->fetch(PDO::FETCH_ASSOC)){
21 | 		echo "'".$row['date']."',";
22 | 	}
23 | ?>
24 | 		maxDate: new Date,
25 |         onSelect: function (selected) {
26 |             $("#dateTo").datepicker("option", "minDate", selected);
27 |         }
28 |     });
29 |     $("#dateTo").datepicker({
30 |         dateFormat: "yy-mm-dd",
31 | 		minDate: <?php
32 | 	$sql = $pdo->prepare("
33 | 		SELECT 
34 | 			".DBCastDateTimeFieldAsDate('timestamp')." AS date 
35 | 		FROM hm_fwban 
36 | 		".DBLimitRowsWithOffset((DBCastDateTimeFieldAsDate('timestamp')),'ASC',0,0,0,1)
37 | 	);
38 | 	$sql->execute();
39 | 	while($row = $sql->fetch(PDO::FETCH_ASSOC)){
40 | 		echo "'".$row['date']."',";
41 | 	}
42 | ?>
43 | 		maxDate: new Date,
44 |         onSelect: function (selected) {
45 |             $("#dateFrom").datepicker("option", "maxDate", selected);
46 |         }
47 |     });
48 | });
49 | </script>


--------------------------------------------------------------------------------
/www/reban-country.php:
--------------------------------------------------------------------------------
 1 | <?php include("head.php") ?>
 2 | 
 3 | <div class="section">
 4 | 
 5 | <?php
 6 | 	include_once("config.php");
 7 | 	include_once("functions.php");
 8 | 
 9 | 	if (isset($_GET['page'])) {
10 | 		$page = $_GET['page'];
11 | 		$display_pagination = 1;
12 | 	} else {
13 | 		$page = 1;
14 | 		$total_pages = 1;
15 | 		$display_pagination = 0;
16 | 	}
17 | 	if (isset($_GET['submit'])){$button = $_GET['submit'];}else{$button = "";}
18 | 	if (isset($_GET['country'])){$country = $_GET['country'];} else {$country = "";}
19 | 
20 | 	if (empty($country)){echo "Error: No country selected. Please see administrator.<br><br>";} 
21 | 	else {
22 | 		$sqlcount = $pdo->prepare("
23 | 			SELECT 
24 | 				COUNT(id) AS value_occurrence 
25 | 			FROM hm_fwban 
26 | 			WHERE country LIKE '%{$country}%' AND (flag=1 OR flag=2)
27 | 		");
28 | 		$sqlcount->execute();
29 | 		$total_rows = $sqlcount->fetchColumn();
30 | 		if ($total_rows > 0) { 
31 | 			echo "<br>".number_format($total_rows)." hits for <a href=\"search.php?submit=Search&search=".$country."&RS=NO\">".$country."</a> have been re-banned the firewall.<br>";
32 | 			$sql = $pdo->prepare("
33 | 				SELECT id 
34 | 				FROM hm_fwban 
35 | 				WHERE country LIKE '%{$country}%' AND (flag=1 OR flag=2)
36 | 			");
37 | 			$sql->execute();
38 | 			while($row = $sql->fetch(PDO::FETCH_ASSOC)){
39 | 				$sql_update = $pdo->exec("
40 | 					UPDATE hm_fwban SET flag=3 WHERE id = ".$row['id']
41 | 				);
42 | 			}
43 | 		} else {
44 | 			echo "<br>Error: No released records for \"<b>".$country."</b>\". Please <a href=\"search.php?submit=Search&search=".$country."\">search release status</a> or check the spelling and try again.";
45 | 		}
46 | 	}
47 | ?>
48 | </div>
49 | 
50 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/www/reban-br.php:
--------------------------------------------------------------------------------
 1 | <?php include("head.php") ?>
 2 | 
 3 | <div class="section">
 4 | 
 5 | <?php
 6 | 	include_once("config.php");
 7 | 	include_once("functions.php");
 8 | 
 9 | 	if (isset($_GET['page'])) {
10 | 		$page = $_GET['page'];
11 | 		$display_pagination = 1;
12 | 	} else {
13 | 		$page = 1;
14 | 		$total_pages = 1;
15 | 		$display_pagination = 0;
16 | 	}
17 | 	if (isset($_GET['submit'])) {$button = $_GET ['submit'];} else {$button = "";}
18 | 	if (isset($_GET['ban_reason'])) {$ban_reason = $_GET['ban_reason'];} else {$ban_reason = "";}
19 | 
20 | 	if (empty($ban_reason)){echo "Error: No IP entries for ban reason ".$ban_reason."<br><br>";} else {
21 | 
22 | 		$sqlcount = $pdo->prepare("
23 | 			SELECT 
24 | 				COUNT(id) AS value_occurrence 
25 | 			FROM hm_fwban 
26 | 			WHERE ban_reason LIKE '{$ban_reason}' AND (flag=1 OR flag=2)
27 | 		");
28 | 		$sqlcount->execute();
29 | 		$total_rows = $sqlcount->fetchColumn();
30 | 		if ($total_rows > 0) { 
31 | 			echo "<br>".number_format($total_rows)." hits for <a href=\"search.php?submit=Search&search=".$ban_reason."\">".$ban_reason."</a> have been re-banned to the firewall.<br>";
32 | 			$sql = $pdo->prepare("
33 | 				SELECT 
34 | 					id 
35 | 				FROM hm_fwban 
36 | 				WHERE ban_reason LIKE '{$ban_reason}' AND (flag=1 OR flag=2)
37 | 			");
38 | 			$sql->execute();
39 | 			while($row = $sql->fetch(PDO::FETCH_ASSOC)){
40 | 				$sql_update = $pdo->exec("
41 | 					UPDATE hm_fwban SET flag=3 WHERE id = ".$row['id']
42 | 				);
43 | 			}
44 | 		} else {
45 | 			echo "<br>Error: No previously released records for \"<b>".$ban_reason."</b>\". Try searching for released records for <a href=\"search.php?submit=Search&search=".$ban_reason."&RS=YES\">".$ban_reason."</a>.";
46 | 		}
47 | 	}
48 | ?>
49 | </div>
50 | 
51 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/www/dialtodayhits.php:
--------------------------------------------------------------------------------
 1 | <script type="text/javascript">
 2 | 	google.charts.load('current', {'packages':['gauge']});
 3 | 	google.charts.setOnLoadCallback(drawChart);
 4 | 
 5 | 	function drawChart() {
 6 | 
 7 | 	var data = google.visualization.arrayToDataTable([
 8 | 		['Label', 'Value'],
 9 | <?php
10 | 	include_once("config.php");
11 | 	include_once("functions.php");
12 | 
13 | 	//Get guage max
14 | 	$sql = $pdo->prepare("
15 | 		SELECT	
16 | 			ROUND(((COUNT(DISTINCT(ipaddress))) * 1.2), -1) AS dailymax,
17 | 			".DBCastDateTimeFieldAsDate('timestamp')." AS daily
18 | 		FROM hm_fwban
19 | 		GROUP BY daily
20 | 		".DBLimitRowsWithOffset('dailymax','DESC',0,0,0,1)
21 | 	);
22 | 	$sql->execute();
23 | 	while($row = $sql->fetch(PDO::FETCH_ASSOC)){
24 | 		$redTo = $row['dailymax'];
25 | 	}
26 | 	//Set guage color marker points
27 | 	$redFrom = ($redTo / 1.2);
28 | 	$yellowTo = $redFrom;
29 | 	$yellowFrom = ($yellowTo * 0.75);
30 | 
31 | 	//Get current (today's) bans
32 | 	$sql = $pdo->prepare("
33 | 		SELECT	
34 | 			COUNT(DISTINCT(ipaddress)) AS hits
35 | 		FROM hm_fwban
36 | 		WHERE ".DBCastDateTimeFieldAsDate('timestamp')." LIKE ".DBCastDateTimeFieldAsDate(DBGetCurrentDateTime())
37 | 	);
38 | 	$sql->execute();
39 | 	$hits = $sql->fetchColumn();
40 | 	echo "['Bans', ".$hits."]";
41 | 	echo "]);";
42 | 
43 | 	echo "var options = { ";
44 | 	echo "width: 100, height: 100, ";
45 | 	echo "min: 0, max: ".$redTo.", ";
46 | 	echo "redFrom: ".$redFrom.", redTo: ".$redTo.", ";
47 | 	echo "yellowFrom: ".$yellowFrom.", yellowTo: ".$yellowTo.", ";
48 | ?>
49 | 		minorTicks: 10
50 | 	};
51 | 
52 | 	var chart = new google.visualization.Gauge(document.getElementById('todays_hits_dial'));
53 | 
54 | 	chart.draw(data, options);
55 | 
56 | 	// setInterval(function() {
57 | 		// data.setValue(0, 1, 40 + Math.round(60 * Math.random()));
58 | 		// chart.draw(data, options);
59 | 	// }, 13000);
60 | 	}
61 | </script>
62 | 


--------------------------------------------------------------------------------
/www/release-country.php:
--------------------------------------------------------------------------------
 1 | <?php include("head.php") ?>
 2 | 
 3 | <div class="section">
 4 | 
 5 | <?php
 6 | 	include_once("config.php");
 7 | 	include_once("functions.php");
 8 | 
 9 | 	if (isset($_GET['page'])) {
10 | 		$page = $_GET['page'];
11 | 		$display_pagination = 1;
12 | 	} else {
13 | 		$page = 1;
14 | 		$total_pages = 1;
15 | 		$display_pagination = 0;
16 | 	}
17 | 	if (isset($_GET['submit'])) {$button = $_GET ['submit'];} else {$button = "";}
18 | 	if (isset($_GET['country'])) {$country = $_GET['country'];} else {$country = "";}
19 | 
20 | 	if (empty($country)){echo "Error: No country selected.<br><br>";} 
21 | 	else {
22 | 
23 | 		$sqlcount = $pdo->prepare("
24 | 			SELECT 
25 | 				COUNT(id) AS value_occurrence 
26 | 			FROM hm_fwban 
27 | 			WHERE country LIKE '%{$country}%' AND (flag IS NULL OR flag=3)
28 | 		");
29 | 		$sqlcount->execute();
30 | 		$total_rows = $sqlcount->fetchColumn();
31 | 		if ($total_rows > 0) { 
32 | 			if($total_rows == 1){$singular="";}else{$singular="s";}
33 | 			if($total_rows == 1){$singpos="has";}else{$singpos="have";}
34 | 			echo "<br>".number_format($total_rows)." hit".$singular." for <a href=\"search.php?submit=Search&search=".$country."&RS=YES\">".$country."</a> ".$singpos." been released from the firewall.<br>";
35 | 			$sql = $pdo->prepare("
36 | 				SELECT 
37 | 					id 
38 | 				FROM hm_fwban 
39 | 				WHERE country LIKE '%{$country}%' AND (flag IS NULL OR flag=3)
40 | 			");
41 | 			$sql->execute();
42 | 			while($row = $sql->fetch(PDO::FETCH_ASSOC)){
43 | 				$sql_update = $pdo->exec("
44 | 					UPDATE hm_fwban SET flag=2 WHERE id=".$row['id']
45 | 				);
46 | 			}
47 | 		} else {
48 | 			echo "<br>Error: No unreleased records for \"<b>".$country."</b>\". Please <a href=\"search.php?submit=Search&search=".$country."\">search release status</a> or check the spelling and try again.";
49 | 		}
50 | 	}
51 | ?>
52 | </div>
53 | 
54 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/www/config.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | /* Database Variables 
 4 | 
 5 | 	'dbtype' = database server type
 6 | 	
 7 | 		For MySQL use dbtype = 'mysql'
 8 | 		For MSSQL use dbtype = 'mssql'
 9 | 
10 | 	'driver' = connection type
11 | 	
12 | 		For MySQL use driver = 'mysql'
13 | 		For MSSQL use driver = 'mssql'
14 | 		For ODBC  use driver = 'odbc'
15 | 		
16 | 		* When opting for ODBC use correct DSN! *
17 | 		* Example: "MariaDB ODBC 3.0 Driver".   *
18 | 		* Exact spelling is critical!           *
19 | 	
20 | */
21 | 
22 | $Database = array (
23 | 	'dbtype'      => 'mysql',
24 | 	'host'        => 'localhost',
25 | 	'username'    => 'hmailserver',
26 | 	'password'    => 'supersecretpassword',
27 | 	'dbname'      => 'hmailserver',
28 | 	'driver'      => 'mysql',
29 | 	'port'        => '3306',
30 | 	'dsn'         => 'MariaDB ODBC 3.0 Driver'
31 | );
32 | 
33 | 
34 | /* 	GeoLite2MySQL - GeoIP Database Using MaxMind Data
35 | 	https://github.com/palinkas-jo-reggelt/GeoLite2MySQL
36 | 	
37 | 	Database Variables follow the same rules as above.
38 | 	
39 | 	If GeoLite2MySQL is in use, set 'use_geoip' to 'true'. 
40 | 	
41 | 	Using a database vs calling ip-api.com for geoip requests will 
42 | 	prevent rate limiting in situations where there are a large number 
43 | 	of calls. Eg. manually banning a /24 IP range with 256 individual 
44 | 	bans - calling 256 geoip requests - exceeding the 150/minute 
45 | 	rate limit at ip-api.com.
46 | 
47 | */
48 | 
49 | $GeoIPDatabase = array (
50 | 	'use_geoip'   => 'false',
51 | 	'dbtype'      => 'mysql',
52 | 	'host'        => 'localhost',
53 | 	'username'    => 'geoip',
54 | 	'password'    => 'supersecretpassword',
55 | 	'dbname'      => 'geoip',
56 | 	'driver'      => 'mysql',
57 | 	'port'        => '3306',
58 | 	'dsn'         => 'MariaDB ODBC 3.0 Driver'
59 | );
60 | 
61 | 
62 | /*	PowershellScriptDir - Location of project powershell files.  */
63 | 
64 | $PowershellScriptDir = "C:\\scripts\\hmailserver\\FWBan\\";
65 | 
66 | ?>


--------------------------------------------------------------------------------
/www/release-br.php:
--------------------------------------------------------------------------------
 1 | <?php include("head.php") ?>
 2 | 
 3 | <div class="section">
 4 | 
 5 | <?php
 6 | 	include_once("config.php");
 7 | 	include_once("functions.php");
 8 | 
 9 | 	if (isset($_GET['page'])) {
10 | 		$page = $_GET['page'];
11 | 		$display_pagination = 1;
12 | 	} else {
13 | 		$page = 1;
14 | 		$total_pages = 1;
15 | 		$display_pagination = 0;
16 | 	}
17 | 	if (isset($_GET['submit'])) {$button = $_GET ['submit'];} else {$button = "";}
18 | 	if (isset($_GET['ban_reason'])) {$ban_reason = $_GET['ban_reason'];} else {$ban_reason="";}
19 | 
20 | 	if (empty($ban_reason)){echo "Error: No ban reason selected. Please see administrator.".$ban_reason."<br><br>";} 
21 | 	else {
22 | 		$sqlcount = $pdo->prepare("
23 | 			SELECT 
24 | 				COUNT(id) AS value_occurrence 
25 | 			FROM hm_fwban 
26 | 			WHERE ban_reason LIKE '{$ban_reason}' AND (flag IS NULL OR flag=3)
27 | 		");
28 | 		$sqlcount->execute();
29 | 		$total_rows = $sqlcount->fetchColumn();
30 | 		if ($total_rows > 0) { 
31 | 			if($total_rows == 1){$singular="";}else{$singular="s";}
32 | 			if($total_rows == 1){$singpos="has";}else{$singpos="have";}
33 | 			echo "<br>".number_format($total_rows)." hit".$singular." for <a href=\"search.php?submit=Search&search=".$ban_reason."&RS=YES\">".$ban_reason."</a> ".$singpos." been released from the firewall.<br>";
34 | 			$sql = $pdo->prepare("
35 | 				SELECT 
36 | 					id 
37 | 				FROM hm_fwban 
38 | 				WHERE ban_reason LIKE '{$ban_reason}' AND (flag IS NULL OR flag=3)
39 | 			");
40 | 			$sql->execute();
41 | 			while($row = $sql->fetch(PDO::FETCH_ASSOC)){
42 | 				$sql_update = $pdo->exec("
43 | 					UPDATE hm_fwban SET flag=2 WHERE id = ".$row['id']
44 | 				);
45 | 			}
46 | 		} else {
47 | 			echo "<br>Error: No unreleased records for \"<b>".$ban_reason."</b>\". Please <a href=\"search.php?submit=Search&search=".$ban_reason."\">search release status</a> or check the spelling and try again.";
48 | 		}
49 | 	}
50 | ?>
51 | </div>
52 | 
53 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/www/release-date.php:
--------------------------------------------------------------------------------
 1 | <?php include("head.php") ?>
 2 | 
 3 | <div class="section">
 4 | 
 5 | <?php
 6 | 	include_once("config.php");
 7 | 	include_once("functions.php");
 8 | 
 9 | 	if (isset($_GET['page'])) {
10 | 		$page = $_GET['page'];
11 | 		$display_pagination = 1;
12 | 	} else {
13 | 		$page = 1;
14 | 		$total_pages = 1;
15 | 		$display_pagination = 0;
16 | 	}
17 | 	if (isset($_GET['submit'])) {$button = $_GET ['submit'];} else {$button = "";}
18 | 	if (isset($_GET['dateFrom'])) {$dateFrom = $_GET['dateFrom'];} else {$dateFrom = "";}
19 | 	if (isset($_GET['dateTo'])) {$dateTo = $_GET['dateTo'];} else {$dateFrom = "";}
20 | 
21 | 	if (empty($dateFrom)){echo "Error: Date range empty. Please see administrator.<br><br>";}
22 | 	elseif (empty($dateTo)){echo "Error: Date range empty. Please see administrator.<br><br>";}
23 | 	else {
24 | 		$sqlcount = $pdo->prepare("
25 | 			SELECT 
26 | 				COUNT(id) AS value_occurrence 
27 | 			FROM hm_fwban 
28 | 			WHERE timestamp BETWEEN '{$dateFrom} 00:00:00' AND '{$dateTo} 23:59:59' AND (flag IS NULL OR flag=3)
29 | 		");
30 | 		$sqlcount->execute();
31 | 		$total_rows = $sqlcount->fetchColumn();
32 | 		if ($total_rows > 0) { 
33 | 			if($total_rows == 1){$singular="";}else{$singular="s";}
34 | 			if($total_rows == 1){$singpos="has";}else{$singpos="have";}
35 | 			echo "<br>".number_format($total_rows)." hit".$singular." for date range <a href=\"search-date.php?submit=Search&dateFrom=".$dateFrom."&dateTo=".$dateTo."&RS=YES\">\"<b>".$dateFrom."</b>\" to \"<b>".$dateTo."</b>\"</a> ".$singpos." been released from the firewall.<br>";
36 | 			$sql = $pdo->prepare("
37 | 				SELECT 
38 | 					id 
39 | 				FROM hm_fwban 
40 | 				WHERE timestamp BETWEEN '{$dateFrom} 00:00:00' AND '{$dateTo} 23:59:59' AND (flag IS NULL OR flag=3)
41 | 			");
42 | 			$sql->execute();
43 | 			while($row = $sql->fetch(PDO::FETCH_ASSOC)){
44 | 				$sql_update = $pdo->exec("
45 | 					UPDATE hm_fwban SET flag=2 WHERE id=".$row['id']
46 | 				);
47 | 			}
48 | 		} else {
49 | 			echo "<br>Error: Date range \"<b>".$dateFrom."</b>\" to \"<b>".$dateTo."</b>\" contains no entries in database. Please try again.";
50 | 		}
51 | 	}
52 | 	
53 | ?>
54 | </div>
55 | 
56 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/www/reban-date.php:
--------------------------------------------------------------------------------
 1 | <?php include("head.php") ?>
 2 | 
 3 | <div class="section">
 4 | 
 5 | <?php
 6 | 	include_once("config.php");
 7 | 	include_once("functions.php");
 8 | 
 9 | 	if (isset($_GET['page'])) {
10 | 		$page = $_GET['page'];
11 | 		$display_pagination = 1;
12 | 	} else {
13 | 		$page = 1;
14 | 		$total_pages = 1;
15 | 		$display_pagination = 0;
16 | 	}
17 | 	if (isset($_GET['submit'])) {$button = $_GET ['submit'];} else {$button = "";	}
18 | 	if (isset($_GET['dateFrom'])) {$dateFrom = $_GET['dateFrom'];} else {$dateFrom = "";}
19 | 	if (isset($_GET['dateTo'])) {$dateTo = $_GET['dateTo'];} else {$dateFrom = "";}
20 | 
21 | 	if (empty($dateFrom)){
22 | 		echo "You did not put in a beginning date. Both beginning and ending dates are required for date range release even if the range is a single day.<br><br>";
23 | 	} elseif (empty($dateTo)){
24 | 			echo "You did not put in an ending date. Both beginning and ending dates are required for date range release even if the range is a single day.<br><br>";
25 | 	} else {
26 | 		
27 | 		$sqlcount = $pdo->prepare("
28 | 			SELECT 
29 | 				COUNT(id) AS value_occurrence 
30 | 			FROM hm_fwban 
31 | 			WHERE timestamp BETWEEN '{$dateFrom} 00:00:00' AND '{$dateTo} 23:59:59' AND (flag=1 OR flag=2)
32 | 		");
33 | 		$sqlcount->execute();
34 | 		$total_rows = $sqlcount->fetchColumn();
35 | 		if ($total_rows > 0) { 
36 | 			echo "<br>".number_format($total_rows)." hits for date range <a href=\"search-date.php?submit=Search&dateFrom=".$dateFrom."&dateTo=".$dateTo."&RS=NO\">\"<b>".$dateFrom."</b>\" to \"<b>".$dateTo."</b>\"</a> have been marked for re-BAN to the firewall.<br>";
37 | 			$sql = $pdo->prepare("
38 | 				SELECT 
39 | 					id 
40 | 				FROM hm_fwban 
41 | 				WHERE timestamp BETWEEN '{$dateFrom} 00:00:00' AND '{$dateTo} 23:59:59' AND (flag=1 OR flag=2)
42 | 			");
43 | 			$sql->execute();
44 | 			while($row = $sql->fetch(PDO::FETCH_ASSOC)){
45 | 				$sql_update = $pdo->exec("
46 | 					UPDATE hm_fwban SET flag=3 WHERE id = ".$row['id']
47 | 				);
48 | 			}
49 | 		} else {
50 | 			echo "<br>Error: Date range \"<b>".$dateFrom."</b>\" to \"<b>".$dateTo."</b>\" contains no entries in database that were previously released. Please try again.";
51 | 		}
52 | 	}
53 | ?>
54 | </div>
55 | 
56 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/www/safe-unmark.php:
--------------------------------------------------------------------------------
 1 | <?php include("head.php") ?>
 2 | 
 3 | <div class="section">
 4 | 
 5 | <?php
 6 | 	include_once("config.php");
 7 | 	include_once("functions.php");
 8 | 
 9 | 	if (isset($_GET['page'])) {
10 | 		$page = $_GET['page'];
11 | 		$display_pagination = 1;
12 | 	} else {
13 | 		$page = 1;
14 | 		$total_pages = 1;
15 | 		$display_pagination = 0;
16 | 	}
17 | 	if (isset($_GET['submit'])) {$button = $_GET ['submit'];} else {$button = "";}
18 | 	if (isset($_GET['id'])) {$id = $_GET['id'];} else {$id = "";}
19 | 	if (isset($_GET['ipRange'])) {
20 | 		if(preg_match("/^(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$/", ($_GET['ipRange']))) {
21 | 			$ipRange = $_GET['ipRange']."/32";
22 | 		} else if (preg_match("/^(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)(\/(2[2-9]|3[0-2]))$/", ($_GET['ipRange']))) {
23 | 			$ipRange = $_GET['ipRange'];
24 | 		} else {
25 | 			$ipRange = "";
26 | 		}
27 | 	} else {
28 | 		$ipRange = "";
29 | 	}
30 | 
31 | 	$ips = ipRangeFinder($ipRange);
32 | 	$iplo = $ips[0];
33 | 	$iphi = $ips[1];
34 | 
35 | 	$range = explode("/", $ipRange);
36 | 	$rcidr = $range[1]; 
37 | 	$ip_count = 1 << (32 - $rcidr);
38 | 
39 | 	echo "<H2>Ban IP Range</H2>";
40 | 	echo $ipRange." : IP Range<br><br>";
41 | 	echo $iplo." : Network Address<br>";
42 | 	echo $iphi." : Broadcast Address<br>";
43 | 	echo $ip_count." : Number of IPs in range<br><br>";
44 | 	echo "Begin Update:<br><br>";
45 | 
46 | 
47 | 	if (empty($ipRange)){
48 | 		echo "Error: IP range empty. Please see administrator.<br><br>";
49 | 	} else {
50 | 
51 | 		$start = ip2long($iplo);
52 | 		for ($i = 0; $i < $ip_count; $i++) {
53 | 
54 | 			$ip = long2ip($start + $i);
55 | 			
56 | 			$sql_existing = $pdo->prepare("
57 | 				SELECT 
58 | 					id, 
59 | 					ipaddress, 
60 | 					flag 
61 | 				FROM hm_fwban 
62 | 				WHERE ".DBIpStringToIntField('ipaddress')." = ".DBIpStringToIntValue($ip)."
63 | 			");
64 | 			$sql_existing->execute();
65 | 			while($row = $sql_existing->fetch(PDO::FETCH_ASSOC)){
66 | 
67 | 				$ipaddressdb = $row['ipaddress'];
68 | 				$flag = $row['flag'];
69 | 				$id = $row['id'];
70 | 			}
71 | 			if ($flag=6) {
72 | 				$sql_rem_safe_six = $pdo->exec("
73 | 					UPDATE hm_fwban SET flag=1 WHERE id=".$id
74 | 				);
75 | 				echo "IP ".$ip." removed from SAFE list and updated to RELEASED<br>";
76 | 			} else if ($flag=5) {
77 | 				$sql_rem_safe_six = $pdo->exec("
78 | 					UPDATE hm_fwban SET flag=2 WHERE id=".$id
79 | 				);
80 | 				echo "IP ".$ip." removed from SAFE list and updated to RELEASED status for firewall rule removal<br>";
81 | 			}
82 | 			$ipaddressdb = "";
83 | 			$flag = "";
84 | 			$id = "";
85 | 		}
86 | 	}
87 | ?>
88 | </div>
89 | 
90 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/www/release-ip.php:
--------------------------------------------------------------------------------
 1 | <?php include("head.php") ?>
 2 | 
 3 | <div class="section">
 4 | 
 5 | <?php
 6 | 	include_once("config.php");
 7 | 	include_once("functions.php");
 8 | 
 9 | 	if (isset($_GET['page'])) {
10 | 		$page = $_GET['page'];
11 | 		$display_pagination = 1;
12 | 	} else {
13 | 		$page = 1;
14 | 		$total_pages = 1;
15 | 		$display_pagination = 0;
16 | 	}
17 | 	if (isset($_GET['submit'])) {$button = $_GET ['submit'];} else {$button = "";}
18 | 	if (isset($_GET['id'])) {$id = $_GET['id'];} else {$id = "";}
19 | 	if (isset($_GET['ipRange'])) {
20 | 		if(preg_match("/^(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$/", ($_GET['ipRange']))) {
21 | 			$ipRange = $_GET['ipRange']."/32";
22 | 		} else if (preg_match("/^(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)(\/(2[2-9]|3[0-2]))$/", ($_GET['ipRange']))) {
23 | 			$ipRange = $_GET['ipRange'];
24 | 		} else {
25 | 			$ipRange = "";
26 | 		}
27 | 	} else {
28 | 		$ipRange = "";
29 | 	}
30 | 
31 | 	$ips = ipRangeFinder($ipRange);
32 | 	$iplo = $ips[0];
33 | 	$iphi = $ips[1];
34 | 
35 | 	$range = explode("/", $ipRange);
36 | 	$rcidr = $range[1]; 
37 | 	$ip_count = 1 << (32 - $rcidr);
38 | 
39 | 	echo "<H2>Release IP Range</H2>";
40 | 	echo $ipRange." : IP Range<br><br>";
41 | 	echo $iplo." : Network Address<br>";
42 | 	echo $iphi." : Broadcast Address<br>";
43 | 	echo $ip_count." : Number of IPs in range<br><br>";
44 | 	echo "Begin Update:<br><br>";
45 | 
46 | 
47 | 	if (empty($ipRange)){
48 | 		echo "Error: IP range empty. Please see administrator.<br><br>";
49 | 	} else {
50 | 
51 | 		$start = ip2long($iplo);
52 | 		for ($i = 0; $i < $ip_count; $i++) {
53 | 
54 | 			$ip = long2ip($start + $i);
55 | 			
56 | 			$sql = $pdo->prepare("
57 | 				SELECT 
58 | 					id, 
59 | 					ipaddress, 
60 | 					flag 
61 | 				FROM hm_fwban 
62 | 				WHERE INET_ATON(ipaddress) = INET_ATON('".$ip."')
63 | 			");
64 | 			$sql->execute();
65 | 			while($row = $sql->fetch(PDO::FETCH_ASSOC)){
66 | 				$ipaddressdb = $row['ipaddress'];
67 | 				$flag = $row['flag'];
68 | 				$id = $row['id'];
69 | 			}
70 | 			if (!empty($ipaddressdb)){
71 | 				if (!(($flag==1)||($flag==2)||($flag==5)||($flag==6))){
72 | 					$sql_update_manban = $pdo->exec("
73 | 						UPDATE hm_fwban SET flag=2 WHERE id=".$id
74 | 					);
75 | 					echo "IP ".$ip." marked for release - added to list for firewall rule removal<br>";
76 | 				} else if ($flag==5||$flag=6){
77 | 					echo "IP ".$ip." marked SAFE - no action neccessary<br>";
78 | 				} else {
79 | 					echo "IP ".$ip." previously released - no action neccessary<br>";
80 | 				}					
81 | 			}
82 | 			$ipaddressdb = "";
83 | 			$flag = "";
84 | 			$id = "";
85 | 		}
86 | 	}
87 | ?>
88 | </div>
89 | 
90 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/hmsRetroAddPTR.ps1:
--------------------------------------------------------------------------------
 1 | <#
 2 | _  _ _  _  _  _ _    ____ ____ ____ _  _ ____ ____     
 3 | |__| |\/| /_\ | |    [__  |___ |__/ |  | |___ |__/     
 4 | |  | |  |/   \| |___ ___] |___ |  \  \/  |___ |  \     
 5 | ____ _ ____ ____ _ _ _  _  _    _       ___   _  _  _ 
 6 | |___ | |__/ |___ | | | /_\ |    |       |__] /_\ |\ | 
 7 | |    | |  \ |___ |_|_|/   \|___ |___    |__]/   \| \| 
 8 | 
 9 | .SYNOPSIS
10 | 	Retroactively insert PTR records into database.
11 | 
12 | .DESCRIPTION
13 | 	Adds column "ptr" to database, then checks PTR for each IP in the database and inserts record.
14 | 
15 | .FUNCTIONALITY
16 | 	1) Fill in user variables
17 | 	2) Run script
18 | 
19 | .NOTES
20 | 	Takes a while to run if you have lots of bans in the database. Includes email report.
21 | 	
22 | .EXAMPLE
23 | 
24 | #>
25 | 
26 | # Include required files
27 | Try {
28 | 	.("$PSScriptRoot\Config.ps1")
29 | 	.("$PSScriptRoot\CommonCode.ps1")
30 | }
31 | Catch {
32 | 	Write-Output "$((get-date).ToString(`"yy/MM/dd HH:mm:ss.ff`")) : ERROR : Unable to load supporting PowerShell Scripts : $query `n$Error[0]" | out-file "$PSScriptRoot\PSError.log" -append
33 | }
34 | 
35 | #	Set start time
36 | $StartTime = (Get-Date -f G)
37 | 
38 | # 	Add "ptr" column to hm_fwban
39 | $Query = "ALTER TABLE hm_fwban ADD ptr VARCHAR(192) NULL;"
40 | RunSQLQuery($Query)
41 | 
42 | $Query = "SELECT COUNT(ID) AS countnull FROM hm_fwban WHERE ptr IS NULL"
43 | RunSQLQuery($Query) | ForEach {
44 | 	$CountBeg = $_.countnull
45 | }
46 | 
47 | $Query = "SELECT ID, ipaddress FROM hm_fwban WHERE ptr IS NULL"
48 | RunSQLQuery($Query) | ForEach {
49 | 	$IP = $_.ipaddress
50 | 	$ID = $_.ID
51 | 
52 | 	Try {
53 | 		$ErrorActionPreference = 'Stop'
54 | 		$PTR = [System.Net.Dns]::GetHostEntry($IP).HostName
55 | 	}
56 | 	Catch {
57 | 		$PTR = 'No.PTR.Record'
58 | 	}
59 | 
60 | 	$Query = "UPDATE hm_fwban SET ptr = '$PTR' WHERE ID = '$ID'"
61 | 	RunSQLQuery($Query)
62 | }
63 | 
64 | $Query = "SELECT COUNT(ID) AS countnull FROM hm_fwban WHERE ptr IS NULL"
65 | RunSQLQuery($Query) | ForEach {
66 | 	$CountEnd = $_.countnull
67 | }
68 | 
69 | If (($CountBeg - $CountEnd) -gt 0){
70 | 	$CountRes = "$(($CountBeg - $CountEnd).ToString('#,##0')) PTR records failed insert into database. Check error log."
71 | } Else {
72 | 	$CountRes = "All $(($CountBeg).ToString('#,##0')) PTR records inserted successfully."
73 | }
74 | 
75 | $EndTime = (Get-Date -f G)
76 | $OperationTime = New-Timespan $StartTime $EndTime
77 | If (($Duration).Hours -eq 1) {$sh = ""} Else {$sh = "s"}
78 | If (($Duration).Minutes -eq 1) {$sm = ""} Else {$sm = "s"}
79 | If (($Duration).Seconds -eq 1) {$ss = ""} Else {$ss = "s"}
80 | 
81 | $EmailBody = ("Retroactive PTR update complete.`n`nResults: $CountRes `n`nUpdate completed in {0:%h} hour$sh {0:%m} minute$sm {0:%s} second$ss" -f $OperationTime)
82 | EmailResults


--------------------------------------------------------------------------------
/www/duplicates.php:
--------------------------------------------------------------------------------
 1 | <?php include("head.php") ?>
 2 | <div class="section">
 3 | <?php
 4 | 	include("config.php");
 5 | 	include("functions.php");
 6 | 
 7 | 	if (isset($_GET['page'])) {
 8 | 		$page = $_GET['page'];
 9 | 	} else {
10 | 		$page = 1;
11 | 	}
12 | 	$no_of_records_per_page = 20;
13 | 	$offset = ($page-1) * $no_of_records_per_page;
14 | 
15 | 	$total_pages_sql = $pdo->prepare("
16 | 		SELECT 
17 | 			count(*) AS duplicate_count 
18 | 		FROM ( 
19 | 			SELECT 
20 | 				ipaddress 
21 | 			FROM hm_fwban 
22 | 			GROUP BY ipaddress 
23 | 			HAVING COUNT(ipaddress) > 1 
24 | 		) AS t
25 | 	");
26 | 	$total_pages_sql->execute();
27 | 	$total_rows = $total_pages_sql->fetchColumn();
28 | 	$total_pages = ceil($total_rows / $no_of_records_per_page);
29 | 
30 | 	$sql = $pdo->prepare("
31 | 		SELECT 
32 | 			ipaddress, 
33 | 			COUNT(ipaddress) AS dupip, 
34 | 			".DBFormatDate('timestamp', '%Y/%m/%d %T')." AS dupdate,
35 | 			country, 
36 | 			helo 
37 | 		FROM hm_fwban 
38 | 		GROUP BY ipaddress, ".DBFormatDate('timestamp', '%Y/%m/%d %T').", country, helo
39 | 		HAVING COUNT(ipaddress) > 1 
40 | 		".DBLimitRowsWithOffset('dupdate','DESC','dupip','DESC',$offset,$no_of_records_per_page)
41 | 	);
42 | 	$sql->execute();
43 | 
44 | 	if ($total_rows == 0){
45 | 		echo "<br>No duplicate entries found.";
46 | 	} else {
47 | 		echo "<br>".number_format($total_rows)." Duplicate IP Reports (Page: ".number_format($page)." of ".number_format($total_pages) . ")<br>";
48 | 		echo "<table class='section'>
49 | 			<tr>
50 | 				<th>Last Seen</th>
51 | 				<th>IP Address</th>
52 | 				<th>Country</th>
53 | 				<th>HELO</th>
54 | 				<th>Duplicates</th>
55 | 			</tr>";
56 | 		while($row = $sql->fetch(PDO::FETCH_ASSOC)){
57 | 			echo "<tr>";
58 | 			echo "<td>" . $row['dupdate'] . "</td>";
59 | 			echo "<td><a href=\"search.php?submit=Search&search=".$row['ipaddress']."\">".$row['ipaddress']."</a></td>";
60 | 			echo "<td><a href=\"https://ipinfo.io/".$row['ipaddress']."\"  target=\"_blank\">".$row['country']."</a></td>";
61 | 			echo "<td>".$row['helo']."</td>";
62 | 			echo "<td style=\"text-align:center;\">" . $row['dupip'] . "</td>";
63 | 			echo "</tr>";
64 | 		}
65 | 		echo "</table>";
66 | 		if ($total_pages < 2){
67 | 			echo "";
68 | 		} else {
69 | 			echo "<ul>";
70 | 				if($page <= 1){echo "<li>First </li>";} else {echo "<li><a href=\"?submit=Search&page=1\">First </a><li>";}
71 | 				if($page <= 1){echo "<li>Prev </li>";} else {echo "<li><a href=\"?submit=Search&page=".($page - 1)."\">Prev </a></li>";}
72 | 				if($page >= $total_pages){echo "<li>Next </li>";} else {echo "<li><a href=\"?submit=Search&page=".($page + 1)."\">Next </a></li>";}
73 | 				if($page >= $total_pages){echo "<li>Last</li>";} else {echo "<li><a href=\"?submit=Search&page=".$total_pages."\">Last</a></li>";}
74 | 			echo "</ul>";
75 | 			echo "<br><br>";
76 | 		}
77 | 	}
78 | ?>
79 | </div>
80 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/www/safe-mark.php:
--------------------------------------------------------------------------------
 1 | <?php include("head.php") ?>
 2 | 
 3 | <div class="section">
 4 | 
 5 | <?php
 6 | 	include_once("config.php");
 7 | 	include_once("functions.php");
 8 | 
 9 | 	if (isset($_GET['page'])) {
10 | 		$page = $_GET['page'];
11 | 		$display_pagination = 1;
12 | 	} else {
13 | 		$page = 1;
14 | 		$total_pages = 1;
15 | 		$display_pagination = 0;
16 | 	}
17 | 	if (isset($_GET['submit'])) {$button = $_GET ['submit'];} else {$button = "";}
18 | 	if (isset($_GET['id'])) {$id = $_GET['id'];} else {$id = "";}
19 | 	if (isset($_GET['ipRange'])) {
20 | 		if(preg_match("/^(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$/", ($_GET['ipRange']))) {
21 | 			$ipRange = $_GET['ipRange']."/32";
22 | 		} else if (preg_match("/^(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)(\/(2[2-9]|3[0-2]))$/", ($_GET['ipRange']))) {
23 | 			$ipRange = $_GET['ipRange'];
24 | 		} else {
25 | 			$ipRange = "";
26 | 		}
27 | 	} else {
28 | 		$ipRange = "";
29 | 	}
30 | 
31 | 	$ips = ipRangeFinder($ipRange);
32 | 	$iplo = $ips[0];
33 | 	$iphi = $ips[1];
34 | 
35 | 	$range = explode("/", $ipRange);
36 | 	$rcidr = $range[1]; 
37 | 	$ip_count = 1 << (32 - $rcidr);
38 | 
39 | 	echo "<H2>Release IP Range</H2>";
40 | 	echo $ipRange." : IP Range<br><br>";
41 | 	echo $iplo." : Network Address<br>";
42 | 	echo $iphi." : Broadcast Address<br>";
43 | 	echo $ip_count." : Number of IPs in range<br><br>";
44 | 	echo "Begin Update:<br><br>";
45 | 
46 | 
47 | 	if (empty($ipRange)){
48 | 		echo "Error: IP range empty. Please see administrator.<br><br>";
49 | 	} else {
50 | 
51 | 		$start = ip2long($iplo);
52 | 		for ($i = 0; $i < $ip_count; $i++) {
53 | 
54 | 			$ip = long2ip($start + $i);
55 | 			
56 | 			$sql = $pdo->prepare("
57 | 				SELECT 
58 | 					id, 
59 | 					ipaddress, 
60 | 					flag 
61 | 				FROM hm_fwban 
62 | 				WHERE ".DBIpStringToIntField('ipaddress')." = ".DBIpStringToIntValue($ip)."
63 | 			");
64 | 			$sql->execute();
65 | 			while($row = $sql->fetch(PDO::FETCH_ASSOC)){
66 | 				$ipaddressdb = $row['ipaddress'];
67 | 				$flag = $row['flag'];
68 | 				$id = $row['id'];
69 | 			}
70 | 			if (!empty($ipaddressdb)){
71 | 				if (!(($flag==1)||($flag==2)||($flag==5)||($flag==6))){
72 | 					$sql_update_bansafe = $pdo->exec("
73 | 						UPDATE hm_fwban SET flag=5 WHERE id=".$id
74 | 					);
75 | 					echo "IP ".$ip." marked banned - updated to SAFE and added to list for firewall rule removal<br>";
76 | 				} else if ($flag==5||$flag=6){
77 | 					echo "IP ".$ip." marked SAFE - no action neccessary<br>";
78 | 				} else {
79 | 					$sql_update_relsafe = $pdo->exec("
80 | 						UPDATE hm_fwban SET flag=5 WHERE id=".$id
81 | 					);
82 | 					echo "IP ".$ip." previously released - updated to SAFE status<br>";
83 | 				}					
84 | 			}
85 | 			$ipaddressdb = "";
86 | 			$flag = "";
87 | 			$id = "";
88 | 		}
89 | 	}
90 | ?>
91 | </div>
92 | 
93 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/www/stylesheet.css:
--------------------------------------------------------------------------------
  1 | body {
  2 | 	background: #fefefe;
  3 | 	font-family: "Roboto";
  4 | 	font-size: 12pt;
  5 | 	}
  6 | 
  7 | a:link, a:active, a:visited {
  8 | 	color: #FF0000;
  9 | 	text-transform: underline;
 10 | 	}
 11 | 
 12 | a:hover {
 13 | 	color: #FF0000;
 14 | 	text-transform: none;
 15 | 	}
 16 | 
 17 | .header {
 18 |     position: fixed;
 19 |     top: 0;
 20 |     left: 0;
 21 |     width: 100%;
 22 |     color: #000;
 23 | 	background: #fefefe;
 24 |     z-index: 1;
 25 |     overflow: hidden;
 26 |     text-align:center;
 27 | 	}
 28 | 
 29 | .header h1 {
 30 | 	font-size:25px;
 31 |     font-weight:normal;
 32 | 	margin:0 auto;
 33 | 	}
 34 | 
 35 | .header h2 {
 36 | 	font-size:15px;
 37 |     font-weight:normal;
 38 | 	margin:0 auto;
 39 | 	}
 40 | 
 41 | .wrapper {
 42 | 	max-width: 920px;
 43 | 	position: relative;
 44 | 	margin: 30px auto 30px auto;
 45 | 	padding-top: 20px;
 46 | 	}
 47 | 
 48 | .clear {
 49 | 	clear: both;
 50 | 	}
 51 | 
 52 | .banner {
 53 | 	width: 100%;
 54 | 	}
 55 | 
 56 | .headlinks {
 57 | 	max-width: 720px;
 58 | 	position:relative;
 59 | 	margin: 0px auto;
 60 | 	}
 61 | 
 62 | .headlinkwidth {
 63 | 	width: 100%;
 64 | 	min-width: 300px;
 65 | 	position:relative;
 66 | 	margin: 0 auto;
 67 | 	}
 68 | 
 69 | .headlinks a:link, a:active, a:visited {
 70 | 	color: #FF0000;
 71 | 	text-transform: underline;
 72 | 	}
 73 | 
 74 | .headlinks a:hover {
 75 | 	color: #FF0000;
 76 | 	text-transform: none;
 77 | 	}
 78 | 
 79 | .section {
 80 | 	padding: 5px 0 15px 0;
 81 | 	margin: 0;
 82 | 	}
 83 | 
 84 | .section h2 {
 85 | 	font-size:16px;
 86 |     font-weight:bold;
 87 | 	text-align:left;
 88 | 	}
 89 | 
 90 | .section h3 {
 91 | 	font-size:16px;
 92 |     font-weight:bold;
 93 | 	}
 94 | 
 95 | .secleft {
 96 | 	float: left;
 97 | 	width: 49%;
 98 | 	padding-right: 3px;
 99 | 	}
100 | 
101 | .secright {
102 | 	float: right;
103 | 	width: 49%;
104 | 	padding-left: 3px;
105 | 	}
106 | 
107 | .secmap {
108 | 	float: none;
109 | 	width: 920px;
110 | 	height: 600px;
111 | 	padding: 0 0 10px 0;
112 | 	text-align: center;
113 | }
114 | 
115 | table.section {
116 | 	border-collapse: collapse;
117 | 	border: 1px solid black;
118 | 	width: 100%;
119 | 	font-size: 10pt;
120 | 	}
121 | 	
122 | table.section tr:nth-child(even) {
123 |     background-color: #F8F8F8;
124 | 	}
125 | 
126 | table.section th, table.section td {
127 | 	border: 1px solid black;
128 | 	}
129 | 
130 | .footer {
131 | 	width: 100%;
132 | 	text-align: center;
133 | 	}
134 | 	
135 | ul {
136 | 	list-style-type: none;
137 | 	padding: 0;
138 | 	}
139 | 
140 | li {
141 | 	padding: 0;
142 | 	display: inline;
143 | 	}
144 | 	
145 | @media only screen and (max-width: 629px) {
146 | 	.secleft {
147 | 		float: none;
148 | 		width: 100%;
149 | 		padding: 0 0 10px 0;
150 | 		text-align: left;
151 | 	}
152 | 	.secright {
153 | 		float: none ;
154 | 		width: 100% ;
155 | 	}
156 | 	.secmap {
157 | 		float: none;
158 | 		width: 95%;
159 | 		height: 220px;
160 | 		padding: 0 0 10px 0;
161 | 		text-align: center;
162 | 	}
163 | }	
164 | 


--------------------------------------------------------------------------------
/www/reban-ip.php:
--------------------------------------------------------------------------------
 1 | <?php include("head.php") ?>
 2 | 
 3 | <div class="section">
 4 | 
 5 | <?php
 6 | 	include_once("config.php");
 7 | 	include_once("functions.php");
 8 | 
 9 | 	if (isset($_GET['page'])) {
10 | 		$page = $_GET['page'];
11 | 		$display_pagination = 1;
12 | 	} else {
13 | 		$page = 1;
14 | 		$total_pages = 1;
15 | 		$display_pagination = 0;
16 | 	}
17 | 	if (isset($_GET['submit'])) {$button = $_GET ['submit'];} else {$button = "";}
18 | 	if (isset($_GET['id'])) {$id = $_GET['id'];} else {$id = "";}
19 | 	if (isset($_GET['ipRange'])) {
20 | 		if(preg_match("/^(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$/", ($_GET['ipRange']))) {
21 | 			$ipRange = $_GET['ipRange']."/32";
22 | 		} else if (preg_match("/^(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)(\/(2[2-9]|3[0-2]))$/", ($_GET['ipRange']))) {
23 | 			$ipRange = $_GET['ipRange'];
24 | 		} else {
25 | 			$ipRange = "";
26 | 		}
27 | 	} else {
28 | 		$ipRange = "";
29 | 	}
30 | 
31 | 	$ips = ipRangeFinder($ipRange);
32 | 	$iplo = $ips[0];
33 | 	$iphi = $ips[1];
34 | 	$country = ip_country($iplo);
35 | 
36 | 	$range = explode("/", $ipRange);
37 | 	$rcidr = $range[1]; 
38 | 	$ip_count = 1 << (32 - $rcidr);
39 | 
40 | 	echo "<H2>Ban IP Range</H2>";
41 | 	echo $ipRange." : IP Range<br><br>";
42 | 	echo $iplo." : Network Address<br>";
43 | 	echo $iphi." : Broadcast Address<br>";
44 | 	echo $ip_count." : Number of IPs in range<br><br>";
45 | 	echo "Begin Update:<br><br>";
46 | 
47 | 
48 | 	if (empty($ipRange)){
49 | 		echo "Error: IP range empty. Please see administrator.<br><br>";
50 | 	} else {
51 | 
52 | 		$start = ip2long($iplo);
53 | 		for ($i = 0; $i < $ip_count; $i++) {
54 | 
55 | 			$ip = long2ip($start + $i);
56 | 			
57 | 			$sql_existing = $pdo->prepare("
58 | 				SELECT 
59 | 					id, 
60 | 					ipaddress, 
61 | 					flag 
62 | 				FROM hm_fwban 
63 | 				WHERE ".DBIpStringToIntField('ipaddress')." = ".DBIpStringToIntValue($ip)."
64 | 			");
65 | 			$sql_existing->execute();
66 | 			while($row = $sql_existing->fetch(PDO::FETCH_ASSOC)){
67 | 
68 | 				$ipaddressdb = $row['ipaddress'];
69 | 				$flag = $row['flag'];
70 | 				$id = $row['id'];
71 | 			}
72 | 			if (empty($ipaddressdb)){
73 | 				$sql_new_cidr_ban = $pdo->exec("
74 | 					INSERT INTO hm_fwban (timestamp,ipaddress,ban_reason,country) VALUES (".DBGetCurrentDateTime().",'".$ip."','Manual','".$country."')"
75 | 				);
76 | 				echo "IP ".$ip." added to ban list for firewall rule insertion<br>";
77 | 			} else {
78 | 				if (($flag==1)||($flag==2)){
79 | 					$sql_update_manban = $pdo->exec("
80 | 						UPDATE hm_fwban SET flag=3 WHERE id=".$id
81 | 					);
82 | 					echo "IP ".$ip." previously released - updating and added to list for firewall rule insertion<br>";
83 | 				} else if (($flag==5)||($flag==6)){
84 | 					echo "IP ".$ip." marked SAFE - no action taken<br>";
85 | 				} else {
86 | 					echo "IP ".$ip." already banned - no action necessary<br>";
87 | 				}
88 | 			}
89 | 			$ipaddressdb = "";
90 | 			$flag = "";
91 | 			$id = "";
92 | 			$country = "";
93 | 		}
94 | 	}
95 | ?>
96 | </div>
97 | 
98 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/www/blocks.php:
--------------------------------------------------------------------------------
 1 | <?php include("head.php") ?>
 2 | 
 3 | <div class="wrapper">
 4 | <div class="section">
 5 | 	<h2>Block List Analyzer</h2>
 6 | 	Counts the number of Banned IPs that returned and were subsequently blocked by the firewall for a given number of distinct days. <br><br>
 7 | 	Choose the number of days to run out below. Execution time is high, so start with no more than 10 days before attempting to proceed beyond that. If you run into "exceeded max execution time" errors then run <a href="./blocks-ps.php">BlockCount.ps1</a> instead.<br><br>
 8 | 	How many days to input? 
 9 | 	<form autocomplete="off" action="blocks.php" method="GET">
10 | 		<select name='days' onchange='this.form.submit()'>
11 | 			<option selected value='0'>Days</option>
12 | 			<option value='5'>5</option>
13 | 			<option value='10'>10</option>
14 | 			<option value='15'>15</option>
15 | 			<option value='20'>20</option>
16 | 			<option value='25'>25</option>
17 | 			<option value='30'>30</option>
18 | 			<option value='35'>35</option>
19 | 			<option value='40'>40</option>
20 | 			<option value='45'>45</option>
21 | 			<option value='50'>50</option>
22 | 		</select>
23 | 		<noscript><input type="submit" value="Submit"></noscript>
24 | 	</form>
25 | 
26 | <?php
27 | 	include("config.php");
28 | 	include("functions.php");
29 | 
30 | 	if (isset($_GET['submit'])) {$button = $_GET ['submit'];} else {$button = "";}
31 | 	if (isset($_GET['days'])) {$days = $_GET['days'];} else {$days = 0;}
32 | 
33 | 	$tsql = $pdo->prepare("
34 | 		SELECT 
35 | 			COUNT(DISTINCT(ipaddress)) 
36 | 		FROM hm_fwban
37 | 	");
38 | 	$tsql->execute();
39 | 	$TotalIPs = $tsql->fetchColumn();
40 | 
41 | 	$nsql = $pdo->prepare("
42 | 		SELECT 
43 | 			COUNT(DISTINCT(ipaddress)) 
44 | 		FROM hm_fwban_rh
45 | 	");
46 | 	$nsql->execute();
47 | 	$AllReturnIPs = $nsql->fetchColumn();
48 | 
49 | 	$NeverIPs = ($TotalIPs - $AllReturnIPs);
50 | 	$PercentNever = sprintf("%.2f%%", ($NeverIPs / $TotalIPs) * 100);
51 | 
52 | 	echo "<br><br>";
53 | 	echo "Total Number of Firewall Bans: ".number_format($TotalIPs)."<br><br>";
54 | 	echo "Number of Firewall Bans that have never returned: ".number_format($NeverIPs)." (".$PercentNever.")<br><br>";
55 | 
56 | 	echo "<table class='section'>
57 | 		<tr>
58 | 			<th>Number of IPs</th>
59 | 			<th>Percent Returns</th>
60 | 			<th>Returned At Least</th>
61 | 		</tr>";
62 | 
63 | 	$a = 0;
64 | 
65 | 	If ($days == 0){
66 | 		echo "";
67 | 	} Else {
68 | 		do{
69 | 			$sql = $pdo->prepare("
70 | 				SELECT COUNT(*) AS countips 
71 | 				FROM (
72 | 					SELECT 
73 | 						ipaddress, 
74 | 						COUNT(DISTINCT(".DBCastDateTimeFieldAsDate('timestamp').")) AS countdate 
75 | 					FROM hm_fwban_rh 
76 | 					GROUP BY ipaddress 
77 | 					HAVING COUNT(DISTINCT(".DBCastDateTimeFieldAsDate('timestamp').")) > ".$a."
78 | 				) AS returnhits
79 | 			");
80 | 			$sql->execute();
81 | 			$ReturnIPs = $sql->fetchColumn();
82 | 			$PercentReturns = sprintf("%.2f%%", ($ReturnIPs / $TotalIPs) * 100);
83 | 			echo "<tr>";
84 | 			echo "<td style=\"text-align:right;\"><a href=\"./blocks-view.php?submit=Search&days=".($a + 1)."\">".number_format($ReturnIPs)."</a></td>";
85 | 			echo "<td style=\"text-align:right;\">".$PercentReturns."</td>";
86 | 			If ($a == 0){$sd = "";} Else {$sd = "s";}
87 | 			echo "<td style=\"text-align:center;\">".($a + 1)." day".$sd."</td>";
88 | 			echo "</tr>";
89 | 
90 | 			$a++;
91 | 
92 | 		} while($a < $days); 
93 | 	}
94 | 
95 | 	echo "</table>";
96 | 
97 | ?>
98 | 	<br>
99 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/hmsRetroConsolidateRules.ps1:
--------------------------------------------------------------------------------
  1 | <#
  2 | _  _ _  _  _  _ _    ____ ____ ____ _  _ ____ ____     
  3 | |__| |\/| /_\ | |    [__  |___ |__/ |  | |___ |__/     
  4 | |  | |  |/   \| |___ ___] |___ |  \  \/  |___ |  \     
  5 | ____ _ ____ ____ _ _ _  _  _    _       ___   _  _  _ 
  6 | |___ | |__/ |___ | | | /_\ |    |       |__] /_\ |\ | 
  7 | |    | |  \ |___ |_|_|/   \|___ |___    |__]/   \| \| 
  8 | 
  9 | .SYNOPSIS
 10 | 	Powershell script to retroactively consolidate firewall rules
 11 | 
 12 | .DESCRIPTION
 13 | 	Consolidates rules from one firewall rule per IP to one firewall rule per day containing all IPs for the queried day
 14 | 
 15 | .FUNCTIONALITY
 16 | 	* Queries database for each day's bans (active firewall rules)
 17 | 	* Creates new firewall rule for each day containing all banned IPs for that day 
 18 | 	* Deletes all one-IP-per firewall rules
 19 | 
 20 | .NOTES
 21 | 	* FOR RETROACTIVE USE ONLY - RUN ONLY ONCE
 22 | 	* TO BE USED ONLY ON ACTIVE FIREWALL BAN INSTALLATIONS 
 23 | 	* Do not run on fresh installations
 24 | 	* Automatically selects first day through yesterday
 25 | 	
 26 | .EXAMPLE
 27 | 
 28 | #>
 29 | 
 30 | # Include required files
 31 | Try {
 32 | 	.("$PSScriptRoot\Config.ps1")
 33 | 	.("$PSScriptRoot\CommonCode.ps1")
 34 | }
 35 | Catch {
 36 | 	Write-Output "$((get-date).ToString(`"yy/MM/dd HH:mm:ss.ff`")) : ERROR : Unable to load supporting PowerShell Scripts : $query `n$Error[0]" | out-file "$PSScriptRoot\PSError.log" -append
 37 | }
 38 | 
 39 | #	Set start time
 40 | $StartTime = (Get-Date -f G)
 41 | 
 42 | $ConsFolder = "$PSScriptRoot\ConsolidateRules"
 43 | 
 44 | #	Create ConsolidateRules folder if it doesn't exist
 45 | If (-not(Test-Path $ConsFolder)) {
 46 | 	md $ConsFolder
 47 | }
 48 | 
 49 | #	Delete all files in the Consolidated Rules folder before beginning
 50 | Get-ChildItem -Path $ConsFolder -Include * | foreach { $_.Delete()}
 51 | 
 52 | #	Find earliest ban date 
 53 | $Query = "SELECT MIN(timestamp) AS mindate FROM hm_fwban WHERE flag IS NULL"
 54 | RunSQLQuery $Query | ForEach {
 55 | 	$MinDate = (Get-Date -date $_.mindate)
 56 | }
 57 | 
 58 | $A = 0
 59 | 
 60 | Do {
 61 | 	$BanDate = $MinDate.AddDays($A).ToString("yyyy-MM-dd")
 62 | 	$ConsRules = "$ConsFolder\hMS FWBan $BanDate.csv"
 63 | 
 64 | 	$Query = "
 65 | 		SELECT 
 66 | 			id, 
 67 | 			ipaddress 
 68 | 		FROM hm_fwban 
 69 | 		WHERE $(DBCastDateTimeFieldAsDate('timestamp')) LIKE '$BanDate%' AND flag IS NULL
 70 | 		"
 71 | 	RunSQLQuery $Query | Export-CSV $ConsRules
 72 | 
 73 | 	Import-CSV $ConsRules | ForEach {
 74 | 		Write-Output $_.ipaddress
 75 | 	} | Out-File "$ConsRules.txt"
 76 | 	
 77 | 	$NL = [System.Environment]::NewLine
 78 | 	$Content=[String] $Template= [System.IO.File]::ReadAllText("$ConsRules.txt")
 79 | 	$Content.Replace($NL,",") | Out-File "$ConsRules.rule.txt"
 80 | 	(Get-Content -Path "$ConsRules.rule.txt") -Replace ',$','' | Set-Content -Path "$ConsRules.rule.txt"
 81 | 
 82 | 	& netsh advfirewall firewall add rule name="hMS FWBan $BanDate" description="FWB Rules for $BanDate" dir=in interface=any action=block remoteip=$(Get-Content "$ConsRules.rule.txt")
 83 | 
 84 | 	Import-CSV $ConsRules | ForEach {
 85 | 		$IP = $_.ipaddress
 86 | 		& netsh advfirewall firewall delete rule name=`"$IP`"
 87 | 	}
 88 | 
 89 | 	$A++
 90 | 
 91 | } Until ($BanDate -match $((Get-Date).AddDays(-1).ToString("yyyy-MM-dd")))
 92 | 
 93 | $Query = "SELECT COUNT(ID) AS countnull FROM hm_fwban WHERE ptr IS NULL"
 94 | RunSQLQuery($Query) | ForEach {
 95 | 	$CountEnd = $_.countnull
 96 | }
 97 | 
 98 | $EndTime = (Get-Date -f G)
 99 | $OperationTime = New-Timespan $StartTime $EndTime
100 | If (($Duration).Hours -eq 1) {$sh = ""} Else {$sh = "s"}
101 | If (($Duration).Minutes -eq 1) {$sm = ""} Else {$sm = "s"}
102 | If (($Duration).Seconds -eq 1) {$ss = ""} Else {$ss = "s"}
103 | 
104 | $EmailBody = ("Retroactive Rule Consolidation complete.`n`nUpdate completed in {0:%h} hour$sh {0:%m} minute$sm {0:%s} second$ss" -f $OperationTime)
105 | EmailResults


--------------------------------------------------------------------------------
/www/repeats-ip-day.php:
--------------------------------------------------------------------------------
  1 | <?php include("head.php") ?>
  2 | 
  3 | <div class="section">
  4 | 
  5 | <?php
  6 | 	include_once("config.php");
  7 | 	include_once("functions.php");
  8 | 
  9 | 	if (isset($_GET['page'])) {
 10 | 		$page = $_GET['page'];
 11 | 		$display_pagination = 1;
 12 | 	} else {
 13 | 		$page = 1;
 14 | 		$total_pages = 1;
 15 | 		$display_pagination = 0;
 16 | 	}
 17 | 	if (isset($_GET['submit'])) {$button = $_GET ['submit'];} else {$button = "";}
 18 | 	if (isset($_GET['repeatIP'])) {$repeatIP = $_GET['repeatIP'];} else {$repeatIP = "";}
 19 |   	if (isset($_GET['date'])) {$date = $_GET['date'];} else {$date = "";}
 20 | 
 21 | 	$no_of_records_per_page = 20;
 22 | 	$offset = ($page-1) * $no_of_records_per_page;
 23 | 
 24 | 	$total_pages_sql = $pdo->prepare("
 25 | 		SELECT 
 26 | 			COUNT(ipaddress)
 27 | 		FROM (
 28 | 			SELECT * 
 29 | 			FROM hm_fwban_rh 
 30 | 			WHERE '".$date." 00:00:00' <= timestamp
 31 | 		) AS A 
 32 | 		WHERE timestamp <= '".$date." 23:59:59' AND ipaddress = '{$repeatIP}'
 33 | 	");
 34 | 	$total_pages_sql->execute();
 35 | 	$total_rows = $total_pages_sql->fetchColumn();
 36 | 	$total_pages = ceil($total_rows / $no_of_records_per_page);
 37 | 
 38 | 	$sql = $pdo->prepare("
 39 | 		SELECT
 40 | 			a.TimeStamp,
 41 | 			a.ipaddress,
 42 | 			b.ban_reason,
 43 | 			b.country
 44 | 		FROM
 45 | 		(
 46 | 			SELECT 
 47 | 				ipaddress, 
 48 | 				".DBFormatDate('timestamp', '%y/%m/%d %T')." as TimeStamp
 49 | 			FROM (
 50 | 				SELECT * 
 51 | 				FROM hm_fwban_rh 
 52 | 				WHERE '".$date." 00:00:00' <= timestamp
 53 | 			) AS X 
 54 | 			WHERE timestamp <= '".$date." 23:59:59' AND ipaddress = '{$repeatIP}'
 55 | 		) AS a
 56 | 		JOIN
 57 | 		(
 58 | 			SELECT 
 59 | 				ipaddress, 
 60 | 				country, 
 61 | 				ban_reason
 62 | 			FROM hm_fwban
 63 | 		) AS b
 64 | 		ON a.ipaddress = b.ipaddress
 65 | 		".DBLimitRowsWithOffset('a.TimeStamp','DESC',0,0,$offset,$no_of_records_per_page)
 66 | 	);
 67 | 	$sql->execute();
 68 | 
 69 | 	if ($total_rows == 1){$singular = '';} else {$singular= 's';}
 70 | 		
 71 | 	if ($total_rows == 0){
 72 | 		echo "<br><br>There are no repeat dropped IPs to report.";
 73 | 	} else {
 74 | 		echo "IP <b>".$repeatIP."</b> denied access ".number_format($total_rows)." time".$singular." on <b>".$date."</b>. (Page: ".number_format($page)." of ".number_format($total_pages).")<br>";
 75 | 		echo "<table class='section'>
 76 | 			<tr>
 77 | 				<th>Date</th>
 78 | 				<th>IP Address</th>
 79 | 				<th>Reason</th>
 80 | 				<th>Country</th>
 81 | 			</tr>";
 82 | 
 83 | 		while($row = $sql->fetch(PDO::FETCH_ASSOC)){
 84 | 			echo "<tr>";
 85 | 			echo "<td>".$row['TimeStamp']."</td>";
 86 | 			echo "<td><a href=\"search.php?submit=Search&search=".$row['ipaddress']."\">".$row['ipaddress']."</a></td>";
 87 | 			echo "<td>".$row['ban_reason']."</td>";
 88 | 			echo "<td><a href=\"https://ipinfo.io/".$row['ipaddress']."\"  target=\"_blank\">".$row['country']."</a></td>";
 89 | 			echo "</tr>";
 90 | 		}
 91 | 		echo "</table>";
 92 | 
 93 | 		if ($total_pages < 2){
 94 | 			echo "<br><br>";
 95 | 		} else {
 96 | 			echo "<ul>";
 97 | 			if($page <= 1){echo "<li>First </li>";} else {echo "<li><a href=\"?submit=Search&date=".$date."&repeatIP=".$repeatIP."&page=1\">First </a><li>";}
 98 | 			if($page <= 1){echo "<li>Prev </li>";} else {echo "<li><a href=\"?submit=Search&date=".$date."&repeatIP=".$repeatIP."&page=".($page - 1)."\">Prev </a></li>";}
 99 | 			if($page >= $total_pages){echo "<li>Next </li>";} else {echo "<li><a href=\"?submit=Search&date=".$date."&repeatIP=".$repeatIP."&page=".($page + 1)."\">Next </a></li>";}
100 | 			if($page >= $total_pages){echo "<li>Last</li>";} else {echo "<li><a href=\"?submit=Search&date=".$date."&repeatIP=".$repeatIP."&page=".$total_pages."\">Last</a></li>";}
101 | 			echo "</ul>";
102 | 		}
103 | 		if ($total_pages > 0){
104 | 			echo	"FB = Firewall Blocks<br>
105 | 					RS = Released Status<br>";
106 | 		}
107 | 	}
108 | 
109 | 	echo "<br>";
110 | ?>
111 | </div>
112 | 
113 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/hmsRetroAddBlocksIPTable.ps1:
--------------------------------------------------------------------------------
  1 | <#
  2 | _  _ _  _  _  _ _    ____ ____ ____ _  _ ____ ____     
  3 | |__| |\/| /_\ | |    [__  |___ |__/ |  | |___ |__/     
  4 | |  | |  |/   \| |___ ___] |___ |  \  \/  |___ |  \     
  5 | ____ _ ____ ____ _ _ _  _  _    _       ___   _  _  _ 
  6 | |___ | |__/ |___ | | | /_\ |    |       |__] /_\ |\ | 
  7 | |    | |  \ |___ |_|_|/   \|___ |___    |__]/   \| \| 
  8 | 
  9 | .SYNOPSIS
 10 | 	Powershell script to retroactively create hm_fwban_blocks_ip table and fill it.
 11 | 
 12 | .DESCRIPTION
 13 | 	
 14 | .FUNCTIONALITY
 15 | 
 16 | .NOTES
 17 | 	Includes email notification when complete.
 18 | 
 19 | .EXAMPLE
 20 | 
 21 | #>
 22 | 
 23 | # Include required files
 24 | Try {
 25 | 	.("$PSScriptRoot\Config.ps1")
 26 | 	.("$PSScriptRoot\CommonCode.ps1")
 27 | }
 28 | Catch {
 29 | 	Write-Output "$((get-date).ToString(`"yy/MM/dd HH:mm:ss.ff`")) : ERROR : Unable to load supporting PowerShell Scripts : $query `n$Error[0]" | out-file "$PSScriptRoot\PSError.log" -append
 30 | }
 31 | 
 32 | #	Set start time
 33 | $StartTime = (Get-Date -f G)
 34 | if ($DatabaseType -eq "MYSQL"){
 35 | 	$Query = "
 36 | 		CREATE TABLE IF NOT EXISTS hm_fwban_blocks_ip (
 37 | 		  id INT(22) NOT NULL AUTO_INCREMENT,
 38 | 		  ipaddress varchar(15) NOT NULL UNIQUE,
 39 | 		  hits INT(8),
 40 | 		  lasttimestamp datetime NOT NULL,
 41 | 		  PRIMARY KEY (id)
 42 | 		  UNIQUE KEY ipaddress (ipaddress)
 43 | 		) ENGINE=InnoDB DEFAULT CHARSET=utf8;
 44 | 		COMMIT;
 45 | 	"
 46 | } elseif ($DatabaseType -eq "MSSQL") {
 47 | 	$Query = "
 48 | 		IF NOT EXISTS (SELECT 1 FROM SYSOBJECTS WHERE NAME='hm_fwban_blocks_ip')
 49 | 			CREATE TABLE  hm_fwban_blocks_ip (
 50 | 			  id INT IDENTITY PRIMARY KEY,
 51 | 			  ipaddress varchar(15) NOT NULL UNIQUE,
 52 | 			  hits INT,
 53 | 			  lasttimestamp DATETIME NOT NULL,
 54 | 			) 
 55 | 	"
 56 | }
 57 | 	RunSQLQuery $Query
 58 | if ($DatabaseType -eq "MYSQL"){
 59 | 	$Query = "ALTER TABLE hm_fwban_rh DROP id;"
 60 | } elseif ($DatabaseType -eq "MSSQL") {
 61 | 	$Query = "ALTER TABLE hm_fwban_rh DROP COLUMN id;"
 62 | }
 63 | RunSQLQuery $Query
 64 | 
 65 | if ($DatabaseType -eq "MYSQL"){
 66 | 	$Query = "ALTER TABLE hm_fwban_rh ADD ipid INT(22) NULL;"
 67 | } elseif ($DatabaseType -eq "MSSQL") {
 68 | 	$Query = "ALTER TABLE hm_fwban_rh ADD ipid INT NULL;"
 69 | }	
 70 | RunSQLQuery $Query
 71 | 
 72 | $Query = "
 73 | 	SELECT 
 74 | 		timestamp,
 75 | 		ipaddress 
 76 | 	FROM hm_fwban_rh
 77 | 	WHERE timestamp > '2020-02-14 06:22:00'
 78 | "
 79 | RunSQLQuery $Query | foreach {
 80 | 	$timestamp = (Get-Date $_.timestamp).ToString("yyyy-MM-dd HH:mm:ss")
 81 | 	$ipaddress = $_.ipaddress
 82 | 	if ($DatabaseType -eq "MYSQL"){
 83 | 		$Query = "INSERT INTO hm_fwban_blocks_ip (ipaddress, hits, lasttimestamp) VALUES ('$ipaddress',1,'$timestamp') ON DUPLICATE KEY UPDATE hits=(hits+1),lasttimestamp='$timestamp';"
 84 | 	} elseif ($DatabaseType -eq "MSSQL") {
 85 | 		$Query = "IF NOT EXISTS (SELECT 1 FROM hm_fwban_blocks_ip WHERE ipaddress='$ipaddress') INSERT INTO hm_fwban_blocks_ip (ipaddress, hits, lasttimestamp) VALUES ('$ipaddress',1,'$timestamp') ELSE UPDATE hm_fwban_blocks_ip SET hits=(hits+1),lasttimestamp='$timestamp'  WHERE ipaddress='$ipaddress';"
 86 | 	}
 87 | 	RunSQLQuery $Query
 88 | }
 89 | 
 90 | $Query = "
 91 | 	SELECT 
 92 | 		id,
 93 | 		ipaddress 
 94 | 	FROM hm_fwban_blocks_ip
 95 | "
 96 | RunSQLQuery $Query | foreach {
 97 | 	$id = $_.id
 98 | 	$ipaddress = $_.ipaddress
 99 | 	$Query = "UPDATE hm_fwban_rh SET ipid='$id' WHERE ipaddress='$ipaddress';"
100 | 	RunSQLQuery $Query
101 | }
102 | 
103 | $EndTime = (Get-Date -f G)
104 | $OperationTime = New-Timespan $StartTime $EndTime
105 | If (($OperationTime).Hours -eq 1) {$sh = ""} Else {$sh = "s"}
106 | If (($OperationTime).Minutes -eq 1) {$sm = ""} Else {$sm = "s"}
107 | If (($OperationTime).Seconds -eq 1) {$ss = ""} Else {$ss = "s"}
108 | 
109 | $EmailBody = ("Retroactive hm_fwban_blocks_ip fill script compete.`n`nUpdate completed in {0:%h} hour$sh {0:%m} minute$sm {0:%s} second$ss" -f $OperationTime)
110 | Write-Host $EmailBody
111 | #EmailResults


--------------------------------------------------------------------------------
/www/release-country-view.php:
--------------------------------------------------------------------------------
 1 | <?php include("head.php") ?>
 2 | 
 3 | <div class="section">
 4 | 
 5 | <?php
 6 | 	include_once("config.php");
 7 | 	include_once("functions.php");
 8 | 
 9 | 	if (isset($_GET['page'])) {
10 | 		$page = $_GET['page'];
11 | 		$display_pagination = 1;
12 | 	} else {
13 | 		$page = 1;
14 | 		$total_pages = 1;
15 | 		$display_pagination = 0;
16 | 	}
17 | 	if (isset($_GET['submit'])) {$button = $_GET ['submit'];} else {$button = "";}
18 | 	if (isset($_GET['search'])) {$search = $_GET['search'];} else {$search = "";}
19 | 	if (isset($_GET['country'])) {$country = $_GET['country'];} else {$country = "";}
20 | 
21 | 	if (empty($country)){
22 | 		echo "No country selected. Please try again or see administator.<br><br>";
23 | 	} else {
24 | 
25 | 		$no_of_records_per_page = 20;
26 | 		$offset = ($page-1) * $no_of_records_per_page;
27 | 		$total_pages_sql = $pdo->prepare("
28 | 			SELECT 
29 | 				Count( * ) AS count 
30 | 			FROM hm_fwban 
31 | 			WHERE country LIKE '%{$country}%' AND (flag IS NULL OR flag=3)
32 | 		");
33 | 		$total_pages_sql->execute();
34 | 		$total_rows = $total_pages_sql->fetchColumn();
35 | 		$total_pages = ceil($total_rows / $no_of_records_per_page);
36 | 
37 | 		$sql = $pdo->prepare("
38 | 			SELECT 
39 | 				id, 
40 | 				".DBFormatDate('timestamp', '%y/%m/%d %T')." as TimeStamp, 
41 | 				ipaddress, 
42 | 				ban_reason, 
43 | 				country, 
44 | 				flag 
45 | 			FROM hm_fwban 
46 | 			WHERE country LIKE '%{$country}%' AND (flag IS NULL OR flag=3) 
47 | 			".DBLimitRowsWithOffset('TimeStamp','DESC',0,0,$offset,$no_of_records_per_page)
48 | 		);
49 | 		$sql->execute();
50 | 
51 | 		if ($total_rows == 1){$singular = '';} else {$singular= 's';}
52 | 		if ($total_rows == 0){
53 | 			echo "No unreleased results for \"<b>".$country."</b>\"";
54 | 		} else {
55 | 			echo "<h2>What would you like to release?</h2>";
56 | 			echo "Click \"NO\" under column \"RS\" to release a single address.<br><br>";
57 | 			echo "<a href=\"./release-country.php?country=".$country."&submit=Release\" onclick=\"return confirm('Are you sure you want to release all IPs for ".$country."?')\">Click here</a> to release all.<br>";
58 | 			echo "<br><br>";
59 | 			echo "Results for \"<b>".$country."</b>\": ".number_format($total_rows)." IP".$singular." (Page: ".number_format($page)." of ".number_format($total_pages).")<br>";
60 | 			echo "<table class='section'>
61 | 				<tr>
62 | 					<th>Timestamp</th>
63 | 					<th>IP Address</th>
64 | 					<th>Reason</th>
65 | 					<th>Country</th>
66 | 					<th>RS</th>
67 | 				</tr>";
68 | 			while($row = $sql->fetch(PDO::FETCH_ASSOC)){
69 | 				echo "<tr>";
70 | 
71 | 				echo "<td>" . $row['TimeStamp'] . "</td>";
72 | 				echo "<td><a href=\"search.php?submit=Search&search=".$row['ipaddress']."\">".$row['ipaddress']."</a></td>";
73 | 				echo "<td>" . $row['ban_reason'] . "</td>";
74 | 				echo "<td><a href=\"https://ipinfo.io/" . $row['ipaddress']."\"  target=\"_blank\">".$row['country']."</a></td>";
75 | 				if($row['flag'] === NULL || $row['flag'] == 3) echo "<td><a href=\"./release-ip.php?submit=Release&ipRange=".$row['ipaddress']."\" onclick=\"return confirm('Are you sure you want to release ".$row['ipaddress']."?')\">No</a></td>";
76 | 				else echo "<td>YES</td>";
77 | 
78 | 				echo "</tr>";
79 | 			}
80 | 			echo "</table>";
81 | 
82 | 			if ($total_pages == 1){
83 | 				echo "";
84 | 			} else {
85 | 				echo "<ul>";
86 | 					if($page <= 1){echo "<li>First </li>";} else {echo "<li><a href=\"?submit=Search&country=".$country."&page=1\">First </a><li>";}
87 | 					if($page <= 1){echo "<li>Prev </li>";} else {echo "<li><a href=\"?submit=Search&country=".$country."&page=".($page - 1)."\">Prev </a></li>";}
88 | 					if($page >= $total_pages){echo "<li>Next </li>";} else {echo "<li><a href=\"?submit=Search&country=".$country."&page=".($page + 1)."\">Next </a></li>";}
89 | 					if($page >= $total_pages){echo "<li>Last</li>";} else {echo "<li><a href=\"?submit=Search&country=".$country."&page=".$total_pages."\">Last</a></li>";}
90 | 				echo "</ul>";
91 | 			}
92 | 		}
93 | 	}
94 | 	echo "<br>";
95 | ?>
96 | </div>
97 | 
98 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/www/reban-br-view.php:
--------------------------------------------------------------------------------
 1 | <?php include("head.php") ?>
 2 | 
 3 | <div class="section">
 4 | 
 5 | <?php
 6 | 	include_once("config.php");
 7 | 	include_once("functions.php");
 8 | 
 9 | 	if (isset($_GET['page'])) {
10 | 		$page = $_GET['page'];
11 | 		$display_pagination = 1;
12 | 	} else {
13 | 		$page = 1;
14 | 		$total_pages = 1;
15 | 		$display_pagination = 0;
16 | 	}
17 | 	if (isset($_GET['submit'])) {$button = $_GET ['submit'];} else {$button = "";}
18 | 	if (isset($_GET['ban_reason'])) {$ban_reason = $_GET['ban_reason'];} else {$ban_reason = "";}
19 | 
20 | 	if (empty($ban_reason)){
21 | 		echo "<br><br>Error: No IP entries for ban reason ".$ban_reason."<br><br>";
22 | 	} else {
23 | 
24 | 		$no_of_records_per_page = 20;
25 | 		$offset = ($page-1) * $no_of_records_per_page;
26 | 		$total_pages_sql = $pdo->prepare("
27 | 			SELECT 
28 | 				Count( * ) AS count 
29 | 			FROM hm_fwban 
30 | 			WHERE ban_reason LIKE '{$ban_reason}' AND (flag=1 OR flag=2)
31 | 		");
32 | 		$total_pages_sql->execute();
33 | 		$total_rows = $total_pages_sql->fetchColumn();
34 | 		$total_pages = ceil($total_rows / $no_of_records_per_page);
35 | 
36 | 		$sql = $pdo->prepare("
37 | 			SELECT 
38 | 				id, 
39 | 				".DBFormatDate('timestamp', '%y/%m/%d %T')." as TimeStamp, 
40 | 				ipaddress, 
41 | 				ban_reason, 
42 | 				country, 
43 | 				flag, 
44 | 				helo 
45 | 			FROM hm_fwban 
46 | 			WHERE ban_reason LIKE '{$ban_reason}' AND (flag=1 OR flag=2) 
47 | 			".DBLimitRowsWithOffset('TimeStamp','DESC',0,0,$offset,$no_of_records_per_page)
48 | 		);
49 | 		$sql->execute();
50 | 
51 | 		if ($total_rows == 1){$singular = '';} else {$singular= 's';}
52 | 		if ($total_rows == 0){
53 | 			echo "<br><br>No previously released results for ban reason \"<b>".$ban_reason."</b>\"";
54 | 		} else {
55 | 			echo "<h2>What would you like to ban?</h2>";
56 | 			echo "Click \"YES\" under column \"RS\" to re-ban a single address.<br><br>";
57 | 			echo "<a href=\"./reban-br.php?submit=Reban&ban_reason=".$ban_reason."\" onclick=\"return confirm('Are you sure you want to re-ban all released IPs for ".$ban_reason."?')\">Click here</a> to re-ban all.<br>";
58 | 			echo "<br><br>";
59 | 			echo "Results for released IPs for ban reason \"<b>".$ban_reason."</b>\": ".number_format($total_rows)." IP".$singular." (Page: ".number_format($page)." of ".number_format($total_pages).")<br>";
60 | 			echo "<table class='section'>
61 | 				<tr>
62 | 					<th>Timestamp</th>
63 | 					<th>IP Address</th>
64 | 					<th>Reason</th>
65 | 					<th>Country</th>
66 | 					<th>HELO</th>
67 | 					<th>RS</th>
68 | 				</tr>";
69 | 			while($row = $sql->fetch(PDO::FETCH_ASSOC)){
70 | 				echo "<tr>";
71 | 
72 | 				echo "<td>".$row['TimeStamp']."</td>";
73 | 				echo "<td><a href=\"search.php?submit=Search&search=".$row['ipaddress']."\">".$row['ipaddress']."</a></td>";
74 | 				echo "<td>".$row['ban_reason']."</td>";
75 | 				echo "<td><a href=\"https://ipinfo.io/" . $row['ipaddress'] . "\"  target=\"_blank\">" . $row['country'] . "</a></td>";
76 | 				echo "<td>".$row['helo']."</td>";
77 | 				if($row['flag'] == 1 || $row['flag'] == 2) echo "<td><a href=\"./reban-ip.php?submit=Reban&ipRange=".$row['ipaddress']."\" onclick=\"return confirm('Are you sure you want to re-ban IP ".$row['ipaddress']."?')\">YES</a></td>";
78 | 				else echo "<td>NO</td>";
79 | 
80 | 				echo "</tr>";
81 | 			}
82 | 			echo "</table>";
83 | 
84 | 			echo "<ul>";
85 | 				if($page <= 1){echo "<li>First </li>";} else {echo "<li><a href=\"?submit=Search&ban_reason=".$ban_reason."&page=1\">First </a><li>";}
86 | 				if($page <= 1){echo "<li>Prev </li>";} else {echo "<li><a href=\"?submit=Search&ban_reason=".$ban_reason."&page=".($page - 1)."\">Prev </a></li>";}
87 | 				if($page >= $total_pages){echo "<li>Next </li>";} else {echo "<li><a href=\"?submit=Search&ban_reason=".$ban_reason."&page=".($page + 1)."\">Next </a></li>";}
88 | 				if($page >= $total_pages){echo "<li>Last</li>";} else {echo "<li><a href=\"?submit=Search&ban_reason=".$ban_reason."&page=".$total_pages."\">Last</a></li>";}
89 | 			echo "</ul>";
90 | 		}
91 | 	}
92 | 	echo "<br>";
93 | ?>
94 | </div>
95 | 
96 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/www/ids.php:
--------------------------------------------------------------------------------
 1 | <?php include("head.php") ?>
 2 | 
 3 | <div class="section">
 4 | 
 5 | <?php
 6 | 	include_once("config.php");
 7 | 	include_once("functions.php");
 8 | 
 9 | 	if (isset($_GET['page'])) {
10 | 		$page = $_GET['page'];
11 | 		$display_pagination = 1;
12 | 	} else {
13 | 		$page = 1;
14 | 		$total_pages = 1;
15 | 		$display_pagination = 0;
16 | 	}
17 | 	if (isset($_GET['submit'])) {
18 | 		$button = $_GET ['submit'];
19 | 	} else {
20 | 		$button = "";
21 | 	}
22 | 	if (isset($_GET['search'])) {$search = mysqli_real_escape_string($con, preg_replace('/\s+/', ' ',trim($_GET['search'])));} else {$search = "";}
23 | 	if ($search=="") {$search_sql="";} else {$search_sql=" WHERE ipaddress LIKE '{$search}%' OR timestamp LIKE '{$search}%' OR country LIKE '%{$search}%'";}
24 | 	if ($search=="") {$search_page="";} else {$search_page="&search=".$search."";}
25 | 	if ($search=="") {$search_list="";} else {$search_list=" matching <b>\"".$search."\"</b>";}
26 | 	if ($search=="") {$search_all="All ";} else {$search_all="";}
27 |   
28 | 	$no_of_records_per_page = 20;
29 | 	$offset = ($page-1) * $no_of_records_per_page;
30 | 	$total_pages_sql = $pdo->prepare("
31 | 		SELECT 
32 | 			COUNT(ipaddress) 
33 | 		FROM hm_ids".$search_sql
34 | 	);
35 | 	$total_pages_sql->execute();
36 | 	$total_rows = $total_pages_sql->fetchColumn();
37 | 	$total_pages = ceil($total_rows / $no_of_records_per_page);
38 | 
39 | 	$sql = $pdo->prepare("
40 | 		SELECT 
41 | 			ipaddress, 
42 | 			".DBFormatDate('timestamp', '%y/%m/%d %T')." AS TimeStamp,
43 | 			country, 
44 | 			hits 
45 | 		FROM hm_ids ".$search_sql." 
46 | 		GROUP BY ipaddress, ".DBFormatDate('timestamp', '%y/%m/%d %T').", country, hits
47 | 		".DBLimitRowsWithOffset('timestamp','DESC',0,0,$offset,$no_of_records_per_page));
48 | 	$sql->execute();
49 | 
50 | 	if ($total_rows == 1){$singular = '';} else {$singular= 's';}
51 | 	if ($total_rows == 0){
52 | 		if ($search == ""){
53 | 			echo "<br>There are no IDS entries to report.";
54 | 		} else {
55 | 			echo "<br>There are no IDS entries to report for search term <b>\"".$search."\"</b>. Please enter only IP address or date.";
56 | 		}
57 | 	} else {
58 | 		echo $search_all."".number_format($total_rows)." IP".$singular." hit by IDS".$search_list.". (Page: ".number_format($page)." of ".number_format($total_pages).")<br>";
59 | 		echo "<table class='section'>
60 | 			<tr>
61 | 				<th>Timestamp</th>
62 | 				<th>IP Address</th>
63 | 				<th>Country</th>
64 | 				<th>Hits</th>
65 | 			</tr>";
66 | 
67 | 		while($row = $sql->fetch(PDO::FETCH_ASSOC)){
68 | 			echo "<tr>";
69 | 			echo "<td>".$row['TimeStamp']."</td>";
70 | 			echo "<td><a href=\"./search.php?submit=Search&search=".$row['ipaddress']."\">".$row['ipaddress']."</a></td>";
71 | 			echo "<td><a href=\"https://ipinfo.io/".$row['ipaddress']."\"  target=\"_blank\">".$row['country']."</a></td>";
72 | 			echo "<td style=\"text-align:center;\">".$row['hits']."</td>";
73 | 			echo "</tr>";
74 | 		}
75 | 		echo "</table>";
76 | 
77 | 		if ($total_pages < 2){
78 | 			echo "<br><br>";
79 | 		} else {
80 | 			echo "<ul>";
81 | 			if($page <= 1){echo "<li>First </li>";} else {echo "<li><a href=\"?submit=Search".$search_page."&page=1\">First </a><li>";}
82 | 			if($page <= 1){echo "<li>Prev </li>";} else {echo "<li><a href=\"?submit=Search".$search_page."&page=".($page - 1)."\">Prev </a></li>";}
83 | 			if($page >= $total_pages){echo "<li>Next </li>";} else {echo "<li><a href=\"?submit=Search".$search_page."&page=".($page + 1)."\">Next </a></li>";}
84 | 			if($page >= $total_pages){echo "<li>Last</li>";} else {echo "<li><a href=\"?submit=Search".$search_page."&page=".$total_pages."\">Last</a></li>";}
85 | 			echo "</ul>";
86 | 		}
87 | 	}
88 | 
89 | 	echo "<br>
90 | 	IDS = Intrusion Detection System. <br><br>
91 | 	Records connections that either a) were not rejected and did not successfully send a message or b) were not rejected and did not successfully log in. After 3 such connections within an interval of a specified number of hours (declared in Config.ps1), the IP is banned. If an IP is recorded less than 3 times within the interval period, it is expired from the IDS table.";
92 | ?>
93 | </div>
94 | 
95 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/www/reban-country-view.php:
--------------------------------------------------------------------------------
 1 | <?php include("head.php") ?>
 2 | 
 3 | <div class="section">
 4 | 
 5 | <?php
 6 | 	include_once("config.php");
 7 | 	include_once("functions.php");
 8 | 
 9 | 	if (isset($_GET['page'])) {
10 | 		$page = $_GET['page'];
11 | 		$display_pagination = 1;
12 | 	} else {
13 | 		$page = 1;
14 | 		$total_pages = 1;
15 | 		$display_pagination = 0;
16 | 	}
17 | 	if (isset($_GET['submit'])) {$button = $_GET ['submit'];} else {$button = "";}
18 | 	if (isset($_GET['search'])) {$search = $_GET['search'];} else {$search = "";}
19 | 	if (isset($_GET['country'])) {$country = $_GET['country'];} else {$country="";}
20 | 
21 | 	if (empty($country)){
22 | 		echo "<br><br>Error: No country selected. Please see administrator.<br><br>";
23 | 	} else {
24 | 
25 | 		$no_of_records_per_page = 20;
26 | 		$offset = ($page-1) * $no_of_records_per_page;
27 | 		$total_pages_sql = $pdo->prepare("
28 | 			SELECT 
29 | 				Count( * ) AS count 
30 | 			FROM hm_fwban 
31 | 			WHERE country LIKE '{$country}' AND (flag=1 OR flag=2)
32 | 		");
33 | 		$total_pages_sql->execute();
34 | 		$total_rows = $total_pages_sql->fetchColumn();
35 | 		$total_pages = ceil($total_rows / $no_of_records_per_page);
36 | 
37 | 		$sql = $pdo->prepare("
38 | 			SELECT 
39 | 				id, 
40 | 				".DBFormatDate('timestamp', '%y/%m/%d %T')." as TimeStamp, 
41 | 				ipaddress, 
42 | 				ban_reason, 
43 | 				country, 
44 | 				flag, 
45 | 				helo 
46 | 			FROM hm_fwban 
47 | 			WHERE country LIKE '{$country}' AND (flag=1 OR flag=2) 
48 | 			".DBLimitRowsWithOffset('TimeStamp','DESC',0,0,$offset,$no_of_records_per_page)
49 | 		);
50 | 		$sql->execute();
51 | 
52 | 		if ($total_rows == 1){$singular = '';} else {$singular= 's';}
53 | 		if ($total_rows == 0){
54 | 			echo "<br><br>No previously released results for \"<b>".$country."</b>\"";
55 | 		} else {
56 | 			echo "<h2>What would you like to ban?</h2>";
57 | 			echo "Click \"YES\" under column \"RS\" to re-ban a single address.<br><br>";
58 | 			echo "<a href=\"./reban-country.php?country=".$country."&submit=Reban\" onclick=\"return confirm('Are you sure you want to re-ban all released IPs for ".$country."?')\">Click here</a> to re-ban all.<br>";
59 | 			echo "<br><br>";
60 | 			echo "Results for released IPs for \"<b>".$country."</b>\": ".number_format($total_rows)." IP".$singular." (Page: ".number_format($page)." of ".number_format($total_pages).")<br>";
61 | 			echo "<table class='section'>
62 | 				<tr>
63 | 					<th>Timestamp</th>
64 | 					<th>IP Address</th>
65 | 					<th>Reason</th>
66 | 					<th>Country</th>
67 | 					<th>HELO</th>
68 | 					<th>RS</th>
69 | 				</tr>";
70 | 			while($row = $sql->fetch(PDO::FETCH_ASSOC)){
71 | 				echo "<tr>";
72 | 
73 | 				echo "<td>".$row['TimeStamp']."</td>";
74 | 				echo "<td><a href=\"search.php?submit=Search&search=".$row['ipaddress']."\">".$row['ipaddress']."</a></td>";
75 | 				echo "<td>".$row['ban_reason']."</td>";
76 | 				echo "<td><a href=\"https://ipinfo.io/" . $row['ipaddress'] . "\"  target=\"_blank\">" . $row['country'] . "</a></td>";
77 | 				echo "<td>".$row['helo']."</td>";
78 | 				if($row['flag'] == 1 || $row['flag'] == 2) echo "<td><a href=\"./reban-ip.php?submit=Reban&ipRange=".$row['ipaddress']."\" onclick=\"return confirm('Are you sure you want to re-ban IP ".$row['ipaddress']."?')\">YES</a></td>";
79 | 				else echo "<td>NO</td>";
80 | 
81 | 				echo "</tr>";
82 | 			}
83 | 			echo "</table>";
84 | 
85 | 			echo "<ul>";
86 | 				if($page <= 1){echo "<li>First </li>";} else {echo "<li><a href=\"?submit=Search&country=".$country."&page=1\">First </a><li>";}
87 | 				if($page <= 1){echo "<li>Prev </li>";} else {echo "<li><a href=\"?submit=Search&country=".$country."&page=".($page - 1)."\">Prev </a></li>";}
88 | 				if($page >= $total_pages){echo "<li>Next </li>";} else {echo "<li><a href=\"?submit=Search&country=".$country."&page=".($page + 1)."\">Next </a></li>";}
89 | 				if($page >= $total_pages){echo "<li>Last</li>";} else {echo "<li><a href=\"?submit=Search&country=".$country."&page=".$total_pages."\">Last</a></li>";}
90 | 			echo "</ul>";
91 | 			echo "<br>RS = Released Status (removal from firewall). Clicking on \"YES\" will re-ban the IP.<br><br>";
92 | 		}
93 | 	}
94 | 	echo "<br>";
95 | ?>
96 | </div>
97 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/www/repeats-ip.php:
--------------------------------------------------------------------------------
  1 | <?php include("head.php") ?>
  2 | 
  3 | <div class="section">
  4 | 
  5 | <?php
  6 | 	include_once("config.php");
  7 | 	include_once("functions.php");
  8 | 
  9 | 	if (isset($_GET['page'])) {
 10 | 		$page = $_GET['page'];
 11 | 		$display_pagination = 1;
 12 | 	} else {
 13 | 		$page = 1;
 14 | 		$total_pages = 1;
 15 | 		$display_pagination = 0;
 16 | 	}
 17 | 	if (isset($_GET['submit'])) {$button = $_GET ['submit'];} else {$button = "";}
 18 | 	if (isset($_GET['repeatIP'])) {$repeatIP = $_GET['repeatIP'];} else {$repeatIP = "";}
 19 | 
 20 | 	$no_of_records_per_page = 20;
 21 | 	$offset = ($page-1) * $no_of_records_per_page;
 22 | 	$total_pages_sql = $pdo->prepare("
 23 | 		SELECT 
 24 | 			COUNT(DISTINCT(".DBCastDateTimeFieldAsDate('timestamp').")) 
 25 | 		FROM hm_fwban_rh 
 26 | 		WHERE ipaddress='{$repeatIP}'
 27 | 	");
 28 | 	$total_pages_sql->execute();
 29 | 	$total_rows = $total_pages_sql->fetchColumn();
 30 | 	$total_pages = ceil($total_rows / $no_of_records_per_page);
 31 | 
 32 | 	$total_hits_sql = $pdo->prepare("
 33 | 		SELECT 
 34 | 			COUNT(ipaddress) 
 35 | 		FROM hm_fwban_rh 
 36 | 		WHERE ipaddress='{$repeatIP}'
 37 | 	");
 38 | 	$total_hits_sql->execute();
 39 | 	$total_hits = $total_hits_sql->fetchColumn();
 40 | 	
 41 | 	$sql = $pdo->prepare("
 42 | 		SELECT
 43 | 			a.day,
 44 | 			a.ipaddress,
 45 | 			b.ban_reason,
 46 | 			b.country,
 47 | 			a.countip
 48 | 		FROM
 49 | 		(
 50 | 			SELECT 
 51 | 				ipaddress, 
 52 | 				COUNT(ipaddress) AS countip, 
 53 | 				".DBFormatDate(DBCastDateTimeFieldAsDate('timestamp'), '%y/%m/%d')." AS day
 54 | 			FROM hm_fwban_rh
 55 | 			WHERE ipaddress = '{$repeatIP}'
 56 | 			GROUP BY ".DBFormatDate(DBCastDateTimeFieldAsDate('timestamp'), '%y/%m/%d').", ipaddress
 57 | 		) AS a
 58 | 		JOIN
 59 | 		(
 60 | 			SELECT 
 61 | 				ipaddress, 
 62 | 				country, 
 63 | 				ban_reason
 64 | 			FROM hm_fwban
 65 | 		) AS b
 66 | 		ON a.ipaddress = b.ipaddress
 67 | 		GROUP BY a.day, a.ipaddress, b.ban_reason, b.country, a.countip 
 68 | 		".DBLimitRowsWithOffset('a.day','DESC',0,0,$offset,$no_of_records_per_page)
 69 | 	);
 70 | 	$sql->execute();
 71 | 
 72 | 	if ($total_rows == 1){$singular = '';} else {$singular= 's';}
 73 | 		
 74 | 	if ($total_rows == 0){
 75 | 		echo "<br><br>There are no repeat dropped IPs to report.";
 76 | 	} else {
 77 | 		echo "IP <b>".$repeatIP."</b> denied access ".number_format($total_hits)." times over ".number_format($total_rows)." day".$singular.". (Page: ".number_format($page)." of ".number_format($total_pages).")<br>";
 78 | 		echo "<table class='section'>
 79 | 			<tr>
 80 | 				<th>Date</th>
 81 | 				<th>IP Address</th>
 82 | 				<th>Reason</th>
 83 | 				<th>Country</th>
 84 | 				<th>FB</th>
 85 | 			</tr>";
 86 | 
 87 | 		while($row = $sql->fetch(PDO::FETCH_ASSOC)){
 88 | 			echo "<tr>";
 89 | 			echo "<td>".$row['day']."</td>";
 90 | 			echo "<td><a href=\"search.php?submit=Search&search=".$row['ipaddress']."\">".$row['ipaddress']."</a></td>";
 91 | 			echo "<td>".$row['ban_reason']."</td>";
 92 | 			echo "<td><a href=\"https://ipinfo.io/".$row['ipaddress']."\"  target=\"_blank\">".$row['country']."</a></td>";
 93 | 			echo "<td style=\"text-align:right;\"><a href=\"./repeats-ip-day.php?submit=Search&date=".$row['day']."&repeatIP=".$row['ipaddress']."\">".number_format($row['countip'])."</td>";
 94 | 			echo "</tr>";
 95 | 		}
 96 | 		echo "</table>";
 97 | 
 98 | 		if ($total_pages < 2){
 99 | 			echo "<br><br>";
100 | 		} else {
101 | 			echo "<ul>";
102 | 			if($page <= 1){echo "<li>First </li>";} else {echo "<li><a href=\"?submit=Search&repeatIP=".$repeatIP."&page=1\">First </a><li>";}
103 | 			if($page <= 1){echo "<li>Prev </li>";} else {echo "<li><a href=\"?submit=Search&repeatIP=".$repeatIP."&page=".($page - 1)."\">Prev </a></li>";}
104 | 			if($page >= $total_pages){echo "<li>Next </li>";} else {echo "<li><a href=\"?submit=Search&repeatIP=".$repeatIP."&page=".($page + 1)."\">Next </a></li>";}
105 | 			if($page >= $total_pages){echo "<li>Last</li>";} else {echo "<li><a href=\"?submit=Search&repeatIP=".$repeatIP."&page=".$total_pages."\">Last</a></li>";}
106 | 			echo "</ul>";
107 | 		}
108 | 		if ($total_pages > 0){
109 | 			echo	"FB = Firewall Blocks<br>
110 | 					RS = Released Status<br>";
111 | 		}
112 | 	}
113 | 	echo "<br>";
114 | ?>
115 | </div>
116 | 
117 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/www/release-br-view.php:
--------------------------------------------------------------------------------
  1 | <?php include("head.php") ?>
  2 | 
  3 | <div class="section">
  4 | 
  5 | <?php
  6 | 	include_once("config.php");
  7 | 	include_once("functions.php");
  8 | 
  9 | 	if (isset($_GET['page'])) {
 10 | 		$page = $_GET['page'];
 11 | 		$display_pagination = 1;
 12 | 	} else {
 13 | 		$page = 1;
 14 | 		$total_pages = 1;
 15 | 		$display_pagination = 0;
 16 | 	}
 17 | 	if (isset($_GET['submit'])) {$button = $_GET ['submit'];} else {$button = "";}
 18 | 	if (isset($_GET['ban_reason'])) {$ban_reason = $_GET['ban_reason'];} else {$ban_reason="";}
 19 | 
 20 | 	if (empty($ban_reason)){
 21 | 		echo "Error. There is no ban reason. Please see administrator.<br><br>";
 22 | 	} else {
 23 | 		$no_of_records_per_page = 20;
 24 | 		$offset = ($page-1) * $no_of_records_per_page;
 25 | 		$total_pages_sql = $pdo->prepare("
 26 | 			SELECT 
 27 | 				Count( * ) AS count 
 28 | 			FROM hm_fwban 
 29 | 			WHERE ban_reason LIKE '{$ban_reason}' AND (flag IS NULL OR flag=3)
 30 | 		");
 31 | 		$total_pages_sql->execute();
 32 | 		$total_rows = $total_pages_sql->fetchColumn();
 33 | 		$total_pages = ceil($total_rows / $no_of_records_per_page);
 34 | 
 35 | 		$sql = $pdo->prepare("
 36 | 			SELECT 
 37 | 				id, 
 38 | 				".DBFormatDate('timestamp', '%y/%m/%d %T')." as TimeStamp, 
 39 | 				ipaddress, 
 40 | 				ban_reason, 
 41 | 				country, 
 42 | 				helo, 
 43 | 				flag 
 44 | 			FROM hm_fwban 
 45 | 			WHERE ban_reason LIKE '{$ban_reason}' AND (flag IS NULL OR flag=3) 
 46 | 			".DBLimitRowsWithOffset('TimeStamp','DESC',0,0,$offset,$no_of_records_per_page)
 47 | 		);
 48 | 		$sql->execute();
 49 | 
 50 | 		if ($total_rows == 1){$singular = '';} else {$singular= 's';}
 51 | 		if ($total_rows == 0){
 52 | 			echo "No unreleased results for ban reason \"<b>".$ban_reason."</b>\".";
 53 | 		} else {
 54 | 			echo "<h2>What would you like to release?</h2>";
 55 | 			echo "Click \"NO\" under column \"RS\" to release a single address.<br><br>";
 56 | 			echo "<a href=\"./release-br.php?ban_reason=".$ban_reason."&submit=Release\" onclick=\"return confirm('Are you sure you want to release all IPs for ".$ban_reason."?')\">Click here</a> to release all.<br>";
 57 | 			echo "<br><br>";
 58 | 			echo "Results for ban reason \"<b>".$ban_reason."</b>\": ".number_format($total_rows)." IP".$singular." (Page: ".number_format($page)." of ".number_format($total_pages).")<br>";
 59 | 			echo "<table class='section'>
 60 | 				<tr>
 61 | 					<th>Timestamp</th>
 62 | 					<th>IP Address</th>
 63 | 					<th>Reason</th>
 64 | 					<th>Country</th>
 65 | 					<th>HELO</th>
 66 | 					<th>RS</th>
 67 | 				</tr>";
 68 | 			while($row = $sql->fetch(PDO::FETCH_ASSOC)){
 69 | 				echo "<tr>";
 70 | 
 71 | 				echo "<td>" . $row['TimeStamp'] . "</td>";
 72 | 				echo "<td><a href=\"search.php?submit=Search&search=" . $row['ipaddress'] . "\">" . $row['ipaddress'] . "</a></td>";
 73 | 				echo "<td>" . $row['ban_reason'] . "</td>";
 74 | 				echo "<td><a href=\"https://ipinfo.io/" . $row['ipaddress'] . "\"  target=\"_blank\">" . $row['country'] . "</a></td>";
 75 | 				echo "<td>" . $row['helo'] . "</td>";
 76 | 				if($row['flag'] === NULL || $row['flag'] == 3) echo "<td><a href=\"./release-ip.php?submit=Release&ipRange=".$row['ipaddress']."\" onclick=\"return confirm('Are you sure you want to release ".$row['ipaddress']."?')\">No</a></td>";
 77 | 				else echo "<td>YES</td>";
 78 | 
 79 | 				echo "</tr>";
 80 | 			}
 81 | 			echo "</table>";
 82 | 
 83 | 			if ($total_pages == 1){
 84 | 				echo "";
 85 | 			} else {
 86 | 				echo "<ul>";
 87 | 				if($page <= 1){echo "<li>First </li>";} else {echo "<li><a href=\"?submit=Search&ban_reason=".$ban_reason."&page=1\">First </a><li>";}
 88 | 				if($page <= 1){echo "<li>Prev </li>";} else {echo "<li><a href=\"?submit=Search&ban_reason=".$ban_reason."&page=".($page - 1)."\">Prev </a></li>";}
 89 | 				if($page >= $total_pages){echo "<li>Next </li>";} else {echo "<li><a href=\"?submit=Search&ban_reason=".$ban_reason."&page=".($page + 1)."\">Next </a></li>";}
 90 | 				if($page >= $total_pages){echo "<li>Last</li>";} else {echo "<li><a href=\"?submit=Search&ban_reason=".$ban_reason."&page=".$total_pages."\">Last</a></li>";}
 91 | 				echo "</ul>";
 92 | 			}
 93 | 			if ($total_pages > 0){
 94 | 				echo "<br>
 95 | 				RS = Release Status<br><br>";
 96 | 			}
 97 | 		}
 98 | 	}
 99 | 	echo "<br>";
100 | ?>
101 | </div>
102 | 
103 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/www/blocks-view.php:
--------------------------------------------------------------------------------
  1 | <?php include("head.php") ?>
  2 | 
  3 | <div class="section">
  4 | <h2>Repeat Hits (Connections Dropped at Firewall)</h2>
  5 | 
  6 | <?php
  7 | 	include("config.php");
  8 | 	include("functions.php");
  9 | 
 10 | 	if (isset($_GET['page'])) {
 11 | 		$page = $_GET['page'];
 12 | 		$display_pagination = 1;
 13 | 	} else {
 14 | 		$page = 1;
 15 | 		$total_pages = 1;
 16 | 		$display_pagination = 0;
 17 | 	}
 18 | 	if (isset($_GET['submit'])) {
 19 | 		$button = $_GET ['submit'];
 20 | 	} else {
 21 | 		$button = "";
 22 | 	}
 23 | 	if (isset($_GET['days'])) {$days = $_GET['days'];} else {$days = 0;}
 24 | 	if ($days==""){$days_page="";}else{$days_page="&days=".$days;}
 25 | 
 26 | 	$no_of_records_per_page = 20;
 27 | 	$offset = ($page-1) * $no_of_records_per_page;
 28 | 
 29 | 	$total_pages_sql = $pdo->prepare("
 30 | 		SELECT COUNT(*) AS countips 
 31 | 		FROM (
 32 | 			SELECT
 33 | 				a.ipaddress,
 34 | 				b.ban_reason,
 35 | 				b.country,
 36 | 				a.countip
 37 | 			FROM
 38 | 			(
 39 | 				SELECT 
 40 | 					ipaddress, 
 41 | 					COUNT(ipaddress) AS countip,
 42 | 					COUNT(DISTINCT(".DBCastDateTimeFieldAsDate('timestamp').")) AS countdate 
 43 | 				FROM hm_fwban_rh 
 44 | 				GROUP BY ipaddress 
 45 | 				HAVING COUNT(DISTINCT(".DBCastDateTimeFieldAsDate('timestamp').")) > ".($days - 1)."
 46 | 			) AS a
 47 | 			LEFT JOIN
 48 | 			(
 49 | 				SELECT 
 50 | 					ipaddress, 
 51 | 					country, 
 52 | 					ban_reason
 53 | 				FROM hm_fwban
 54 | 			) AS b
 55 | 			ON a.ipaddress = b.ipaddress
 56 | 		) AS returnhits
 57 | 	");
 58 | 	$total_pages_sql->execute();
 59 | 	$total_rows = $total_pages_sql->fetchColumn();
 60 | 	$total_pages = ceil($total_rows / $no_of_records_per_page);
 61 | 
 62 | 	$sql = $pdo->prepare("
 63 | 		SELECT
 64 | 			a.ipaddress,
 65 | 			b.ban_reason,
 66 | 			b.country,
 67 |             a.countip
 68 | 		FROM
 69 | 		(
 70 | 			SELECT 
 71 | 				ipaddress, 
 72 |             	COUNT(ipaddress) AS countip,
 73 | 				COUNT(DISTINCT(".DBCastDateTimeFieldAsDate('timestamp').")) AS countdate 
 74 | 			FROM hm_fwban_rh 
 75 | 			GROUP BY ipaddress 
 76 | 			HAVING COUNT(DISTINCT(".DBCastDateTimeFieldAsDate('timestamp').")) > ".($days - 1)."
 77 | 		) AS a
 78 | 		LEFT JOIN
 79 | 		(
 80 | 			SELECT 
 81 | 				ipaddress, 
 82 | 				country, 
 83 | 				ban_reason
 84 | 			FROM hm_fwban
 85 | 		) AS b
 86 | 		ON a.ipaddress = b.ipaddress
 87 | 		".DBLimitRowsWithOffset('countip','DESC',0,0,$offset,$no_of_records_per_page)
 88 | 	);
 89 | 	$sql->execute();
 90 | 
 91 | 	if ($total_rows == 1){$singular = '';} else {$singular= 's';}
 92 | 	if ($total_rows == 0){
 93 | 		echo "<br>There are no IPs repeatedly dropped at the firewall at least <b>".$days."</b> days.";
 94 | 	} else {
 95 | 		echo number_format($total_rows)." IP".$singular." repeatedly dropped at firewall on at least ".$days." distinct days. (Page: ".number_format($page)." of ".number_format($total_pages).")<br>";
 96 | 		echo "<table class='section'>
 97 | 			<tr>
 98 | 				<th>IP Address</th>
 99 | 				<th>Reason</th>
100 | 				<th>Country</th>
101 | 				<th>Blocks</th>
102 | 			</tr>";
103 | 
104 | 		while($row = $sql->fetch(PDO::FETCH_ASSOC)){
105 | 			echo "<tr>";
106 | 			echo "<td>".$row['ipaddress']."</td>";
107 | 			echo "<td>".$row['ban_reason']."</td>";
108 | 			echo "<td><a href=\"https://ipinfo.io/".$row['ipaddress']."\"  target=\"_blank\">".$row['country']."</a></td>";
109 | 			if($row['countip']==0){echo "<td style=\"text-align:right;\">0</td>";}
110 | 			else{echo "<td style=\"text-align:right;\"><a href=\"repeats-IP.php?submit=Search&repeatIP=".$row['ipaddress']."\">".number_format($row['countip'])."</a></td>";}
111 | 			echo "</tr>";
112 | 		}
113 | 		echo "</table>";
114 | 
115 | 		if ($total_pages < 2){
116 | 			echo "<br><br>";
117 | 		} else {
118 | 			echo "<ul>";
119 | 			if($page <= 1){echo "<li>First </li>";} else {echo "<li><a href=\"?submit=Search".$days_page."&page=1\">First </a><li>";}
120 | 			if($page <= 1){echo "<li>Prev </li>";} else {echo "<li><a href=\"?submit=Search".$days_page."&page=".($page - 1)."\">Prev </a></li>";}
121 | 			if($page >= $total_pages){echo "<li>Next </li>";} else {echo "<li><a href=\"?submit=Search".$days_page."&page=".($page + 1)."\">Next </a></li>";}
122 | 			if($page >= $total_pages){echo "<li>Last</li>";} else {echo "<li><a href=\"?submit=Search".$days_page."&page=".$total_pages."\">Last</a></li>";}
123 | 			echo "</ul>";
124 | 		}
125 | 	}
126 | 
127 | 	echo "<br>";
128 | ?>
129 | </div>
130 | 
131 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/hmsRetroAddRuleName.ps1:
--------------------------------------------------------------------------------
  1 | <#
  2 | _  _ _  _  _  _ _    ____ ____ ____ _  _ ____ ____     
  3 | |__| |\/| /_\ | |    [__  |___ |__/ |  | |___ |__/     
  4 | |  | |  |/   \| |___ ___] |___ |  \  \/  |___ |  \     
  5 | ____ _ ____ ____ _ _ _  _  _    _       ___   _  _  _ 
  6 | |___ | |__/ |___ | | | /_\ |    |       |__] /_\ |\ | 
  7 | |    | |  \ |___ |_|_|/   \|___ |___    |__]/   \| \| 
  8 | 
  9 | .SYNOPSIS
 10 | 	Powershell script to retroactively add firewall rule names
 11 | 
 12 | .DESCRIPTION
 13 | 	Adds column "rulename" to database, queries firewall for rules, extracts IP scope from rules and inserts rule name into database for each IP. 
 14 | 	
 15 | .FUNCTIONALITY
 16 | 	1) Fill in user variables
 17 | 	2) Run script
 18 | 
 19 | .NOTES
 20 | 	Includes email notification when complete. Also includes a search for bans with no rules to bring the firewall up to match the database.
 21 | 
 22 | .EXAMPLE
 23 | 
 24 | #>
 25 | 
 26 | # Include required files
 27 | Try {
 28 | 	.("$PSScriptRoot\Config.ps1")
 29 | 	.("$PSScriptRoot\CommonCode.ps1")
 30 | }
 31 | Catch {
 32 | 	Write-Output "$((get-date).ToString(`"yy/MM/dd HH:mm:ss.ff`")) : ERROR : Unable to load supporting PowerShell Scripts : $query `n$Error[0]" | out-file "$PSScriptRoot\PSError.log" -append
 33 | }
 34 | 
 35 | #	Set start time
 36 | $StartTime = (Get-Date -f G)
 37 | 
 38 | #	Create folder if it doesn't exist
 39 | If (-not(Test-Path "$PSScriptRoot\RetroAddRuleName")) {
 40 | 	md "$PSScriptRoot\RetroAddRuleName"
 41 | }
 42 | 
 43 | # 	Add "rulename" column to hm_fwban
 44 | $Query = "ALTER TABLE hm_fwban ADD rulename VARCHAR(192) NULL;"
 45 | RunSQLQuery($Query)
 46 | 
 47 | #	Count IPs that should get rulenames
 48 | $Query = "
 49 | 	SELECT 
 50 | 		COUNT(rulename) AS countnull 
 51 | 	FROM hm_fwban 
 52 | 	WHERE flag IS NULL
 53 | "
 54 | RunSQLQuery($Query) | ForEach {
 55 | 	[int]$CountStart = $_.countnull
 56 | }
 57 | 
 58 | $NewLine = [System.Environment]::NewLine
 59 | $RegexIP = '(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)'
 60 | $RegexDateName = '(hmsFWBRule\-|hMS\sFWBan\s)(20\d{2}\-\d{2}\-\d{2})(_\d{3})?$'
 61 | $RegexIPName  = '^(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$'
 62 | $RegexFileName = 'hms\sFWBan\s20[0-9][0-9]\-[0-9][0-9]\-[0-9][0-9].txt$'
 63 | $Location = "$PSScriptRoot\RetroAddRuleName"
 64 | 
 65 | Get-NetshFireWallrule ("all") | ForEach {
 66 | 	If (($_.RuleName -match $RegexDateName) -or ($_.RuleName -match $RegexIPName)){
 67 | 		$RuleName = $_.RuleName
 68 | 		Get-NetshFireWallrule ("$RuleName") | ForEach {
 69 | 			$RemoteIP = $_.RemoteIP
 70 | 			$ReplaceCIDR = ($RemoteIP).Replace("/32", "")
 71 | 			$ReplaceNL = ($ReplaceCIDR).Replace(",", $NewLine)
 72 | 			Write-Output $ReplaceNL
 73 | 		} | Out-File "$Location\$RuleName.txt"
 74 | 	}
 75 | }
 76 | 
 77 | Get-ChildItem $Location | Where-Object {$_.name -match $RegexFileName} | ForEach {
 78 | 	$RuleFileName = $_.name
 79 | 	$SQLRuleName = ($RuleFileName).Replace(".txt", "")
 80 | 	Get-Content -Path "$Location\$RuleFileName" | ForEach {
 81 | 		If ($_ -match $RegexIP){
 82 | 			$IP = $_
 83 | 			$Query = "UPDATE hm_fwban SET rulename = '$SQLRuleName' WHERE ipaddress = '$IP'"
 84 | 			RunSQLQuery($Query)
 85 | 		}
 86 | 	}
 87 | }
 88 | 
 89 | #	Pick up any missed entries (bans without firewall rules)
 90 | $Query = "SELECT ipaddress, id FROM hm_fwban WHERE flag IS NULL AND rulename IS NULL"
 91 | RunSQLQuery $Query | foreach {
 92 | 	$ID = $_.id
 93 | 	$IP = $_.ipaddress
 94 | 	& netsh advfirewall firewall add rule name="$IP" description="Rule added $((get-date).ToString('MM/dd/yy'))" dir=in interface=any action=block remoteip=$IP
 95 | 	$Query = "UPDATE hm_fwban SET rulename='$IP' WHERE id='$ID'"
 96 | 	RunSQLQuery $Query
 97 | }
 98 | 
 99 | #	Count Results
100 | $Query = "
101 | 	SELECT 
102 | 		COUNT(rulename) AS countrulename 
103 | 	FROM hm_fwban 
104 | 	WHERE rulename IS NOT NULL AND flag IS NULL
105 | "
106 | RunSQLQuery($Query) | ForEach {
107 | 	[int]$CountEnd = $_.countrulename
108 | }
109 | 
110 | $ResultCount = $CountStart - $CountEnd
111 | If ($ResultCount -eq 0){
112 | 	$ResultMsg = "Successfully added $($CountEnd)ToString.('#,###') rulenames"
113 | } Else {
114 | 	$ResultMsg = "UPDATE FAILED to add $(($CountStart - $CountEnd)ToString.('#,###')) rulenames - check DB Error Logs for more info"
115 | }
116 | 
117 | $EndTime = (Get-Date -f G)
118 | $OperationTime = New-Timespan $StartTime $EndTime
119 | If (($Duration).Hours -eq 1) {$sh = ""} Else {$sh = "s"}
120 | If (($Duration).Minutes -eq 1) {$sm = ""} Else {$sm = "s"}
121 | If (($Duration).Seconds -eq 1) {$ss = ""} Else {$ss = "s"}
122 | 
123 | $EmailBody = ("Retroactive RuleName update complete `n`nResults: $ResultMsg`n`nUpdate completed in {0:%h} hour$sh {0:%m} minute$sm {0:%s} second$ss" -f $OperationTime)
124 | EmailResults


--------------------------------------------------------------------------------
/Config.ps1:
--------------------------------------------------------------------------------
 1 | <#
 2 | _  _ _  _  _  _ _    ____ ____ ____ _  _ ____ ____     
 3 | |__| |\/| /_\ | |    [__  |___ |__/ |  | |___ |__/     
 4 | |  | |  |/   \| |___ ___] |___ |  \  \/  |___ |  \     
 5 | ____ _ ____ ____ _ _ _  _  _    _       ___   _  _  _ 
 6 | |___ | |__/ |___ | | | /_\ |    |       |__] /_\ |\ | 
 7 | |    | |  \ |___ |_|_|/   \|___ |___    |__]/   \| \| 
 8 | 
 9 | .SYNOPSIS
10 | 	Config File
11 | 
12 | .DESCRIPTION
13 | 	Config File
14 | 
15 | .FUNCTIONALITY
16 | 
17 | .NOTES
18 | 
19 | .EXAMPLE
20 | 
21 | #>
22 | 
23 | ###   MYSQL VARIABLES   ################################################################
24 | #                                                                                      #
25 | $DatabaseType     = 'MYSQL'            #<-- Options: "MYSQL" or "MSSQL"                #
26 | $SQLAdminUserName = 'hmailserver'                                                      #
27 | $SQLAdminPassword = 'supersecretpassword'                                              #
28 | $SQLDatabase      = 'hmailserver'                                                      #
29 | $SQLHost          = '127.0.0.1'                                                        #
30 | $SQLPort          = 3306                                                               #
31 | $SQLSSL           = 'none'                                                             #
32 | #                                                                                      #
33 | ###   MySQL SSL OPTIONS   ##############################################################
34 | #                                                                                      #
35 | #   Set to 'none' if Powershell and MySQL on same machine (seems to be MySQL bug)      #
36 | #                                                                                      #
37 | #	None       - Do not use SSL.                                                       #
38 | #	Preferred  - Use SSL if the server supports it, but allow connection in all cases. #
39 | #	Required   - Always use SSL. Deny connection if server does not support SSL.       #
40 | #	VerifyCA   - Always use SSL. Validate the CA but tolerate name mismatch.           #
41 | #	VerifyFull - Always use SSL. Fail if the host name is not correct.                 #
42 | #                                                                                      #
43 | ###   FIREWALL VARIABLES   #############################################################
44 | #                                                                                      #
45 | $LANSubnet        = '192.168.1'  # <-- 3 octets only, please                           #
46 | $MailPorts        = '25|465|587|110|995|143|993' # <-- add custom ports if in use      #
47 | $FirewallLog      = 'C:\scripts\hmailserver\FWBan\Firewall\pfirewall.log'              #
48 | #                                                                                      #
49 | ###   INTERVAL VARIABLES   #############################################################
50 | #                                                                                      #
51 | $Interval         = 5   # <-- (minutes) must match the frequency of Win Sched Task     #
52 | $IDSExpire        = 12  # <-- (hours) expire IDS entries that have not resulted in ban #
53 | #                                                                                      #
54 | ###   PHP VARIABLES   ##################################################################
55 | #                                                                                      #
56 | $wwwFolder        = "C:\xampp\htdocs\mydomain\fwban" # <-- www folder location         #
57 | $wwwURI           = "https://firewallban.dynu.net"   # <-- no trailing slash, please   #
58 | #                                                                                      #
59 | ###   EMAIL VARIABLES   ################################################################
60 | #                                                                                      #
61 | $FromAddress      = 'notifier.account@gmail.com'                                       #
62 | $Recipient        = 'me@mydomain.com'                                                  #
63 | $SMTPServer       = 'smtp.gmail.com'                                                   #
64 | $SMTPAuthUser     = 'notifier.account@gmail.com'                                       #
65 | $SMTPAuthPass     = 'supersecretpassword'                                              #
66 | $SMTPPort         = 587                                                                #
67 | $SSL              = 'True'                                                             #
68 | #                                                                                      #
69 | ########################################################################################


--------------------------------------------------------------------------------
/hmsFirewallBanDBSetup.ps1:
--------------------------------------------------------------------------------
  1 | <#
  2 | _  _ _  _  _  _ _    ____ ____ ____ _  _ ____ ____     
  3 | |__| |\/| /_\ | |    [__  |___ |__/ |  | |___ |__/     
  4 | |  | |  |/   \| |___ ___] |___ |  \  \/  |___ |  \     
  5 | ____ _ ____ ____ _ _ _  _  _    _       ___   _  _  _ 
  6 | |___ | |__/ |___ | | | /_\ |    |       |__] /_\ |\ | 
  7 | |    | |  \ |___ |_|_|/   \|___ |___    |__]/   \| \| 
  8 | 
  9 | .SYNOPSIS
 10 | 	Database Setup
 11 | 
 12 | .DESCRIPTION
 13 | 
 14 | .FUNCTIONALITY
 15 | 
 16 | .NOTES
 17 | 
 18 | .EXAMPLE
 19 | 
 20 | #>
 21 | 
 22 | # Include required files
 23 | 
 24 | Try {
 25 | 	.("$PSScriptRoot\Config.ps1")
 26 | 	.("$PSScriptRoot\CommonCode.ps1")
 27 | }
 28 | Catch {
 29 | 	Write-Output "Error while loading supporting PowerShell Scripts" | Out-File -Path "$PSScriptRoot\PSError.log"
 30 | }
 31 | 
 32 | If ($DatabaseType -eq "MSSQL") {
 33 | 
 34 | 	#	Create hm_fwban table if it doesn't exist
 35 | 	$Query = "
 36 | 		IF NOT EXISTS (SELECT 1 FROM SYSOBJECTS WHERE NAME = 'hm_fwban')
 37 | 		BEGIN
 38 | 			CREATE TABLE hm_fwban (
 39 | 				ID int IDENTITY(1,1) NOT NULL PRIMARY KEY,
 40 | 				ipaddress varchar(15) NOT NULL,
 41 | 				timestamp datetime NOT NULL,
 42 | 				ban_reason varchar(192) DEFAULT NULL,
 43 | 				country varchar(192) DEFAULT NULL,
 44 | 				flag int DEFAULT NULL,
 45 | 				helo varchar(192) DEFAULT NULL,
 46 | 				ptr varchar(192) DEFAULT NULL,
 47 | 				rulename varchar(192) DEFAULT NULL
 48 | 			)
 49 | 		END;
 50 | 		"
 51 | 	RunSQLQuery $Query
 52 | 
 53 | 	#	Create hm_fwban_rh table if it doesn't exist
 54 | 	$Query = "
 55 | 		IF NOT EXISTS (SELECT 1 FROM SYSOBJECTS WHERE NAME = 'hm_fwban_rh')
 56 | 		BEGIN
 57 | 			CREATE TABLE hm_fwban_rh (
 58 | 				id int IDENTITY(1,1) NOT NULL PRIMARY KEY,
 59 | 				timestamp datetime NOT NULL,
 60 | 				ipaddress varchar(15) NOT NULL
 61 | 				ipid int DEFAULT NULL,
 62 | 				)
 63 | 		END;
 64 | 		"
 65 | 	RunSQLQuery $Query
 66 | 
 67 | 	#	Create hm_fwban_blocks_ip table if it doesn't exist
 68 | 	$Query = "
 69 | 		IF NOT EXISTS (SELECT 1 FROM SYSOBJECTS WHERE NAME = 'hm_fwban_blocks_ip')
 70 | 		BEGIN
 71 | 			CREATE TABLE hm_fwban_blocks_ip (
 72 | 			  id INT IDENTITY(1,1) NOT NULL,
 73 | 			  ipaddress varchar(15) NOT NULL UNIQUE,
 74 | 			  hits INT,
 75 | 			  lasttimestamp datetime NOT NULL,
 76 | 			  PRIMARY KEY (id)
 77 | 			)
 78 | 		END;
 79 | 	"
 80 | 	RunSQLQuery $Query
 81 | 
 82 | 	#	Create hm_ids table if it doesn't exist
 83 | 	$Query = "
 84 | 	IF NOT EXISTS (SELECT 1 FROM SYSOBJECTS WHERE NAME = 'hm_ids')
 85 | 	BEGIN
 86 | 		CREATE TABLE hm_ids (
 87 | 			timestamp datetime NOT NULL,
 88 | 			ipaddress varchar(15) NOT NULL PRIMARY KEY,
 89 | 			hits int NOT NULL,
 90 | 			country varchar(64) DEFAULT NULL,
 91 | 			helo varchar(128) DEFAULT NULL
 92 | 		)
 93 | 	END;
 94 | 	"
 95 | 	RunSQLQuery $Query
 96 | }
 97 | 
 98 | If ($DatabaseType -eq "MYSQL") {
 99 | 
100 | 	#	Create hm_fwban table if it doesn't exist
101 | 	$Query = "
102 | 		CREATE TABLE IF NOT EXISTS hm_fwban (
103 | 		ID int(11) NOT NULL AUTO_INCREMENT,
104 | 		ipaddress varchar(192) NOT NULL,
105 | 		timestamp datetime NOT NULL,
106 | 		ban_reason varchar(192) DEFAULT NULL,
107 | 		country varchar(192) DEFAULT NULL,
108 | 		flag int(1) DEFAULT NULL,
109 | 		helo varchar(192) DEFAULT NULL,
110 | 		ptr varchar(192) DEFAULT NULL,
111 | 		rulename varchar(192) DEFAULT NULL,
112 | 		PRIMARY KEY (ID),
113 | 		KEY ipaddress (ipaddress)
114 | 		) ENGINE=InnoDB DEFAULT CHARSET=utf8;
115 | 		COMMIT;
116 | 		"
117 | 	RunSQLQuery $Query
118 | 
119 | 	#	Create hm_fwban_rh table if it doesn't exist
120 | 	$Query = "
121 | 		CREATE TABLE IF NOT EXISTS hm_fwban_rh (
122 | 		  id int(24) NOT NULL AUTO_INCREMENT,
123 | 		  ipid INT(22) NULL,
124 | 		  timestamp datetime NOT NULL,
125 | 		  ipaddress varchar(15) NOT NULL,
126 | 		  PRIMARY KEY (id),
127 | 		  KEY timestamp (timestamp)
128 | 		) ENGINE=InnoDB DEFAULT CHARSET=utf8;
129 | 		COMMIT;
130 | 	"
131 | 	RunSQLQuery $Query
132 | 
133 | 	#	Create hm_fwban_blocks_ip table if it doesn't exist
134 | 	$Query = "
135 | 		CREATE TABLE IF NOT EXISTS hm_fwban_blocks_ip (
136 | 		  id INT(22) NOT NULL AUTO_INCREMENT,
137 | 		  ipaddress varchar(15) NOT NULL UNIQUE,
138 | 		  hits INT(8),
139 | 		  lasttimestamp datetime NOT NULL,
140 | 		  PRIMARY KEY (id)
141 | 		  UNIQUE KEY ipaddress (ipaddress)
142 | 		) ENGINE=InnoDB DEFAULT CHARSET=utf8;
143 | 		COMMIT;
144 | 	"
145 | 	RunSQLQuery $Query
146 | 
147 | 	#	Create hm_ids table if it doesn't exist
148 | 	$Query = "
149 | 		CREATE TABLE IF NOT EXISTS hm_ids (
150 | 		  timestamp datetime NOT NULL,
151 | 		  ipaddress varchar(15) NOT NULL,
152 | 		  hits int(8) NOT NULL,
153 | 		  country varchar(64) DEFAULT NULL,
154 | 		  PRIMARY KEY (ipaddress),
155 | 		  UNIQUE KEY ipaddress (ipaddress)
156 | 		) ENGINE=InnoDB DEFAULT CHARSET=utf8;
157 | 		COMMIT;
158 | 	"
159 | 	RunSQLQuery $Query
160 | }
161 | 


--------------------------------------------------------------------------------
/www/release-date-view.php:
--------------------------------------------------------------------------------
  1 | <?php include("head.php") ?>
  2 | 
  3 | <div class="section">
  4 | 
  5 | <?php
  6 | 	include_once("config.php");
  7 | 	include_once("functions.php");
  8 | 
  9 | 	if (isset($_GET['page'])) {
 10 | 		$page = $_GET['page'];
 11 | 		$display_pagination = 1;
 12 | 	} else {
 13 | 		$page = 1;
 14 | 		$total_pages = 1;
 15 | 		$display_pagination = 0;
 16 | 	}
 17 | 	if (isset($_GET['submit'])) {$button = $_GET ['submit'];} else {$button = "";}
 18 | 	if (isset($_GET['search'])) {$search = $_GET['search'];} else {$search = "";}
 19 | 	if (isset($_GET['dateFrom'])) {$dateFrom = $_GET['dateFrom'];} else {$dateFrom = "";}
 20 | 	if (isset($_GET['dateTo'])) {$dateTo = $_GET['dateTo'];} else {$dateFrom = "";}
 21 | 
 22 | 	if (empty($dateFrom)){
 23 | 		echo "You did not put in a beginning date. Both beginning and ending dates are required for date range release even if the range is a single day.<br><br>";
 24 | 	} elseif (empty($dateTo)){
 25 | 		echo "You did not put in an ending date. Both beginning and ending dates are required for date range release even if the range is a single day.<br><br>";
 26 | 	} else {
 27 | 
 28 | 		$no_of_records_per_page = 20;
 29 | 		$offset = ($page-1) * $no_of_records_per_page;
 30 | 		$total_pages_sql = $pdo->prepare("
 31 | 			SELECT 
 32 | 				Count( * ) AS count 
 33 | 			FROM hm_fwban 
 34 | 			WHERE timestamp BETWEEN '{$dateFrom} 00:00:00' AND '{$dateTo} 23:59:59' AND (flag IS NULL OR flag=3)
 35 | 		");
 36 | 		$total_pages_sql->execute();
 37 | 		$total_rows = $total_pages_sql->fetchColumn();
 38 | 		$total_pages = ceil($total_rows / $no_of_records_per_page);
 39 | 
 40 | 		$sql = $pdo->prepare("
 41 | 			SELECT 
 42 | 				id, 
 43 | 				".DBFormatDate('timestamp', '%y/%m/%d %T')." as TimeStamp, 
 44 | 				ipaddress, 
 45 | 				ban_reason, 
 46 | 				country, 
 47 | 				flag 
 48 | 			FROM hm_fwban 
 49 | 			WHERE timestamp BETWEEN '{$dateFrom} 00:00:00' AND '{$dateTo} 23:59:59' AND (flag IS NULL OR flag=3) 
 50 | 			".DBLimitRowsWithOffset('TimeStamp','DESC',0,0,$offset,$no_of_records_per_page)
 51 | 		);
 52 | 		$sql->execute();
 53 | 
 54 | 		if ($total_rows == 1){$singular = '';} else {$singular= 's';}
 55 | 		if ($total_rows == 0){
 56 | 			echo "<br><br>No unreleased results for date range \"<b>".$dateFrom."</b>\" to \"<b>".$dateTo."</b>\"";
 57 | 		} else {
 58 | 			echo "<h2>What would you like to release?</h2>";
 59 | 			echo "Click \"NO\" under column \"RS\" to release a single address.<br><br>";
 60 | 			echo "<a href=\"./release-date.php?dateFrom=".$dateFrom."&dateTo=".$dateTo."&submit=Release\" onclick=\"return confirm('Are you sure you want to release all IPs for date range ".$dateFrom." to ".$dateTo."?')\">Click here</a> to release all.<br>";
 61 | 			echo "<br><br>";
 62 | 			echo "Results for date range \"<b>".$dateFrom."</b>\" to \"<b>".$dateTo."</b>\": ".number_format($total_rows)." IP".$singular." (Page: ".number_format($page)." of ".number_format($total_pages).")<br>";
 63 | 			echo "<table class='section'>
 64 | 				<tr>
 65 | 					<th>Timestamp</th>
 66 | 					<th>IP Address</th>
 67 | 					<th>Reason</th>
 68 | 					<th>Country</th>
 69 | 					<th>RS</th>
 70 | 				</tr>";
 71 | 			while($row = $sql->fetch(PDO::FETCH_ASSOC)){
 72 | 				echo "<tr>";
 73 | 
 74 | 				echo "<td>" . $row['TimeStamp'] . "</td>";
 75 | 				echo "<td><a href=\"search.php?submit=Search&search=" . $row['ipaddress'] . "\">" . $row['ipaddress'] . "</a></td>";
 76 | 				echo "<td>" . $row['ban_reason'] . "</td>";
 77 | 				echo "<td><a href=\"https://ipinfo.io/" . $row['ipaddress'] . "\"  target=\"_blank\">" . $row['country'] . "</a></td>";
 78 | 				if($row['flag'] === NULL || $row['flag'] == 3) echo "<td><a href=\"./release-ip.php?submit=Release&ipRange=".$row['ipaddress']."\" onclick=\"return confirm('Are you sure you want to release ".$row['ipaddress']."?')\">No</a></td>";
 79 | 				else echo "<td>YES</td>";
 80 | 
 81 | 				echo "</tr>";
 82 | 			}
 83 | 			echo "</table>";
 84 | 
 85 | 			if ($total_pages == 1){
 86 | 				echo "";
 87 | 			} else {
 88 | 				echo "<ul>";
 89 | 					if($page <= 1){echo "<li>First </li>";} else {echo "<li><a href=\"?submit=Search&dateFrom=".$dateFrom."&dateTo=".$dateTo."&page=1\">First </a><li>";}
 90 | 					if($page <= 1){echo "<li>Prev </li>";} else {echo "<li><a href=\"?submit=Search&dateFrom=".$dateFrom."&dateTo=".$dateTo."&page=".($page - 1)."\">Prev </a></li>";}
 91 | 					if($page >= $total_pages){echo "<li>Next </li>";} else {echo "<li><a href=\"?submit=Search&dateFrom=".$dateFrom."&dateTo=".$dateTo."&page=".($page + 1)."\">Next </a></li>";}
 92 | 					if($page >= $total_pages){echo "<li>Last</li>";} else {echo "<li><a href=\"?submit=Search&dateFrom=".$dateFrom."&dateTo=".$dateTo."&page=".$total_pages."\">Last</a></li>";}
 93 | 				echo "</ul>";
 94 | 			}
 95 | 		}
 96 | 	}
 97 | 	echo "<br>";
 98 | ?>
 99 | 
100 | </div>
101 | 
102 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/www/reban-date-view.php:
--------------------------------------------------------------------------------
  1 | <?php include("head.php") ?>
  2 | 
  3 | <div class="section">
  4 | 
  5 | <?php
  6 | 	include_once("config.php");
  7 | 	include_once("functions.php");
  8 | 
  9 | 	if (isset($_GET['page'])) {
 10 | 		$page = $_GET['page'];
 11 | 		$display_pagination = 1;
 12 | 	} else {
 13 | 		$page = 1;
 14 | 		$total_pages = 1;
 15 | 		$display_pagination = 0;
 16 | 	}
 17 | 	if (isset($_GET['submit'])) {$button = $_GET ['submit'];} else {$button = "";}
 18 | 	if (isset($_GET['search'])) {$search = $_GET['search'];} else {$search = "";}
 19 | 	if (isset($_GET['dateFrom'])) {$dateFrom = $_GET['dateFrom'];} else {$dateFrom = "";}
 20 | 	if (isset($_GET['dateTo'])) {$dateTo = $_GET['dateTo'];} else {$dateFrom = "";}
 21 | 
 22 | 	if (empty($dateFrom)){
 23 | 		echo "<br><br>You did not put in a beginning date. Both beginning and ending dates are required for date range release even if the range is a single day.<br><br>";
 24 | 	} elseif (empty($dateTo)){
 25 | 		echo "<br><br>You did not put in an ending date. Both beginning and ending dates are required for date range release even if the range is a single day.<br><br>";
 26 | 	} else {
 27 | 
 28 | 		$no_of_records_per_page = 20;
 29 | 		$offset = ($page-1) * $no_of_records_per_page;
 30 | 		$total_pages_sql = $pdo->prepare("
 31 | 			SELECT 
 32 | 				Count( * ) AS count 
 33 | 			FROM hm_fwban 
 34 | 			WHERE timestamp BETWEEN '{$dateFrom} 00:00:00' AND '{$dateTo} 23:59:59' AND (flag=1 OR flag=2)
 35 | 		");
 36 | 		$total_pages_sql->execute();
 37 | 		$total_rows = $total_pages_sql->fetchColumn();
 38 | 		$total_pages = ceil($total_rows / $no_of_records_per_page);
 39 | 
 40 | 		$sql = $pdo->prepare("
 41 | 			SELECT 
 42 | 				id, 
 43 | 				".DBFormatDate('timestamp', '%y/%m/%d %T')." as TimeStamp, 
 44 | 				ipaddress, 
 45 | 				ban_reason, 
 46 | 				country, 
 47 | 				flag, 
 48 | 				helo 
 49 | 			FROM hm_fwban 
 50 | 			WHERE timestamp BETWEEN '{$dateFrom} 00:00:00' AND '{$dateTo} 23:59:59' AND (flag=1 OR flag=2) 
 51 | 			".DBLimitRowsWithOffset('TimeStamp','DESC',0,0,$offset,$no_of_records_per_page)
 52 | 		);
 53 | 		$sql->execute();
 54 | 
 55 | 		if ($total_rows == 1){$singular = '';} else {$singular= 's';}
 56 | 		if ($total_rows == 0){
 57 | 			echo "<br><br>No previously released results for date range \"<b>".$dateFrom."</b>\" to \"<b>".$dateTo."</b>\"";
 58 | 		} else {
 59 | 			echo "<h2>What would you like to ban?</h2>";
 60 | 			echo "Click \"YES\" under column \"RS\" to re-ban a single address.<br><br>";
 61 | 			echo "<a href=\"./reban-date.php?dateFrom=".$dateFrom."&dateTo=".$dateTo."&submit=Reban\" onclick=\"return confirm('Are you sure you want to re-ban all released IPs for date range ".$dateFrom." to ".$dateTo."?')\">Click here</a> to re-ban all.<br>";
 62 | 			echo "<br><br>";
 63 | 			echo "Results for released IPs in date range \"<b>".$dateFrom."</b>\" to \"<b>".$dateTo."</b>\": ".number_format($total_rows)." IP".$singular." (Page: ".number_format($page)." of ".number_format($total_pages).")<br>";
 64 | 			echo "<table class='section'>
 65 | 				<tr>
 66 | 					<th>Timestamp</th>
 67 | 					<th>IP Address</th>
 68 | 					<th>Reason</th>
 69 | 					<th>Country</th>
 70 | 					<th>HELO</th>
 71 | 					<th>RS</th>
 72 | 				</tr>";
 73 | 			while($row = $sql->fetch(PDO::FETCH_ASSOC)){
 74 | 
 75 | 				echo "<tr>";
 76 | 
 77 | 				echo "<td>".$row['TimeStamp']."</td>";
 78 | 				echo "<td><a href=\"search.php?submit=Search&search=".$row['ipaddress']."\">".$row['ipaddress']."</a></td>";
 79 | 				echo "<td>".$row['ban_reason']."</td>";
 80 | 				echo "<td><a href=\"https://ipinfo.io/" . $row['ipaddress'] . "\"  target=\"_blank\">" . $row['country'] . "</a></td>";
 81 | 				echo "<td>".$row['helo']."</td>";
 82 | 				if($row['flag'] == 1 || $row['flag'] == 2) echo "<td><a href=\"./reban-ip.php?submit=Reban&ipRange=".$row['ipaddress']."\" onclick=\"return confirm('Are you sure you want to re-ban IP ".$row['ipaddress']."?')\">YES</a></td>";
 83 | 				else echo "<td>NO</td>";
 84 | 
 85 | 				echo "</tr>";
 86 | 			}
 87 | 			echo "</table>";
 88 | 
 89 | 			echo "<ul>";
 90 | 				if($page <= 1){echo "<li>First </li>";} else {echo "<li><a href=\"?submit=Search&dateFrom=".$dateFrom."&dateTo=".$dateTo."&page=1\">First </a><li>";}
 91 | 				if($page <= 1){echo "<li>Prev </li>";} else {echo "<li><a href=\"?submit=Search&dateFrom=".$dateFrom."&dateTo=".$dateTo."&page=".($page - 1)."\">Prev </a></li>";}
 92 | 				if($page >= $total_pages){echo "<li>Next </li>";} else {echo "<li><a href=\"?submit=Search&dateFrom=".$dateFrom."&dateTo=".$dateTo."&page=".($page + 1)."\">Next </a></li>";}
 93 | 				if($page >= $total_pages){echo "<li>Last</li>";} else {echo "<li><a href=\"?submit=Search&dateFrom=".$dateFrom."&dateTo=".$dateTo."&page=".$total_pages."\">Last</a></li>";}
 94 | 			echo "</ul>";
 95 | 			echo "<br>RS = Released Status (removal from firewall). Clicking on \"YES\" will re-ban the IP.<br><br>";
 96 | 		}
 97 | 	}
 98 | 	echo "<br>";
 99 | ?>
100 | </div>
101 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/hmsConsolidateRules.ps1:
--------------------------------------------------------------------------------
  1 | <#
  2 | _  _ _  _  _  _ _    ____ ____ ____ _  _ ____ ____     
  3 | |__| |\/| /_\ | |    [__  |___ |__/ |  | |___ |__/     
  4 | |  | |  |/   \| |___ ___] |___ |  \  \/  |___ |  \     
  5 | ____ _ ____ ____ _ _ _  _  _    _       ___   _  _  _ 
  6 | |___ | |__/ |___ | | | /_\ |    |       |__] /_\ |\ | 
  7 | |    | |  \ |___ |_|_|/   \|___ |___    |__]/   \| \| 
  8 | 
  9 | .SYNOPSIS
 10 | 	Powershell script to consolidate firewall rules
 11 | 
 12 | .DESCRIPTION
 13 | 	Consolidates rules from one firewall rule per IP to one firewall rule per day containing all IPs for the previous day
 14 | 
 15 | .FUNCTIONALITY
 16 | 	* Queries database for previous day's bans
 17 | 	* Creates new firewall containing all of previous day's banned IPs 
 18 | 	* Deletes all of previous day's one-IP-per firewall rules
 19 | 
 20 | .NOTES
 21 | 	* Create scheduled task to run once per day at 12:01 am
 22 | 	
 23 | .EXAMPLE
 24 | 
 25 | #>
 26 | 
 27 | # Include required files
 28 | Try {
 29 | 	.("$PSScriptRoot\Config.ps1")
 30 | 	.("$PSScriptRoot\CommonCode.ps1")
 31 | }
 32 | Catch {
 33 | 	Write-Output "$((get-date).ToString(`"yy/MM/dd HH:mm:ss.ff`")) : ERROR : Unable to load supporting PowerShell Scripts : $query `n$Error[0]" | out-file "$PSScriptRoot\PSError.log" -append
 34 | }
 35 | 
 36 | $ConsFolder = "$PSScriptRoot\ConsolidateRules"
 37 | 
 38 | #	Create ConsolidateRules folder if it doesn't exist
 39 | If (-not(Test-Path $ConsFolder)) {
 40 | 	md $ConsFolder
 41 | }
 42 | 
 43 | #	Delete all files in the Consolidated Rules folder before beginning
 44 | Get-ChildItem -Path $ConsFolder -Include * | foreach { $_.Delete()}
 45 | 
 46 | #	Get BanDate (Yesterday) and establish csv
 47 | $BanDate = (Get-Date).AddDays(-1).ToString("yyyy-MM-dd")
 48 | 
 49 | $Query = "SELECT COUNT(id) AS countid FROM hm_fwban WHERE $(DBCastDateTimeFieldAsDate('timestamp')) LIKE '$BanDate%' AND flag IS NULL"
 50 | RunSQLQuery $Query | ForEach {
 51 | 	[int]$CountIP = $_.countid
 52 | }
 53 | 
 54 | $N = 0
 55 | $Rows = 400
 56 | $Limit = [math]::ceiling($CountIP / $Rows)
 57 | 
 58 | If ($Limit -eq 0){
 59 | 	Exit
 60 | }
 61 | ElseIf ($Limit -eq 1){
 62 | 	$ConsRules = "$ConsFolder\hMS FWBan "+$BanDate+".csv"
 63 | 	$Query = "
 64 | 		SELECT 
 65 | 			ipaddress 
 66 | 		FROM hm_fwban 
 67 | 		WHERE $(DBCastDateTimeFieldAsDate('timestamp')) LIKE '$BanDate%' AND flag IS NULL 
 68 | 		ORDER BY timestamp DESC
 69 | 		$(DBLimitRowsWithOffset $($N * $Rows) $Rows)
 70 | 	"
 71 | 	RunSQLQuery $Query | Export-CSV $ConsRules
 72 | }
 73 | Else {
 74 | 	Do {
 75 | 		$X = ($N).ToString("0")
 76 | 		$ConsRules = "$ConsFolder\hMS FWBan "+$BanDate+"_"+$X+".csv"
 77 | 		$Query = "
 78 | 			SELECT 
 79 | 				ipaddress 
 80 | 			FROM hm_fwban 
 81 | 			WHERE $(DBCastDateTimeFieldAsDate('timestamp')) LIKE '$BanDate%' AND flag IS NULL 
 82 | 			ORDER BY timestamp DESC
 83 | 			$(DBLimitRowsWithOffset $($N * $Rows) $Rows)
 84 | 		"
 85 | 		RunSQLQuery $Query | Export-CSV $ConsRules
 86 | 		
 87 | 		$N++
 88 | 	}
 89 | 	Until ($N -eq $Limit)
 90 | }
 91 | 
 92 | $RegexName = '^hMS\sFWBan\s202[0-9]\-[0-9]{2}\-[0-9]{2}(_[0-9]{1,3})?\.csv$'
 93 | $RegexIP = '(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)'
 94 | Get-ChildItem $ConsFolder | Where-Object {$_.name -match "hMS FWBan $BanDate"} | ForEach {
 95 | 	$FileName = $_.name
 96 | 	$FilePathName = "$ConsFolder\$FileName"
 97 | 	$RuleName = ($FileName).Replace(".csv", "")
 98 | 	import-csv -Path $FilePathName | ForEach {
 99 | 		$IP = $_.ipaddress
100 | 		$Query = "UPDATE hm_fwban SET rulename = '$RuleName' WHERE ipaddress = '$IP'"
101 | 		RunSQLQuery($Query)
102 | 		Write-Output $IP
103 | 	}  | Out-File "$FilePathName.txt"
104 | 
105 | 	#	Make sure txt file path exists
106 | 	If (Test-Path "$FilePathName.txt"){
107 | 		$RuleData = Get-Content "$FilePathName.txt" | Select-Object -First 1
108 | 		#	Make sure txt file is populated with IP data (if not, you'll have a rule banning all local and all remote IPs)
109 | 		If ($RuleData -match $RegexIP){
110 | 
111 | 			#	Replace all newlines and last comma in order to create a single string that can be used to populate firewall rule remoteaddress	
112 | 			$NL = [System.Environment]::NewLine
113 | 			$Content=[String] $Template= [System.IO.File]::ReadAllText("$FilePathName.txt")
114 | 			$Content.Replace($NL,",") | Out-File "$FilePathName.rule.txt"
115 | 			(Get-Content -Path "$FilePathName.rule.txt") -Replace ',$','' | Set-Content -Path "$FilePathName.rule.txt"
116 | 
117 | 			#	Add firewall rule with string containing all IPs from yesterday's bans
118 | 			& netsh advfirewall firewall add rule name="$RuleName" description="FWB Rules for $BanDate" dir=in interface=any action=block remoteip=$(Get-Content "$FilePathName.rule.txt")
119 | 
120 | 			#	Read csv and delete each of yesterday's individual IP firewall rules
121 | 			Import-CSV $FilePathName | ForEach {
122 | 				$IP = $_.ipaddress
123 | 				& netsh advfirewall firewall delete rule name=`"$IP`"
124 | 			}
125 | 		}
126 | 	}
127 | }
128 | 


--------------------------------------------------------------------------------
/hmsDuplicateRuleFinder.ps1:
--------------------------------------------------------------------------------
  1 | <#
  2 | _  _ _  _  _  _ _    ____ ____ ____ _  _ ____ ____     
  3 | |__| |\/| /_\ | |    [__  |___ |__/ |  | |___ |__/     
  4 | |  | |  |/   \| |___ ___] |___ |  \  \/  |___ |  \     
  5 | ____ _ ____ ____ _ _ _  _  _    _       ___   _  _  _ 
  6 | |___ | |__/ |___ | | | /_\ |    |       |__] /_\ |\ | 
  7 | |    | |  \ |___ |_|_|/   \|___ |___    |__]/   \| \| 
  8 | 
  9 | .SYNOPSIS
 10 | 	Deduplicate + De-Orphan Firewall Rules
 11 | 
 12 | .DESCRIPTION
 13 | 	Removes duplicate firewall rules and orphans (rules that should have been deleted upon release)
 14 | 
 15 | .FUNCTIONALITY
 16 | 	* Reads firewall rules & selects only ones named as IP (will not select consolidated date rules)
 17 | 	* Finds duplicates in list and deletes them
 18 | 	* Finds orphans and deletes them
 19 | 
 20 | .NOTES
 21 | 	* Create scheduled task to run daily
 22 | 	* Best time to run scheduled task is immediately after running hmsConsolidateRules.ps1
 23 | 	
 24 | .EXAMPLE
 25 | 
 26 | #>
 27 | 
 28 | # Include required files
 29 | Try {
 30 | 	.("$PSScriptRoot\Config.ps1")
 31 | 	.("$PSScriptRoot\CommonCode.ps1")
 32 | }
 33 | Catch {
 34 | 	Write-Output "Error while loading supporting PowerShell Scripts" | Out-File -Path "$PSScriptRoot\PSError.log"
 35 | }
 36 | 
 37 | #	Establish Duplicate Rules Folder
 38 | $DupFolder = "$PSScriptRoot\DuplicateRules"
 39 | 
 40 | #	Create ConsolidateRules folder if it doesn't exist
 41 | If (-not(Test-Path $DupFolder)) {
 42 | 	md $DupFolder
 43 | }
 44 | 
 45 | #	Delete all files in the Duplicate Rules Folder - don't want to confuse rule creation
 46 | Get-ChildItem -Path $DupFolder -Include * | foreach { $_.Delete()}
 47 | 
 48 | #	Establish files and regex
 49 | $FWRuleList = "$DupFolder\fwrulelist.txt"
 50 | $DupList = "$DupFolder\fwduplist.txt"
 51 | $RegexIP = '(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)'
 52 | $RegexConsName = 'hMS\sFWBan\s20[0-9]{2}\-[0-9]{2}\-[0-9]{2}(_[0-9]{2})?'
 53 | $NL = [System.Environment]::NewLine
 54 | 
 55 | #	Read rules from firewall and output only ones with IP name (unconsolidated rules)
 56 | Get-NetshFireWallrule ("all") | ForEach {
 57 | 	If (($_.RuleName -match $RegexIP) -or ($_.RuleName -match $RegexConsName)){
 58 | 		Write-Output $_.RuleName
 59 | 	}
 60 | } | out-file $FWRuleList
 61 | 
 62 | #	Find duplicates and output as list
 63 | $A = Get-Content $FWRuleList
 64 | $HT = @{}
 65 | $A | ForEach {$HT["$_"] += 1}
 66 | #	For each duplicate, get RemoteIPs and delete firewall ALL duplicate rules
 67 | $HT.Keys | Where {$HT["$_"] -gt 1} | ForEach {
 68 | 	$RuleName = $_
 69 | 	$RuleNameFile = "$DupFolder\$RuleName.txt"
 70 | 	Get-NetshFireWallrule $RuleName | ForEach {
 71 | 		Write-Output $_.RemoteIP
 72 | 	} | Out-File $RuleNameFile
 73 | 	& netsh advfirewall firewall delete rule name=`"$RuleName`"
 74 | }
 75 | 
 76 | #	Look in Duplicate Rules folder and massage the data
 77 | Get-ChildItem $DupFolder | Where-Object {($_.name -match "$RegexIP.txt") -or ($_.name -match "$RegexConsName.txt")} | ForEach {
 78 | 	$RuleNameFileIP = $_.name
 79 | 	$RuleData = Get-Content -Path "$DupFolder\$RuleNameFileIP" | Select-Object -First 1
 80 | 	#	Make sure txt file is populated with IP data (if not, you'll have a rule banning all local and all remote IPs)
 81 | 	If ($RuleData -match $RegexIP){
 82 | 		#	Remove duplicate RemoteIP strings, remove /32 from RemoteIP, remove NewLines, remove comma at end of RemoteIP string, then add one firewall rule to replace duplicates
 83 | 		Get-Content -Path "$DupFolder\$RuleNameFileIP" | Select -First 1 | Out-File "$DupFolder\$RuleNameFileIP.ip.txt"
 84 | 		(Get-Content -Path "$DupFolder\$RuleNameFileIP.ip.txt") -Replace '\/32','' | Set-Content -Path "$DupFolder\$RuleNameFileIP.ip.txt"
 85 | 		(Get-Content -Path "$DupFolder\$RuleNameFileIP.ip.txt") -Replace $NL,'' | Set-Content -Path "$DupFolder\$RuleNameFileIP.ip.txt"
 86 | 		(Get-Content -Path "$DupFolder\$RuleNameFileIP.ip.txt") -Replace ',$','' | Set-Content -Path "$DupFolder\$RuleNameFileIP.ip.txt"
 87 | 		#	Duplicate rule could be either today's IP name or consolidated date name.
 88 | 		If ($RuleNameFileIP -match $RegexIP){
 89 | 			$FWRNIP = $RuleNameFileIP.Split(".")
 90 | 			$FWRN = $FWRNIP[0]+"."+$FWRNIP[1]+"."+$FWRNIP[2]+"."+$FWRNIP[3]
 91 | 		} Else {
 92 | 			$FWRN = $RuleNameFileIP.Split(".")[0]
 93 | 		}
 94 | 		#	Double check rule has RemoteIP data in case something went wrong with naming scheme
 95 | 		If ((Get-Content -Path "$DupFolder\$RuleNameFileIP") -match $RegexIP){
 96 | 			& netsh advfirewall firewall add rule name="$FWRN" description="Rule added $((get-date).ToString('MM/dd/yy')) - DUP" dir=in interface=any action=block remoteip=$(Get-Content -Path "$DupFolder\$FWRN.txt.ip.txt")
 97 | 		} Else {
 98 | 			$EmailBody = "Warning! hmsDuplicateRuleFinder attempting to create rule $FWRN which has NO remote IP! Can result in blocking 100% of inbound traffic - locking you OUT. Contact developer at https://github.com/palinkas-jo-reggelt/hMailServer-Firewall-Ban/issues for solution."
 99 | 			EmailResults
100 | 		}
101 | 	}
102 | }


--------------------------------------------------------------------------------
/BlockCount.ps1:
--------------------------------------------------------------------------------
  1 | <#
  2 | _  _ _  _  __  _ _    ____ ____ ____ _  _ ____ ____     
  3 | |__| |\/| /__\ | |    [__  |___ |__/ |  | |___ |__/     
  4 | |  | |  |/    \| |___ ___] |___ |  \  \/  |___ |  \     
  5 |                                                         
  6 | ____ _ ____ ____ _ _ _  __  _    _       ___   __  _  _ 
  7 | |___ | |__/ |___ | | | /__\ |    |       |__] /__\ |\ | 
  8 | |    | |  \ |___ |_|_|/    \|___ |___    |__]/    \| \| 
  9 | 
 10 | .SYNOPSIS
 11 | 	Analysis of Blocked IPs (firewall log drops)
 12 | 
 13 | .DESCRIPTION
 14 | 	Counts number of firewall drops for a given number of days
 15 | 
 16 | .FUNCTIONALITY
 17 | 	Run whenever you're curious
 18 | 
 19 | .NOTES
 20 | 	Script runs until there are 0 firewall drops for a given number of days
 21 | 	
 22 | .EXAMPLE
 23 | 
 24 | #>
 25 | 
 26 | # Include required files
 27 | Try {
 28 | 	.("$PSScriptRoot\Config.ps1")
 29 | 	.("$PSScriptRoot\CommonCode.ps1")
 30 | }
 31 | Catch {
 32 | 	Write-Output "$((get-date).ToString(`"yy/MM/dd HH:mm:ss.ff`")) : ERROR : Unable to load supporting PowerShell Scripts : $query `n$Error[0]" | out-file "$PSScriptRoot\PSError.log" -append
 33 | }
 34 | 
 35 | $EmailBody = "$PSScriptRoot\BlockCountEmailBody.txt"
 36 | 
 37 | #	Delete old files if exist
 38 | If (Test-Path $EmailBody) {Remove-Item -Force -Path $EmailBody}
 39 | 
 40 | Write-Output '
 41 | <!DOCTYPE html> 
 42 | <html>
 43 | <head>
 44 | <title>hMailServer Firewall Ban</title>
 45 | <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
 46 | <meta http-equiv="Content-Style-Type" content="text/css">
 47 | <meta name="viewport" content="width=device-width, initial-scale=1">
 48 | </head>
 49 | <body>
 50 | <div class="wrapper">
 51 | ' | Out-File $EmailBody -append
 52 | 
 53 | Write-Output '
 54 | 
 55 | hMailServer Firewall Ban Project<br>
 56 | Block Count<br>
 57 | Count repeat drops from firewall log<br><br>
 58 | 
 59 | ' | out-file $EmailBody -append
 60 | 
 61 | $StartTime = get-date
 62 | 
 63 | Write-Output "Run : $(Get-Date -f g)<br><br>" | out-file $EmailBody -append
 64 | 
 65 | #	Find oldest database entry and count days.
 66 | $Query = "Select MIN(timestamp) AS mints FROM hm_fwban"
 67 | MySQLQuery($Query) | ForEach {
 68 | 	$Oldest = $_.mints
 69 | }
 70 | $NumDays = (New-TimeSpan $Oldest $(Get-Date)).Days
 71 | 
 72 | Write-Output ("{0,7} : Number of days data in database<br><br>" -f ($NumDays).ToString("#,###")) | out-file $EmailBody -append
 73 | 
 74 | #	Count number of bans in firewall ban database
 75 | $Query = "Select COUNT(ipaddress) AS countip from hm_fwban WHERE flag IS NULL"
 76 | MySQLQuery($Query) | ForEach {
 77 | 	$TotalRules = $_.countip
 78 | }
 79 | Write-Output ("{0,7} : Total number of IPs banned<br><br>" -f ($TotalRules).ToString("#,###")) | out-file $EmailBody -append
 80 | 
 81 | #	Count number of distinct IPs recorded in repeat hit database
 82 | $Query = "Select COUNT(DISTINCT(ipaddress)) AS totalreturnips, COUNT(ipaddress) AS totalhits FROM hm_fwban_rh"
 83 | MySQLQuery($Query) | ForEach {
 84 | 	$TotalReturnIPs = $_.totalreturnips
 85 | }
 86 | 
 87 | #	Subtract distinct IPs in RH database from number of bans in FWB database to derive number of FWBans that never returned
 88 | $PercentReturns = ([int]$TotalReturnIPs / [int]$TotalRules).ToString("P")
 89 | $NeverBlocked = ([int]$TotalRules - [int]$TotalReturnIPs)
 90 | $PercentNever = ([int]$NeverBlocked / [int]$TotalRules).ToString("P")
 91 | Write-Output ("{0,7} : {1,6} : Number of banned IPs that never returned<br><br>" -f ($NeverBlocked).ToString("#,###"), $PercentNever) | out-file $EmailBody -append
 92 | 
 93 | #	Find number of distinct IPs that were blocked for a given number of days and continue until no results are found
 94 | $a = 0
 95 | Write-Output "
 96 | 	<table cellpadding='5'>
 97 | 	<tr style='text-align:center;'><td>No. of banned IPs</td><td>Percent Returns</td><td>Returned at least</td></tr>" | out-file $EmailBody -append
 98 | Do {
 99 | 	$Query = "SELECT COUNT(*) AS countips FROM (SELECT ipaddress, COUNT(DISTINCT(DATE(timestamp))) AS countdate FROM hm_fwban_rh GROUP BY ipaddress HAVING countdate > $a) AS returnhits"
100 | 	MySQLQuery($Query) | ForEach {
101 | 		$ReturnIPs = $_.countips
102 | 	}
103 | 	$PercentReturns = ($ReturnIPs / $TotalRules)
104 | 	If ($ReturnIPs -lt 1) {
105 | 		Write-Output "</table><br>No more results<br><br>" | out-file $EmailBody -append
106 | 		$TimeElapsed = (New-TimeSpan $StartTime $(get-date))
107 | 		If (($TimeElapsed).Minutes -eq 1) {$sm = ""} Else {$sm = "s"}
108 | 		If (($TimeElapsed).Seconds -eq 1) {$ss = ""} Else {$ss = "s"}
109 | 		Write-Output ("Time Elapsed: {0:%m} minute$sm {0:%s} second$ss" -f $TimeElapsed) | out-file $EmailBody -append
110 | 	} Else {
111 | 		If ($a -eq 0) {$sd = ""} Else {$sd = "s"}
112 | 		Write-Output ("<tr style='text-align:center;'><td> {0,7} </td><td> {1,6} </td><td><a href='$wwwURI/blocks-view.php?submit=Search&days=$($a + 1)'>$($a + 1) day$sd</a></td></tr>" -f ($ReturnIPs).ToString("#,###"), $PercentReturns.ToString("P")) | out-file $EmailBody -append
113 | 	}
114 | 	$a++
115 | } Until ($ReturnIPs -lt 1)
116 | 
117 | Write-Output '
118 | </table>
119 | <br><br>
120 | <div class="footer"></div>
121 | </div> <!-- end WRAPPER -->
122 | </body>
123 | </html>
124 | ' | Out-File $EmailBody -append
125 | 
126 | $HTML = 'True'
127 | EmailResults $HTML


--------------------------------------------------------------------------------
/www/repeats-date.php:
--------------------------------------------------------------------------------
  1 | <?php include("head-r.php") ?>
  2 | <?php
  3 | 	include_once("config.php");
  4 | 	include_once("functions.php");
  5 | 
  6 | 	if (isset($_GET['page'])) {
  7 | 		$page = $_GET['page'];
  8 | 		$display_pagination = 1;
  9 | 	} else {
 10 | 		$page = 1;
 11 | 		$total_pages = 1;
 12 | 		$display_pagination = 0;
 13 | 	}
 14 | 	if (isset($_GET['submit'])) {$button = $_GET ['submit'];} else {$button = "";}
 15 | 	if (isset($_GET['dateFrom'])) {$dateFrom = $_GET['dateFrom'];} else {$dateFrom = "";}
 16 | 	if (isset($_GET['dateTo'])) {$dateTo = $_GET['dateTo'];} else {$dateTo = "";}
 17 | 	if (isset($_GET['RS'])) {$RS = $_GET['RS'];} else {$RS = "";}
 18 |   
 19 | 	echo "<div class='section'>";
 20 | 	echo "<h2>Search a date range for connections blocked by firewall:</h2>";
 21 | 	echo "Enter start & end dates and click to search.<br><br>";
 22 | 	echo "<form autocomplete='off' action='repeats-date.php' method='GET'>";
 23 | 	echo "<table>";
 24 | 	echo "<tr><td>Starting Date: </td><td><input type='text' id='dateFrom' name='dateFrom' placeholder='Starting Date...' value='".$dateFrom."' /></td></tr>";
 25 | 	echo "<tr><td>Ending Date: </td><td><input type='text' id='dateTo' name='dateTo' placeholder='Ending Date...' value='".$dateTo."' /></td></tr>";
 26 | 	echo "<tr><td><input type='submit' name='submit' value='Search' /></td></tr>";
 27 | 	echo "</table>";
 28 | 	echo "</form>";
 29 | 	echo "</div>";
 30 | 	echo "<div class='section'>";
 31 | 
 32 | 	if (empty($dateFrom)){
 33 | 		echo "Note: Range can be a single day, but start and end dates must both be filled in.<br><br>";
 34 | 	} elseif (empty($dateTo)){
 35 | 		echo "You did not put in an ending date. Both beginning and ending dates are required for date range release even if the range is a single day.<br><br>";
 36 | 	} else {
 37 |   
 38 | 		$no_of_records_per_page = 20;
 39 | 		$offset = ($page-1) * $no_of_records_per_page;
 40 | 		
 41 | 		$total_pages_sql = $pdo->prepare("
 42 | 			SELECT 
 43 | 				COUNT(DISTINCT(ipaddress)) 
 44 | 			FROM (
 45 | 				SELECT * 
 46 | 				FROM hm_fwban_rh 
 47 | 				WHERE '".$dateFrom." 00:00:00' <= timestamp
 48 | 			) AS A 
 49 | 			WHERE timestamp <= '".$dateTo." 23:59:59'
 50 | 		");
 51 | 		$total_pages_sql->execute();
 52 | 		$total_rows = $total_pages_sql->fetchColumn();
 53 | 		$total_pages = ceil($total_rows / $no_of_records_per_page);
 54 | 
 55 | 		$sql = $pdo->prepare("
 56 | 			SELECT
 57 | 				a.TimeStamp,
 58 | 				a.ipaddress,
 59 | 				b.ban_reason,
 60 | 				b.country,
 61 | 				a.countip
 62 | 			FROM
 63 | 			(
 64 | 				SELECT 
 65 | 					ipaddress, 
 66 | 					COUNT(ipaddress) AS countip, 
 67 | 					".DBFormatDate('timestamp', '%y/%m/%d')." as TimeStamp
 68 | 				FROM (
 69 | 					SELECT * 
 70 | 					FROM hm_fwban_rh 
 71 | 					WHERE '".$dateFrom." 00:00:00' <= timestamp
 72 | 				) AS A 
 73 | 				WHERE timestamp <= '".$dateTo." 23:59:59'
 74 | 				GROUP BY ipaddress
 75 | 			) AS a
 76 | 			JOIN
 77 | 			(
 78 | 				SELECT 
 79 | 					ipaddress, 
 80 | 					country, 
 81 | 					ban_reason
 82 | 				FROM hm_fwban
 83 | 			) AS b
 84 | 			ON a.ipaddress = b.ipaddress
 85 | 			GROUP BY a.ipaddress
 86 | 			".DBLimitRowsWithOffset('a.TimeStamp','DESC',0,0,$offset,$no_of_records_per_page)
 87 | 		);
 88 | 		$sql->execute();
 89 | 
 90 | 		if ($total_rows == 1){$singular = '';} else {$singular= 's';}
 91 | 		if ($total_rows == 0){
 92 | 			echo "<br><br>No results for date range \"<b>".$dateFrom."</b>\" to \"<b>".$dateTo."</b>\"".$RSres;
 93 | 		} else {
 94 | 			echo "Results for date range \"<b>".$dateFrom."</b>\" to \"<b>".$dateTo."</b>\": ".number_format($total_rows)." IP".$singular." (Page: ".number_format($page)." of ".number_format($total_pages).")<br>";
 95 | 			echo "<table class='section'>
 96 | 				<tr>
 97 | 					<th>Timestamp</th>
 98 | 					<th>IP Address</th>
 99 | 					<th>Reason</th>
100 | 					<th>Country</th>
101 | 					<th>RH</th>
102 | 				</tr>";
103 | 			while($row = $sql->fetch(PDO::FETCH_ASSOC)){
104 | 				echo "<tr>";
105 | 				echo "<td>".$row['TimeStamp']."</td>";
106 | 				echo "<td><a href=\"./repeats-IP.php?submit=Search&repeatIP=".$row['ipaddress']."\">".$row['ipaddress']."</a></td>";
107 | 				echo "<td>".$row['ban_reason']."</td>";
108 | 				echo "<td><a href=\"https://ipinfo.io/".$row['ipaddress']."\"  target=\"_blank\">".$row['country']."</a></td>";
109 | 				echo "<td style=\"text-align:right;\">".number_format($row['countip'])."</td>";
110 | 				echo "</tr>";
111 | 			}
112 | 			echo "</table>";
113 | 
114 | 			if ($total_pages < 2){
115 | 				echo "<br><br>";
116 | 			} else {
117 | 				echo "<ul>";
118 | 				if($page <= 1){echo "<li>First </li>";} else {echo "<li><a href=\"?submit=Search&dateFrom=".$dateFrom."&dateTo=".$dateTo."&RS=".$RS."&page=1\">First </a><li>";}
119 | 				if($page <= 1){echo "<li>Prev </li>";} else {echo "<li><a href=\"?submit=Search&dateFrom=".$dateFrom."&dateTo=".$dateTo."&RS=".$RS."&page=".($page - 1)."\">Prev </a></li>";}
120 | 				if($page >= $total_pages){echo "<li>Next </li>";} else {echo "<li><a href=\"?submit=Search&dateFrom=".$dateFrom."&dateTo=".$dateTo."&RS=".$RS."&page=".($page + 1)."\">Next </a></li>";}
121 | 				if($page >= $total_pages){echo "<li>Last</li>";} else {echo "<li><a href=\"?submit=Search&dateFrom=".$dateFrom."&dateTo=".$dateTo."&RS=".$RS."&page=".$total_pages."\">Last</a></li>";}
122 | 				echo "</ul>";
123 | 			}
124 | 			if ($total_pages > 0){
125 | 				echo	"RH = Repeat Hits<br>
126 | 						RS = Released Status<br>";
127 | 			}
128 | 		}
129 | 	}
130 | 	echo "<br>";
131 | 	echo "</div>";
132 | ?>
133 | 
134 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/www/release-iprange.php:
--------------------------------------------------------------------------------
  1 | <?php include("head.php") ?>
  2 | 
  3 | <div class="section">
  4 | 
  5 | <?php
  6 | 	include_once("config.php");
  7 | 	include_once("functions.php");
  8 | 
  9 | 	if (isset($_GET['page'])) {
 10 | 		$page = $_GET['page'];
 11 | 		$display_pagination = 1;
 12 | 	} else {
 13 | 		$page = 1;
 14 | 		$total_pages = 1;
 15 | 		$display_pagination = 0;
 16 | 	}
 17 | 	if (isset($_GET['submit'])) {$button = $_GET ['submit'];} else {$button = "";}
 18 | 	if (isset($_GET['ipRange'])) {
 19 | 		if(preg_match("/^(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$/", ($_GET['ipRange']))) {
 20 | 			$ipRange = $_GET['ipRange']."/32";
 21 | 		} else if (preg_match("/^(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)(\/(2[2-9]|3[0-2]))$/", ($_GET['ipRange']))) {
 22 | 			$ipRange = $_GET['ipRange'];
 23 | 		} else {
 24 | 			$ipRange = "";
 25 | 		}
 26 | 	} else {
 27 | 		$ipRange = "";
 28 | 	}
 29 | 
 30 | 	if (empty($ipRange)){ 
 31 | 		echo "Error: <br>- no IP range specified or <br>- malformed IP range/CIDR or <br>- CIDR outside program bounds of /22 to /32"; 
 32 | 	} else {
 33 | 
 34 | 		$ips = ipRangeFinder($ipRange);
 35 | 		$iplo = $ips[0];
 36 | 		$iphi = $ips[1];
 37 | 
 38 | 		$range = explode("/", $ipRange);
 39 | 		$rcidr = $range[1]; 
 40 | 		$ip_count = 1 << (32 - $rcidr);
 41 | 
 42 | 		$no_of_records_per_page = 20;
 43 | 		$offset = ($page-1) * $no_of_records_per_page;
 44 | 		$total_pages_sql = $pdo->prepare("
 45 | 			SELECT COUNT(*) AS count 
 46 | 			FROM hm_fwban 
 47 | 			WHERE INET_ATON(ipaddress) BETWEEN INET_ATON('".$iplo."') AND INET_ATON('".$iphi."')
 48 | 			ORDER BY INET_ATON(ipaddress) ASC
 49 | 		");
 50 | 		$total_pages_sql->execute();
 51 | 		$total_rows = $total_pages_sql->fetchColumn();
 52 | 		$total_pages = ceil($total_rows / $no_of_records_per_page);
 53 | 
 54 | 		$sql = $pdo->prepare("
 55 | 			SELECT 
 56 | 				id, 
 57 | 				".DBFormatDate('timestamp', '%y/%m/%d %T')." as TimeStamp, 
 58 | 				ipaddress, 
 59 | 				ban_reason, 
 60 | 				country, 
 61 | 				flag 
 62 | 			FROM hm_fwban 
 63 | 			WHERE INET_ATON(ipaddress) BETWEEN INET_ATON('".$iplo."') AND INET_ATON('".$iphi."') 
 64 | 			".DBLimitRowsWithOffset('TimeStamp','DESC',0,0,$offset,$no_of_records_per_page)
 65 | 		);
 66 | 		$sql->execute();
 67 | 
 68 | 		if ($total_rows == 1){$singular = '';} else {$singular= 's';}
 69 | 
 70 | 		echo "<h2>IP Range Information</h2>";
 71 | 		echo "<table class='section'>
 72 | 			<tr>
 73 | 				<th>IP Range</th>
 74 | 				<th>Network Address</th>
 75 | 				<th>Broadcast Address</th>
 76 | 				<th>IPs in range</th>
 77 | 			</tr>
 78 | 			<tr>
 79 | 				<td style=\"text-align:center;\">".$ipRange."</td>
 80 | 				<td style=\"text-align:center;\">".$iplo."</td>
 81 | 				<td style=\"text-align:center;\">".$iphi."</td>
 82 | 				<td style=\"text-align:center;\">".$ip_count."</td>
 83 | 			</tr>
 84 | 			</table><br><br>";
 85 | 
 86 | 		echo "<h2>What would you like to release?</h2>";
 87 | 		echo "Click \"NO\" under column \"RS\" to release a single address.<br><br>";
 88 | 		echo "<a href=\"./release-ip.php?ipRange=".$ipRange."&submit=Release\" onclick=\"return confirm('Are you sure you want to release all currently banned ".number_format($total_rows)." IP".$singular." in range ".$ipRange."?')\">Click here</a> to release all <b>".number_format($total_rows)."</b> IPs in range.<br>";
 89 | 		echo "<br><br>";
 90 | 		if ($total_pages == 0) {
 91 | 			echo "No results from Firewall Ban found within IP range ".$ipRange;
 92 | 		} else {
 93 | 			echo "Firewall Ban results for IP range \"<b>".$ipRange."</b>\": ".number_format($total_rows)." IP".$singular." (Page: ".number_format($page)." of ".number_format($total_pages).")<br>";
 94 | 			echo "<table class='section'>
 95 | 				<tr>
 96 | 					<th>Timestamp</th>
 97 | 					<th>IP Address</th>
 98 | 					<th>Reason</th>
 99 | 					<th>Country</th>
100 | 					<th style=\"text-align:center;\">RS</th>
101 | 				</tr>";
102 | 			while($row = $sql->fetch(PDO::FETCH_ASSOC)){
103 | 
104 | 				echo "<tr>";
105 | 
106 | 				echo "<td>".$row['TimeStamp']."</td>";
107 | 				echo "<td><a href=\"search.php?submit=Search&search=".$row['ipaddress']."\">".$row['ipaddress']."</a></td>";
108 | 				echo "<td>".$row['ban_reason']."</td>";
109 | 				echo "<td><a href=\"https://ipinfo.io/".$row['ipaddress']."\"  target=\"_blank\">".$row['country']."</a></td>";
110 | 				if($row['flag']==NULL||$row['flag']==3||$row['flag']==4||$row['flag']==7) echo "<td style=\"text-align:center;\"><a href=\"./release-ip.php?submit=Release&ipRange=".$row['ipaddress']."\" onclick=\"return confirm('Are you sure you want to release ".$row['ipaddress']."?')\">NO</a></td>";
111 | 				elseif($row['flag'] == 1 || $row['flag'] == 2) echo "<td style=\"text-align:center;\">YES</td>";
112 | 				elseif($row['flag'] == 6 || $row['flag'] == 5) echo "<td style=\"text-align:center;\">SAF</td>";
113 | 				else echo "<td style=\"text-align:center;\">ERR</td>";
114 | 
115 | 				echo "</tr>";
116 | 			}
117 | 			echo "</table>";
118 | 
119 | 			if ($total_pages < 2){
120 | 				echo "";
121 | 			} else {
122 | 				echo "<ul>";
123 | 					if($page <= 1){echo "<li>First </li>";} else {echo "<li><a href=\"?submit=Search&ipRange=".$ipRange."&page=1\">First </a><li>";}
124 | 					if($page <= 1){echo "<li>Prev </li>";} else {echo "<li><a href=\"?submit=Search&ipRange=".$ipRange."&page=".($page - 1)."\">Prev </a></li>";}
125 | 					if($page >= $total_pages){echo "<li>Next </li>";} else {echo "<li><a href=\"?submit=Search&ipRange=".$ipRange."&page=".($page + 1)."\">Next </a></li>";}
126 | 					if($page >= $total_pages){echo "<li>Last</li>";} else {echo "<li><a href=\"?submit=Search&ipRange=".$ipRange."&page=".$total_pages."\">Last</a></li>";}
127 | 				echo "</ul>";
128 | 			}
129 | 		}
130 | 	}
131 | 	
132 | ?>
133 | 
134 | </div>
135 | 
136 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/www/reban-iprange.php:
--------------------------------------------------------------------------------
  1 | <?php include("head.php") ?>
  2 | 
  3 | <div class="section">
  4 | 
  5 | <?php
  6 | 	include_once("config.php");
  7 | 	include_once("functions.php");
  8 | 
  9 | 	if (isset($_GET['page'])) {
 10 | 		$page = $_GET['page'];
 11 | 		$display_pagination = 1;
 12 | 	} else {
 13 | 		$page = 1;
 14 | 		$total_pages = 1;
 15 | 		$display_pagination = 0;
 16 | 	}
 17 | 	if (isset($_GET['submit'])) {$button = $_GET ['submit'];} else {$button = "";}
 18 | 	if (isset($_GET['ipRange'])) {
 19 | 		if(preg_match("/^(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$/", ($_GET['ipRange']))) {
 20 | 			$ipRange = $_GET['ipRange']."/32";
 21 | 		} else if (preg_match("/^(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)(\/(2[2-9]|3[0-2]))$/", ($_GET['ipRange']))) {
 22 | 			$ipRange = $_GET['ipRange'];
 23 | 		} else {
 24 | 			$ipRange = "";
 25 | 		}
 26 | 	} else {
 27 | 		$ipRange = "";
 28 | 	}
 29 | 
 30 | 	if (empty($ipRange)){ 
 31 | 		echo "Error: <br>- no IP range specified or <br>- malformed IP range/CIDR or <br>- CIDR outside program bounds of /22 to /32"; 
 32 | 	} else {
 33 | 
 34 | 		$ips = ipRangeFinder($ipRange);
 35 | 		$iplo = $ips[0];
 36 | 		$iphi = $ips[1];
 37 | 
 38 | 		$range = explode("/", $ipRange);
 39 | 		$rcidr = $range[1]; 
 40 | 		$ip_count = 1 << (32 - $rcidr);
 41 | 
 42 | 		$no_of_records_per_page = 20;
 43 | 		$offset = ($page-1) * $no_of_records_per_page;
 44 | 
 45 | 		$total_pages_sql = $pdo->prepare("
 46 | 			SELECT COUNT(*) AS count 
 47 | 			FROM hm_fwban 
 48 | 			WHERE ".DBIpStringToIntField('ipaddress')." BETWEEN ".DBIpStringToIntValue($iplo)." AND ".DBIpStringToIntValue($iphi)."
 49 | 		");
 50 | 		$total_pages_sql->execute();
 51 | 		$total_rows = $total_pages_sql->fetchColumn();
 52 | 		$total_pages = ceil($total_rows / $no_of_records_per_page);
 53 | 
 54 | 
 55 | 		$sql = $pdo->prepare("
 56 | 			SELECT 
 57 | 				id, 
 58 | 				".DBFormatDate('timestamp', '%y/%m/%d %T')." as TimeStamp, 
 59 | 				ipaddress, 
 60 | 				ban_reason, 
 61 | 				country, 
 62 | 				flag 
 63 | 			FROM hm_fwban 
 64 | 			WHERE ".DBIpStringToIntField('ipaddress')." BETWEEN ".DBIpStringToIntValue($iplo)." AND ".DBIpStringToIntValue($iphi)." 
 65 | 			".DBLimitRowsWithOffset('TimeStamp','DESC',0,0,$offset,$no_of_records_per_page)
 66 | 		);
 67 | 		$sql->execute();
 68 | 
 69 | 		if ($total_rows == 1){$singular = '';} else {$singular= 's';}
 70 | 
 71 | 		echo "<h2>IP Range Information</h2>";
 72 | 		echo "<table class='section'>
 73 | 			<tr>
 74 | 				<th>IP Range</th>
 75 | 				<th>Network Address</th>
 76 | 				<th>Broadcast Address</th>
 77 | 				<th>IPs in range</th>
 78 | 			</tr>
 79 | 			<tr>
 80 | 				<td style=\"text-align:center;\">".$ipRange."</td>
 81 | 				<td style=\"text-align:center;\">".$iplo."</td>
 82 | 				<td style=\"text-align:center;\">".$iphi."</td>
 83 | 				<td style=\"text-align:center;\">".$ip_count."</td>
 84 | 			</tr>
 85 | 			</table><br><br>";
 86 | 
 87 | 		echo "<h2>What would you like to ban?</h2>";
 88 | 		echo "Click \"YES\" under column \"RS\" to reban a single address (if previously released).<br><br>";
 89 | 		echo "<a href=\"./reban-ip.php?ipRange=".$ipRange."&submit=Ban\" onclick=\"return confirm('Are you sure you want to ban all ".number_format($ip_count)." IPs in range ".$ipRange."?')\">Click here</a> to ban all <b>".number_format($ip_count)."</b> IPs in range. Duplicates will be deleted from the database prior to adding firewall rules.<br>";
 90 | 		echo "<br><br>";
 91 | 		if ($total_pages == 0) {
 92 | 			echo "No <b>existing</b> results from Firewall Ban found within IP range <b>".$ipRange."</b>";
 93 | 		} else {
 94 | 			echo "Firewall Ban results for IP range \"<b>".$ipRange."</b>\": ".number_format($total_rows)." IP".$singular." (Page: ".number_format($page)." of ".number_format($total_pages).")<br>";
 95 | 			echo "<table class='section'>
 96 | 				<tr>
 97 | 					<th>Timestamp</th>
 98 | 					<th>IP Address</th>
 99 | 					<th>Reason</th>
100 | 					<th>Country</th>
101 | 					<th style=\"text-align:center;\">RS</th>
102 | 				</tr>";
103 | 			while($row = $sql->fetch(PDO::FETCH_ASSOC)){
104 | 
105 | 				echo "<tr>";
106 | 
107 | 				echo "<td>".$row['TimeStamp']."</td>";
108 | 				echo "<td><a href=\"search.php?submit=Search&search=".$row['ipaddress']."\">".$row['ipaddress']."</a></td>";
109 | 				echo "<td>".$row['ban_reason']."</td>";
110 | 				echo "<td><a href=\"https://ipinfo.io/".$row['ipaddress']."\"  target=\"_blank\">".$row['country']."</a></td>";
111 | 				if($row['flag'] == 1 || $row['flag'] == 2) echo "<td style=\"text-align:center;\"><a href=\"./reban-ip.php?submit=Reban&ipRange=".$row['ipaddress']."\" onclick=\"return confirm('Are you sure you want to reban ".$row['ipaddress']."?')\">YES</a></td>";
112 | 			elseif($row['flag']==NULL||$row['flag']==3||$row['flag']==4||$row['flag']==7) echo "<td style=\"text-align:center;\">NO</td>";
113 | 			elseif($row['flag'] == 6 || $row['flag'] == 5) echo "<td style=\"text-align:center;\">SAF</td>";
114 | 			else echo "<td style=\"text-align:center;\">ERR</td>";
115 | 
116 | 				echo "</tr>";
117 | 			}
118 | 			echo "</table>";
119 | 
120 | 			if ($total_pages < 2){
121 | 				echo "";
122 | 			} else {
123 | 				echo "<ul>";
124 | 					if($page <= 1){echo "<li>First </li>";} else {echo "<li><a href=\"?submit=Search&ipRange=".$ipRange."&page=1\">First </a><li>";}
125 | 					if($page <= 1){echo "<li>Prev </li>";} else {echo "<li><a href=\"?submit=Search&ipRange=".$ipRange."&page=".($page - 1)."\">Prev </a></li>";}
126 | 					if($page >= $total_pages){echo "<li>Next </li>";} else {echo "<li><a href=\"?submit=Search&ipRange=".$ipRange."&page=".($page + 1)."\">Next </a></li>";}
127 | 					if($page >= $total_pages){echo "<li>Last</li>";} else {echo "<li><a href=\"?submit=Search&ipRange=".$ipRange."&page=".$total_pages."\">Last</a></li>";}
128 | 				echo "</ul>";
129 | 			}
130 | 		}
131 | 	}
132 | 	
133 | 	// }
134 | ?>
135 | </div>
136 | 
137 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/www/repeats.php:
--------------------------------------------------------------------------------
  1 | <?php include("head-gr.php") ?>
  2 | 
  3 | <div class="section">
  4 | 	<div class="secleft">
  5 | 		<h2>IPs blocked per day from inception:</h2>
  6 | 		<div id="chart_totalblocksperday_staticdata"></div>
  7 | 	</div>
  8 | 	<div class="secright">
  9 | 		<h2>Average blocks per hour from inception:</h2>
 10 | 		<div id="chart_blocksperhour_staticdata"></div>
 11 | 	</div>
 12 | 	<div class="clear"></div>
 13 | </div>
 14 | 
 15 | 
 16 | <div class="section">
 17 | 	<div class="secleft">
 18 | 		<h2>This Week's Daily Blocks:</h2>
 19 | 
 20 | <?php
 21 | 	include_once("config.php");
 22 | 	include_once("functions.php");
 23 | 	include_once("blocksdata.php");
 24 | 
 25 | 	$today = date('Y-m-d');
 26 | 	$yesterday = date('Y-m-d', strtotime(date('Y-m-d')." -1 day"));
 27 | 	$twodaysago = date('Y-m-d', strtotime(date('Y-m-d')." -2 day"));
 28 | 	$threedaysago = date('Y-m-d', strtotime(date('Y-m-d')." -3 day"));
 29 | 	$fourdaysago = date('Y-m-d', strtotime(date('Y-m-d')." -4 day"));
 30 | 	$thismonth = date('Y-m');
 31 | 	$lastmonth = date('Y-m', strtotime(date('Y-m')." -1 month"));
 32 | 	$twomonthsago = date('Y-m', strtotime(date('Y-m')." -2 month"));
 33 | 	$threemonthsago = date('Y-m', strtotime(date('Y-m')." -3 month"));
 34 | 	$fourmonthsago = date('Y-m', strtotime(date('Y-m')." -4 month"));
 35 | 
 36 | 	$sql = $pdo->prepare("
 37 | 		SELECT 
 38 | 			COUNT(DISTINCT(ipaddress)) AS ipsblocked, 
 39 | 			COUNT(*) AS totalblocks 
 40 | 		FROM (
 41 | 			SELECT * 
 42 | 			FROM hm_fwban_rh 
 43 | 			WHERE '{$today} 00:00:00' <= timestamp
 44 | 		) AS A 
 45 | 		WHERE timestamp <= '{$today} 23:59:50'
 46 | 	");
 47 | 	$sql->execute();
 48 | 	while($row = $sql->fetch(PDO::FETCH_ASSOC)){
 49 | 		echo "<a href=\"./repeats-view.php?ipdate=Date&search=".$today."\">".number_format($row['ipsblocked'])." IPs blocked</a> Today attemtpting access ".number_format($row['totalblocks'])." times<br />"; 
 50 | 	}
 51 | 	echo $dailyblocks;
 52 | ?>
 53 | 	<br />
 54 | 	</div>
 55 | 
 56 | 	<div class="secright">
 57 | 		<h2>This Year's Monthly Blocks:</h2>
 58 | 
 59 | <?php
 60 | 	include_once("config.php");
 61 | 	include_once("functions.php");
 62 | 	include_once("blocksdata.php");
 63 | 
 64 | 	$sql = $pdo->prepare("
 65 | 		SELECT 
 66 | 			COUNT(DISTINCT(ipaddress)) AS ipsblocked, 
 67 | 			COUNT(*) AS totalblocks 
 68 | 		FROM (
 69 | 			SELECT * 
 70 | 			FROM hm_fwban_rh 
 71 | 			WHERE '{$thismonth}-01 00:00:00' <= timestamp
 72 | 		) AS A 
 73 | 		WHERE timestamp <= ".DBGetCurrentDateTime()
 74 | 	);
 75 | 	$sql->execute();
 76 | 	while($row = $sql->fetch(PDO::FETCH_ASSOC)){
 77 | 		echo "<a href=\"./repeats-view.php?submit=Search&search=".$thismonth."\">".number_format($row['ipsblocked'])." IPs blocked</a> in ".date("F", strtotime($thismonth))." attemtpting access ".number_format($row['totalblocks'])." times<br />"; 
 78 | 	}
 79 | 
 80 | 	echo $monthlyblocks;
 81 | ?>
 82 | 	<br />
 83 | 	</div>
 84 | 	<div class="clear"></div>
 85 | </div>
 86 | 
 87 | <div class="section">
 88 | 	<div class="secleft">
 89 | 		<h2>Search for Repeat Blocks by IP:</h2>
 90 | 		<form autocomplete='off' action='repeats-view.php' method='GET'> 
 91 | 			<input type='text' size='20' name='search' pattern='^((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){1,3}(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$' title='255.255.255.255 OR 255.255.255 OR 255.255' placeholder='255.255.255.255...'>
 92 | 			<input type='submit' name='submit' value='Search-IP' >
 93 | 		</form>
 94 | 		<br>
 95 | 	</div>
 96 | 
 97 | 	<div class="secright">
 98 | 		<h2>Search for Repeat Blocks by Date Range:</h2>
 99 | 		<form autocomplete='off' action='repeats-date.php' method='GET'>
100 | 			<table>
101 | 				<tr><td>Starting Date: </td><td><input type='text' id='dateFrom' name='dateFrom' placeholder='Starting Date...' /></td></tr>
102 | 				<tr><td>Ending Date: </td><td><input type='text' id='dateTo' name='dateTo' placeholder='Ending Date...' /></td></tr>
103 | 				<tr><td><input type='submit' name='submit' value='Search' /></td></tr>
104 | 			</table>
105 | 		</form>
106 | 		<br>
107 | 	</div>
108 | 	<div class="clear"></div>
109 | </div>
110 | 	
111 | 
112 | <div class="section">
113 | 	<div class="secleft">
114 | 		<h2>Mark an IP / IP Range Safe:</h2>
115 | 		Permanently release an IP range and mark it safe from future bans.<br><br>
116 | 		<form autocomplete='off' action='./safe-mark.php' method='GET'> 
117 | 			<input type="text" pattern="^(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)(\/(2[2-9]|3[0-2]))?$" title="255.255.255.255 OR 255.255.255.255/23" id="ipRange" name="ipRange">
118 | 			<input type='submit' name='submit' value='SafeIP' >
119 | 		</form>
120 | 		<br>IP Ranges MUST be in: <br>
121 | 		<b>255.255.255.255</b> OR <br>
122 | 		<b>255.255.255.255/24</b> format. <br><br>
123 | 		Single IPs will be automatically converted to /32 CIDR for search purposes. Netmask /22 - /32 only.<br>
124 | 	</div>
125 | 
126 | 	<div class="secright">
127 | 		<h2>Disable IP Safe Status:</h2>
128 | 		Remove safe status from an IP and reban.<br><br>
129 | 		<form autocomplete='off' action='./safe-unmark.php' method='GET'> 
130 | 			<input type="text" pattern="^(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)(\/(2[2-9]|3[0-2]))?$" title="255.255.255.255 OR 255.255.255.255/23" id="ipRange" name="ipRange">
131 | 			<input type='submit' name='submit' value='UnSafeIP' >
132 | 		</form>
133 | 		<br>IP Ranges MUST be in: <br>
134 | 		<b>255.255.255.255</b> OR <br>
135 | 		<b>255.255.255.255/24</b> format. <br><br>
136 | 		Single IPs will be automatically converted to /32 CIDR for search purposes. Netmask /22 - /32 only.<br>
137 | 	</div>
138 | 	<div class="clear"></div>
139 | </div>
140 | 
141 | 
142 | <div class="section">
143 | 	<div class="secleft">
144 | 		<h2>Blocks Analyzer</h2>
145 | 		See how many IPs have returned for a given number of days.<br><br>
146 | 		<a href="./blocks.php">Blocks Analyzer</a>
147 | 	</div>
148 | 
149 | 	<div class="secright">
150 | 	</div>
151 | 	<div class="clear"></div>
152 | </div>
153 | 
154 | 
155 | </div>
156 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/www/repeats-view.php:
--------------------------------------------------------------------------------
  1 | <?php include("head.php") ?>
  2 | 
  3 | <div class="section">
  4 | <h2>Search Repeat Hits (Connections Dropped at Firewall)</h2>
  5 | 
  6 | <?php
  7 | 	include_once("config.php");
  8 | 	include_once("functions.php");
  9 | 	include_once("blocksdata.php");
 10 | 
 11 | 	$search_cl_array = array_map('strtolower', $country_list);
 12 | 	$search_brl_array = array_map('strtolower', $ban_reason_list);
 13 | 
 14 | 	if (isset($_GET['page'])) {
 15 | 		$page = $_GET['page'];
 16 | 		$display_pagination = 1;
 17 | 	} else {
 18 | 		$page = 1;
 19 | 		$total_pages = 1;
 20 | 		$display_pagination = 0;
 21 | 	}
 22 | 	if (isset($_GET['submit'])) {$button = $_GET ['submit'];} else {$button = "";}
 23 | 	if (isset($_GET['search'])) {$search = $_GET['search'];} else {$search = "";}
 24 | 	if (isset($_GET['ipdate'])) {$ipdate = $_GET['ipdate'];} else {$ipdate = "";}
 25 | 
 26 | 	if ((empty($search)) && (empty($ipdate))) {
 27 | 		$search_sql = "FROM hm_fwban_rh";
 28 | 		$search_list = "";
 29 | 	} elseif (preg_match("/^(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$/", $search)) {
 30 | 		$search_sql = "
 31 | 			FROM hm_fwban_rh
 32 | 			WHERE ipaddress = '{$search}'
 33 | 		";
 34 | 		$search_list = "matching IP: <b>".$search."</b>";
 35 | 		$ipdate = "IP";
 36 | 	} elseif (preg_match("/^20[0-9]{2}-[0-9]{2}$/", $search)) {
 37 | 			$search_sql = "
 38 | 				FROM (
 39 | 					SELECT * 
 40 | 					FROM hm_fwban_rh 
 41 | 					WHERE '".date('Y-m-d',(strtotime($search)))." 00:00:00' <= timestamp
 42 | 				) AS x
 43 | 				WHERE timestamp <= '".date('Y-m-t',(strtotime($search)))." 23:59:59'
 44 | 			";
 45 | 			$search_list = "matching month: <b>".date('F Y',(strtotime($search)))."</b>";
 46 | 			$ipdate = "Date";
 47 | 	} elseif (preg_match("/^20[0-9]{2}-[0-9]{2}\-[0-9]{2}$/", $search)) {
 48 | 			$search_sql = "
 49 | 				FROM (
 50 | 					SELECT * 
 51 | 					FROM hm_fwban_rh 
 52 | 					WHERE '".date('Y-m-d',(strtotime($search)))." 00:00:00' <= timestamp
 53 | 				) AS x
 54 | 				WHERE timestamp <= '".date('Y-m-d',(strtotime($search)))." 23:59:59'
 55 | 			";
 56 | 			$search_list = "matching date: <b>".date('Y-m-d',(strtotime($search)))."</b>";
 57 | 			$ipdate = "Date";
 58 | 	} elseif ((!empty($search)) && (empty($ipdate))) {
 59 | 		echo "You must enter a valid IP or date (format: YYYY-MM or YYYY-MM-DD). Showing all results.";
 60 | 		$search_sql = "FROM hm_fwban_rh";
 61 | 		$search_list = "";
 62 | 	} else {
 63 | 		$search_sql = "FROM hm_fwban_rh";
 64 | 		$search_list = "";
 65 | 	}
 66 | 
 67 | 	if ($search==""){$search_page="";}else{$search_page="&search=".$search;}
 68 | 	if ($search==""){$search_all="All ";}else{$search_all="";}
 69 | 	if ($ipdate==""){$ipdate_page="";}else{$ipdate_page="&ipdate=".$ipdate;}
 70 |   
 71 | 	echo "<div class='section'>";
 72 | 	echo "<form action='repeats-view.php' method='GET'> ";
 73 | 	echo	"<input type='text' size='20' name='search' placeholder='Search...' value='".$search."'>";
 74 | 	echo	" ";
 75 | 	echo	"<input type='submit' name='submit' value='Search' >";
 76 | 	echo "</form>";
 77 | 	echo "</div>";
 78 | 	echo "<div class='section'>";
 79 | 
 80 | 	$no_of_records_per_page = 20;
 81 | 	$offset = ($page-1) * $no_of_records_per_page;
 82 | 	$total_pages_sql = $pdo->prepare("
 83 | 		SELECT 
 84 | 			COUNT(DISTINCT(ipaddress)) 
 85 | 			".$search_sql
 86 | 		);
 87 | 	$total_pages_sql->execute();
 88 | 	$total_rows = $total_pages_sql->fetchColumn();
 89 | 	$total_pages = ceil($total_rows / $no_of_records_per_page);
 90 | 
 91 | 	$sql = $pdo->prepare("
 92 | 		SELECT
 93 | 			a.TimeStamp,
 94 | 			a.ipaddress,
 95 | 			b.ban_reason,
 96 | 			b.country,
 97 | 			a.countip
 98 | 		FROM
 99 | 		(
100 | 			SELECT 
101 | 				DISTINCT(ipaddress), 
102 | 				COUNT(ipaddress) AS countip, 
103 | 				".DBFormatDate('MAX(timestamp)', '%y/%m/%d %T')." as TimeStamp
104 | 			".$search_sql."
105 | 			GROUP BY ipaddress 
106 | 		) AS a
107 | 		JOIN
108 | 		(
109 | 			SELECT 
110 | 				ipaddress, 
111 | 				country, 
112 | 				ban_reason
113 | 			FROM hm_fwban
114 | 		) AS b
115 | 		ON a.ipaddress = b.ipaddress
116 | 		".DBLimitRowsWithOffset('a.TimeStamp','DESC',0,0,$offset,$no_of_records_per_page)
117 | 	);
118 | 	$sql->execute();
119 | 
120 | 	if ($total_rows == 1){$singular = '';} else {$singular= 's';}
121 | 	if ($total_rows == 0){
122 | 		echo "<br>There are no repeat drops to report ".$search_list.". Please enter only IP address or date.";
123 | 	} else {
124 | 		echo $search_all."".number_format($total_rows)." IP".$singular." repeatedly dropped at firewall ".$search_list.". (Page: ".number_format($page)." of ".number_format($total_pages).")<br>";
125 | 		echo "<table class='section'>
126 | 			<tr>
127 | 				<th>Last Hit</th>
128 | 				<th>IP Address</th>
129 | 				<th>Reason</th>
130 | 				<th>Country</th>
131 | 				<th>FB</th>
132 | 			</tr>";
133 | 
134 | 		while($row = $sql->fetch(PDO::FETCH_ASSOC)){
135 | 			echo "<tr>";
136 | 			echo "<td>".$row['TimeStamp']."</td>";
137 | 			echo "<td><a href=\"./repeats-IP.php?submit=Search&repeatIP=".$row['ipaddress']."\">".$row['ipaddress']."</a></td>";
138 | 			echo "<td>".$row['ban_reason']."</td>";
139 | 			echo "<td><a href=\"https://ipinfo.io/".$row['ipaddress']."\"  target=\"_blank\">".$row['country']."</a></td>";
140 | 			if($row['countip']==0){echo "<td style=\"text-align:right;\">0</td>";}
141 | 			else{echo "<td style=\"text-align:right;\"><a href=\"repeats-IP.php?submit=Search&repeatIP=".$row['ipaddress']."\">".number_format($row['countip'])."</a></td>";}
142 | 			echo "</tr>";
143 | 		}
144 | 		echo "</table>";
145 | 
146 | 		if ($total_pages < 2){
147 | 			echo "<br><br>";
148 | 		} else {
149 | 			echo "<ul>";
150 | 			if($page <= 1){echo "<li>First </li>";} else {echo "<li><a href=\"?".$ipdate_page.$search_page."&page=1\">First </a><li>";}
151 | 			if($page <= 1){echo "<li>Prev </li>";} else {echo "<li><a href=\"?".$ipdate_page.$search_page."&page=".($page - 1)."\">Prev </a></li>";}
152 | 			if($page >= $total_pages){echo "<li>Next </li>";} else {echo "<li><a href=\"?".$ipdate_page.$search_page."&page=".($page + 1)."\">Next </a></li>";}
153 | 			if($page >= $total_pages){echo "<li>Last</li>";} else {echo "<li><a href=\"?".$ipdate_page.$search_page."&page=".$total_pages."\">Last</a></li>";}
154 | 			echo "</ul>";
155 | 		}
156 | 		if ($total_pages > 0){
157 | 			echo	"FB = Firewall Blocks<br>
158 | 					RS = Released Status<br>";
159 | 		}
160 | 	}
161 | 	echo "<br>";
162 | 
163 | ?>
164 | </div>
165 | 
166 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/hmsConsolidateRulesMonthly.ps1:
--------------------------------------------------------------------------------
  1 | <#
  2 | _  _ _  _  _  _ _    ____ ____ ____ _  _ ____ ____     
  3 | |__| |\/| /_\ | |    [__  |___ |__/ |  | |___ |__/     
  4 | |  | |  |/   \| |___ ___] |___ |  \  \/  |___ |  \     
  5 | ____ _ ____ ____ _ _ _  _  _    _       ___   _  _  _ 
  6 | |___ | |__/ |___ | | | /_\ |    |       |__] /_\ |\ | 
  7 | |    | |  \ |___ |_|_|/   \|___ |___    |__]/   \| \| 
  8 | 
  9 | .SYNOPSIS
 10 | 	Powershell script to consolidate daily firewall rules into monthly firewall rules
 11 | 
 12 | .DESCRIPTION
 13 | 	Powershell script to consolidate daily firewall rules into monthly firewall rules
 14 | 
 15 | .FUNCTIONALITY
 16 | 	* Queries firewall for previous month's rules
 17 | 	* Creates new firewall rules containing all of previous month's banned IPs 
 18 | 	* Deletes all of previous month's daily firewall rules
 19 | 
 20 | .NOTES
 21 | 	* Create scheduled task to run once per day at 12:01 am (will run only on the first of the month)
 22 | 	
 23 | .EXAMPLE
 24 | 
 25 | #>
 26 | # Include required files
 27 | Try {
 28 | 	.("$PSScriptRoot\Config.ps1")
 29 | 	.("$PSScriptRoot\CommonCode.ps1")
 30 | }
 31 | Catch {
 32 | 	Write-Output "$((get-date).ToString(`"yy/MM/dd HH:mm:ss.ff`")) : ERROR : Unable to load supporting PowerShell Scripts : $query `n$Error[0]" | out-file "$PSScriptRoot\PSError.log" -append
 33 | }
 34 | 
 35 | #	Run nightly but only trigger on the first of the month
 36 | If ((Get-Date).ToString("dd") -notmatch '01') { Exit }
 37 | 
 38 | $ConsFolder = "$PSScriptRoot\ConsolidateRulesMonthly"
 39 | $EmailBody = "$PSScriptRoot\ConsolidateRulesMonthly\EmailBody.txt"
 40 | 
 41 | #	Create ConsolidateRules folder if it doesn't exist
 42 | If (-not(Test-Path $ConsFolder)) {
 43 | 	md $ConsFolder
 44 | }
 45 | 
 46 | #	Delete all files in the Consolidated Rules folder before beginning
 47 | Get-ChildItem -Path $ConsFolder -Include * | foreach { $_.Delete()}
 48 | 
 49 | #	Get BanDate (last month) and establish csv
 50 | $BanDate = (Get-Date).AddMonths(-1).ToString("yyyy-MM")
 51 | 
 52 | #	Set up email result
 53 | Write-Output "hMailServer Firewall Ban `n`nMonthly Rule Consolidation `n`n" | Out-File $EmailBody -Append
 54 | 
 55 | #	Establish files and regex
 56 | $FWRuleList = "$ConsFolder\fwrulelist.txt"
 57 | $RemoteIPList = "$ConsFolder\remoteiplist.txt"
 58 | $RegexConsName = 'hMS\sFWBan\s20[0-9]{2}\-[0-9]{2}\-[0-9]{2}(_[0-9]{2})?'
 59 | $NL = [System.Environment]::NewLine
 60 | 
 61 | #	Read rules from firewall and output only ones from last month
 62 | Get-NetshFireWallrule ("all") | ForEach {
 63 | 	If (($_.RuleName -match $RegexConsName) -and ($_.RuleName -match $BanDate)){
 64 | 		Write-Output $_.RuleName
 65 | 	}
 66 | } | Out-File $FWRuleList
 67 | 
 68 | #	Get list of rulenames, read RemoteIP from each rule, then output to a single list
 69 | Get-Content -Path $FWRuleList | ForEach {
 70 | 	$RuleDay = $_
 71 | 	Get-NetshFireWallrule ($RuleDay) | ForEach {
 72 | 		$RemoteIP = $_.RemoteIP
 73 | 		$ReplaceCIDR = ($RemoteIP).Replace("/32", "")
 74 | 		Write-Output $ReplaceCIDR 
 75 | 	}
 76 | } | Out-File $RemoteIPList
 77 | 
 78 | #	convert list to single string
 79 | (Get-Content -Path $RemoteIPList) -Replace '$',',' | Set-Content -NoNewline -Path $RemoteIPList
 80 | (Get-Content -Path $RemoteIPList) -Replace ',$','' | Set-Content -NoNewline -Path $RemoteIPList
 81 | 
 82 | #	Create new list for the purpose of updating rulename in database
 83 | (Get-Content -Path $RemoteIPList) -Replace ',',$NL | Out-File "$RemoteIPList.updater.txt"
 84 | $CountRemoteIPs = (Get-Content -Path "$RemoteIPList.updater.txt").Count
 85 | Write-Output "There are $CountRemoteIPs IPs contained in $((Get-Content $FWRuleList).Count) firewall rules in the month of $((Get-Date $BanDate).ToString("MMMM")) $((Get-Date $BanDate).ToString("yyyy"))`n`n" | Out-File $EmailBody -Append
 86 | 
 87 | $N = 0
 88 | $Rows = 400
 89 | $Limit = [math]::ceiling($CountRemoteIPs / $Rows)
 90 | 
 91 | If ($Limit -eq 0){
 92 | 	Write-Output "WARNING - there are no rules to consolidate `n`nExiting operation - Bye..." | Out-File $EmailBody -Append
 93 | 	EmailResults
 94 | 	Exit
 95 | }
 96 | ElseIf ($Limit -eq 1){
 97 | 	#	Add rule for last month
 98 | 	$MonthRuleName = "hMS FWBan $BanDate"
 99 | 	& netsh advfirewall firewall add rule name="$MonthRuleName" description="FWB Rules for $BanDate" dir=in interface=any action=block remoteip=$(Get-Content $RemoteIPList)
100 | 	Write-Output "Creating firewall rule : $MonthRuleName" | Out-File $EmailBody -Append
101 | 
102 | 	#	Delete last month's rules
103 | 	Get-Content -Path $FWRuleList | ForEach {
104 | 		$RuleToDelete = $_
105 | 		& netsh advfirewall firewall delete rule name=`"$RuleToDelete`"
106 | 		Write-Output "Deleting firewall rule : $RuleToDelete" | Out-File $EmailBody -Append
107 | 	}
108 | 
109 | 	#	Update rulenames in database
110 | 	Get-Content -Path "$RemoteIPList.updater.txt" | ForEach {
111 | 		$IP = $_
112 | 		$Query = "UPDATE hm_fwban SET rulename='$MonthRuleName' WHERE ipaddress='$IP'"
113 | 		RunSQLQuery $Query
114 | 	}
115 | }
116 | Else {
117 | 	Do {
118 | 		#	Split up IPs into chunks for multiple rule creation
119 | 		$X = ($N).ToString("00")
120 | 		Get-Content "$RemoteIPList.updater.txt" | select -first $Rows -skip $($N * $Rows) | Out-File "$RemoteIPList.IPBatchForRemoteIP_$X.txt"
121 | 		(Get-Content "$RemoteIPList.IPBatchForRemoteIP_$X.txt") -Replace '$',',' | Set-Content -NoNewline -Path "$RemoteIPList.IPBatchForRuleCreation_$X.txt"
122 | 		(Get-Content "$RemoteIPList.IPBatchForRuleCreation_$X.txt") -Replace ',$','' | Set-Content -Path "$RemoteIPList.IPBatchForRuleCreation_$X.txt"
123 | 		
124 | 		#	Create chunk rule
125 | 		$MonthRuleName = "hMS FWBan "+$BanDate+"_"+$X
126 | 		& netsh advfirewall firewall add rule name="$MonthRuleName" description="FWB Rules for $BanDate" dir=in interface=any action=block remoteip=$(Get-Content "$RemoteIPList.IPBatchForRuleCreation_$X.txt")
127 | 		Write-Output "Creating firewall rule : $MonthRuleName" | Out-File $EmailBody -Append
128 | 		
129 | 		#	Update rulenames in database
130 | 		Get-Content "$RemoteIPList.IPBatchForRemoteIP_$X.txt" | ForEach {
131 | 			$IP = $_
132 | 			$Query = "UPDATE hm_fwban SET rulename='$MonthRuleName' WHERE ipaddress='$IP'"
133 | 			RunSQLQuery $Query
134 | 		}
135 | 
136 | 		$N++
137 | 	}
138 | 	Until ($N -eq $Limit)
139 | 
140 | 	#	Delete last month's rules
141 | 	Get-Content -Path $FWRuleList | ForEach {
142 | 		$RuleToDelete = $_
143 | 		& netsh advfirewall firewall delete rule name=`"$RuleToDelete`"
144 | 		Write-Output "Deleting firewall rule : $RuleToDelete" | Out-File $EmailBody -Append
145 | 	}
146 | }
147 | 
148 | EmailResults


--------------------------------------------------------------------------------
/www/search-date.php:
--------------------------------------------------------------------------------
  1 | <?php include("head-r.php") ?>
  2 | <?php
  3 | 	include_once("config.php");
  4 | 	include_once("functions.php");
  5 | 
  6 | 	if (isset($_GET['page'])) {
  7 | 		$page = $_GET['page'];
  8 | 		$display_pagination = 1;
  9 | 	} else {
 10 | 		$page = 1;
 11 | 		$total_pages = 1;
 12 | 		$display_pagination = 0;
 13 | 	}
 14 | 	if (isset($_GET['submit'])) {$button = $_GET ['submit'];} else {$button = "";}
 15 | 	if (isset($_GET['dateFrom'])) {$dateFrom = $_GET['dateFrom'];} else {$dateFrom = "";}
 16 | 	if (isset($_GET['dateTo'])) {$dateTo = $_GET['dateTo'];} else {$dateTo = "";}
 17 | 	if (isset($_GET['RS'])) {$RS = $_GET['RS'];} else {$RS = "";}
 18 |   
 19 | 	echo "<div class='section'>";
 20 | 	echo "<h2>Search a date range:</h2>";
 21 | 	echo "Enter start & end dates and click to search.<br><br>";
 22 | 	echo "<form autocomplete='off' action='search-date.php' method='GET'>";
 23 | 	echo "<table>";
 24 | 	echo "<tr><td>Starting Date: </td><td><input type='text' id='dateFrom' name='dateFrom' placeholder='Starting Date...' value='".$dateFrom."' /></td></tr>";
 25 | 	echo "<tr><td>Ending Date: </td><td><input type='text' id='dateTo' name='dateTo' placeholder='Ending Date...' value='".$dateTo."' /></td></tr>";
 26 | 	echo "<tr><td>Release Status: </td><td>
 27 | 			<select name='RS'>
 28 | 			<option value=''>Both</option>
 29 | 			<option value='YES'>YES</option>
 30 | 			<option value='NO'>NO</option>
 31 | 			</select></td></tr>";
 32 | 	echo "<tr><td><input type='submit' name='submit' value='Search' /></td></tr>";
 33 | 	echo "</table>";
 34 | 	echo "</form>";
 35 | 	echo "</div>";
 36 | 	echo "<div class='section'>";
 37 | 
 38 | 	if (empty($dateFrom)){
 39 | 		echo "Note: Range can be a single day, but start and end dates must both be filled in.<br><br>";
 40 | 	} elseif (empty($dateTo)){
 41 | 		echo "You did not put in an ending date. Both beginning and ending dates are required for date range release even if the range is a single day.<br><br>";
 42 | 	} else {
 43 |   
 44 | 		$no_of_records_per_page = 20;
 45 | 		$offset = ($page-1) * $no_of_records_per_page;
 46 | 		
 47 | 		if ($RS=="NO"){$RS_SQL = " AND (flag IS NULL OR flag=3)";}
 48 | 		elseif ($RS=="YES"){$RS_SQL = " AND (flag=1 OR flag=2)";}
 49 | 		else {$RS_SQL = "";}
 50 | 	
 51 | 		$total_pages_sql = $pdo->prepare("
 52 | 			SELECT 
 53 | 				Count(*) AS count 
 54 | 			FROM hm_fwban 
 55 | 			WHERE timestamp BETWEEN '{$dateFrom} 00:00:00' AND '{$dateTo} 23:59:59'".$RS_SQL
 56 | 		);
 57 | 		$total_pages_sql->execute();
 58 | 		$total_rows = $total_pages_sql->fetchColumn();
 59 | 		$total_pages = ceil($total_rows / $no_of_records_per_page);
 60 | 
 61 | 		$sql = $pdo->prepare("
 62 | 			SELECT
 63 | 				a.tsf,
 64 | 				a.ipaddress,
 65 | 				a.ban_reason,
 66 | 				a.country,
 67 | 				a.flag,
 68 | 				a.helo,
 69 | 				a.ptr,
 70 | 				b.returnhits
 71 | 			FROM
 72 | 			(
 73 | 				SELECT 
 74 | 					".DBFormatDate('timestamp', '%y/%m/%d %T')." AS tsf, 
 75 | 					timestamp, 
 76 | 					ipaddress, 
 77 | 					ban_reason, 
 78 | 					country, 
 79 | 					flag, 
 80 | 					helo, 
 81 | 					ptr
 82 | 				FROM hm_fwban 
 83 | 				WHERE timestamp BETWEEN '{$dateFrom} 00:00:00' AND '{$dateTo} 23:59:59'".$RS_SQL." 
 84 | 			) AS a
 85 | 			LEFT JOIN
 86 | 			(
 87 | 				SELECT 
 88 | 					COUNT(ipaddress) AS returnhits, 
 89 | 					ipaddress
 90 | 				FROM hm_fwban_rh
 91 | 			) AS b
 92 | 			ON a.ipaddress = b.ipaddress
 93 | 			".DBLimitRowsWithOffset('a.tsf','DESC',0,0,$offset,$no_of_records_per_page)
 94 | 		);
 95 | 		$sql->execute();
 96 | 
 97 | 		if ($RS=="YES"){$RSres=" with release status \"<b>YES</b>\"";} 
 98 | 		elseif ($RS=="NO"){$RSres=" with release status \"<b>NO</b>\"";} 
 99 | 		else {$RSres = "";} 
100 | 		if ($total_rows == 1){$singular = '';} else {$singular= 's';}
101 | 		if ($total_rows == 0){
102 | 			echo "<br><br>No results for date range \"<b>".$dateFrom."</b>\" to \"<b>".$dateTo."</b>\"".$RSres;
103 | 		} else {
104 | 			echo "Results for date range \"<b>".$dateFrom."</b>\" to \"<b>".$dateTo."</b>\"".$RSres.": ".number_format($total_rows)." IP".$singular." (Page: ".number_format($page)." of ".number_format($total_pages).")<br>";
105 | 			echo "<table class='section'>
106 | 				<tr>
107 | 					<th>Timestamp</th>
108 | 					<th>IP Address</th>
109 | 					<th>Reason</th>
110 | 					<th>Country</th>
111 | 					<th>HELO</th>
112 | 					<th>RH</th>
113 | 					<th>RS</th>
114 | 				</tr>";
115 | 			while($row = $sql->fetch(PDO::FETCH_ASSOC)){
116 | 				echo "<tr>";
117 | 
118 | 				echo "<td>".$row['tsf']."</td>";
119 | 				echo "<td><a href=\"search.php?submit=Search&search=".$row['ipaddress']."\">".$row['ipaddress']."</a></td>";
120 | 				echo "<td>".$row['ban_reason']."</td>";
121 | 				echo "<td><a href=\"https://ipinfo.io/".$row['ipaddress']."\"  target=\"_blank\">".$row['country']."</a></td>";
122 | 				echo "<td>".$row['helo']."</td>";
123 | 				if ($row['returnhits']===NULL){echo "<td style=\"text-align:right;\">0</td>";}
124 | 				else {echo "<td style=\"text-align:right;\"><a href=\"repeats-IP.php?submit=Search&repeatIP=".$row['ipaddress']."\">".number_format($row['returnhits'])."</a></td>";}
125 | 				if($row['flag'] === NULL || $row['flag'] == 3 || $row['flag'] == 7) echo "<td style=\"text-align:center;\"><a href=\"./release-ip.php?submit=Release&ipRange=".$row['ipaddress']."\" onclick=\"return confirm('Are you sure you want to release ".$row['ipaddress']."?')\">No</a></td>";
126 | 				elseif($row['flag'] == 1 || $row['flag'] == 2) echo "<td style=\"text-align:center;\">YES</td>";
127 | 				elseif($row['flag'] == 4) echo "<td style=\"text-align:center;\">NEW</td>";
128 | 				elseif($row['flag'] == 6 || $row['flag'] == 5) echo "<td style=\"text-align:center;\">SAF</td>";
129 | 				else echo "<td style=\"text-align:center;\">ERR</td>";
130 | 
131 | 				echo "</tr>";
132 | 			}
133 | 			echo "</table>";
134 | 			if ($total_pages < 2){echo "";}
135 | 			else {
136 | 				echo "<ul>";
137 | 				if($page <= 1){echo "<li>First </li>";} else {echo "<li><a href=\"?submit=Search&dateFrom=".$dateFrom."&dateTo=".$dateTo."&RS=".$RS."&page=1\">First </a><li>";}
138 | 				if($page <= 1){echo "<li>Prev </li>";} else {echo "<li><a href=\"?submit=Search&dateFrom=".$dateFrom."&dateTo=".$dateTo."&RS=".$RS."&page=".($page - 1)."\">Prev </a></li>";}
139 | 				if($page >= $total_pages){echo "<li>Next </li>";} else {echo "<li><a href=\"?submit=Search&dateFrom=".$dateFrom."&dateTo=".$dateTo."&RS=".$RS."&page=".($page + 1)."\">Next </a></li>";}
140 | 				if($page >= $total_pages){echo "<li>Last</li>";} else {echo "<li><a href=\"?submit=Search&dateFrom=".$dateFrom."&dateTo=".$dateTo."&RS=".$RS."&page=".$total_pages."\">Last</a></li>";}
141 | 				echo "</ul>";
142 | 			}
143 | 			if ($total_pages > 0){
144 | 				echo "<br>
145 | 				RH = Repeat Hits<br>
146 | 				RS = Release Status<br><br>";
147 | 			}
148 | 		}
149 | 	}
150 | 	echo "<br>";
151 | 	echo "</div>";
152 | ?>
153 | 
154 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/www/release.php:
--------------------------------------------------------------------------------
  1 | <?php include("head-r.php") ?>
  2 | 
  3 | <?php
  4 | 	$today = date('Y-m-d');
  5 | 	$yesterday = date('Y-m-d', strtotime(date('Y-m-d')." -1 day"));
  6 | 	$twodaysago = date('Y-m-d', strtotime(date('Y-m-d')." -2 day"));
  7 | 	$threedaysago = date('Y-m-d', strtotime(date('Y-m-d')." -3 day"));
  8 | 	$fourdaysago = date('Y-m-d', strtotime(date('Y-m-d')." -4 day"));
  9 | 	$thismonth = date('Y-m');
 10 | 	$lastmonth = date('Y-m', strtotime(date('Y-m')." -1 month"));
 11 | 	$twomonthsago = date('Y-m', strtotime(date('Y-m')." -2 month"));
 12 | 	$threemonthsago = date('Y-m', strtotime(date('Y-m')." -3 month"));
 13 | 	$fourmonthsago = date('Y-m', strtotime(date('Y-m')." -4 month"));
 14 | ?>
 15 | 
 16 | <div class="section">
 17 | 	<div class="secleft">
 18 | 		<h2>Release a date range:</h2>
 19 | 		Enter start & end dates and click to review.<br><br>
 20 | 		<form autocomplete="off" action='release-date-view.php' method='GET'>
 21 | 			<table>
 22 | 				<tr>
 23 | 				<tr><td>Starting Date: </td><td><input type="text" id="dateFrom" name="dateFrom" /></td></tr>
 24 | 				<tr><td>Ending Date: </td><td><input type="text" id="dateTo" name="dateTo" /></td></tr>
 25 | 				<tr><td><input type='submit' name='submit' value='Review' /></td></tr>
 26 | 			</table>
 27 | 		</form>
 28 | 		<br>Note: Range can be a single day, but start and end dates must both be filled in.<br>
 29 | 	</div>
 30 | 
 31 | 	<div class="secright">
 32 | 		<h2>Release a recent day:</h2>
 33 | 		Unreleased IPs over the past five days. Click below to review.<br><br>
 34 | 		
 35 | <?php
 36 | 	include_once("config.php");
 37 | 	include_once("functions.php");
 38 | 
 39 | 	$sql = $pdo->prepare("
 40 | 		SELECT 
 41 | 			COUNT(id) AS value_occurrence 
 42 | 		FROM hm_fwban 
 43 | 		WHERE timestamp BETWEEN '{$today} 00:00:00' AND '{$today} 23:59:59' AND (flag=3 OR flag IS NULL)
 44 | 	");
 45 | 	$sql->execute();
 46 | 	while($row = $sql->fetch(PDO::FETCH_ASSOC)){
 47 | 		if ($row['value_occurrence'] == 1){$singular='';}else{$singular='s';}
 48 | 		echo "<a href=\"./release-date-view.php?dateFrom=".$today."&dateTo=".$today."&submit=Release\">".number_format($row['value_occurrence'])." Hit".$singular."</a> Today<br>"; 
 49 | 	}
 50 | 	
 51 | 	$sql = $pdo->prepare("
 52 | 		SELECT 
 53 | 			COUNT(id) AS value_occurrence 
 54 | 		FROM hm_fwban WHERE timestamp BETWEEN '{$yesterday} 00:00:00' AND '{$yesterday} 23:59:59' AND (flag=3 OR flag IS NULL)
 55 | 	");
 56 | 	$sql->execute();
 57 | 	while($row = $sql->fetch(PDO::FETCH_ASSOC)){
 58 | 		if ($row['value_occurrence'] == 1){$singular='';}else{$singular='s';}
 59 | 		echo "<a href=\"./release-date-view.php?dateFrom=".$yesterday."&dateTo=".$yesterday."&submit=Release\">".number_format($row['value_occurrence'])." Hit".$singular."</a> Yesterday<br>"; 
 60 | 	}
 61 | 	
 62 | 	$sql = $pdo->prepare("
 63 | 		SELECT 
 64 | 			COUNT(id) AS value_occurrence 
 65 | 		FROM hm_fwban 
 66 | 		WHERE timestamp BETWEEN '{$twodaysago} 00:00:00' AND '{$twodaysago} 23:59:59' AND (flag=3 OR flag IS NULL)
 67 | 	");
 68 | 	$sql->execute();
 69 | 	while($row = $sql->fetch(PDO::FETCH_ASSOC)){
 70 | 		if ($row['value_occurrence'] == 1){$singular='';}else{$singular='s';}
 71 | 		echo "<a href=\"./release-date-view.php?dateFrom=".$twodaysago."&dateTo=".$twodaysago."&submit=Release\">".number_format($row['value_occurrence'])." Hit".$singular."</a> on ".date("l", strtotime($twodaysago))."<br>"; 
 72 | 	}
 73 | 	
 74 | 	$sql = $pdo->prepare("
 75 | 		SELECT 
 76 | 			COUNT(id) AS value_occurrence 
 77 | 		FROM hm_fwban 
 78 | 		WHERE timestamp BETWEEN '{$threedaysago} 00:00:00' AND '{$threedaysago} 23:59:59' AND (flag=3 OR flag IS NULL)
 79 | 	");
 80 | 	$sql->execute();
 81 | 	while($row = $sql->fetch(PDO::FETCH_ASSOC)){
 82 | 		if ($row['value_occurrence'] == 1){$singular='';}else{$singular='s';}
 83 | 		echo "<a href=\"./release-date-view.php?dateFrom=".$threedaysago."&dateTo=".$threedaysago."&submit=Release\">".number_format($row['value_occurrence'])." Hit".$singular."</a> on ".date("l", strtotime($threedaysago))."<br>"; 
 84 | 	}
 85 | 	
 86 | 	$sql = $pdo->prepare("
 87 | 		SELECT 
 88 | 			COUNT(id) AS value_occurrence 
 89 | 		FROM hm_fwban 
 90 | 		WHERE timestamp BETWEEN '{$fourdaysago} 00:00:00' AND '{$fourdaysago} 23:59:59' AND (flag=3 OR flag IS NULL)
 91 | 	");
 92 | 	$sql->execute();
 93 | 	while($row = $sql->fetch(PDO::FETCH_ASSOC)){
 94 | 		if ($row['value_occurrence'] == 1){$singular='';}else{$singular='s';}
 95 | 		echo "<a href=\"./release-date-view.php?dateFrom=".$fourdaysago."&dateTo=".$fourdaysago."&submit=Release\">".number_format($row['value_occurrence'])." Hit".$singular."</a> on ".date("l", strtotime($fourdaysago))."<br>"; 
 96 | 	}
 97 | ?>
 98 | 	</div>
 99 | 	<div class="clear"></div>
100 | </div>
101 | 
102 | <div class="section">
103 | 	<div class="secleft">
104 | 		<h2>Release a Ban Reason:</h2>
105 | 		Unreleased IPs for the following ban reasons. Click to review.<br><br>
106 | <?php
107 | 	include_once("config.php");
108 | 	include_once("functions.php");
109 | 
110 | 	$sql = $pdo->prepare("
111 | 		SELECT 
112 | 			ban_reason, 
113 | 			COUNT(ban_reason) AS value_occurrence 
114 | 		FROM hm_fwban 
115 | 		WHERE flag=3 OR flag IS NULL 
116 | 		GROUP BY ban_reason 
117 | 		ORDER BY value_occurrence DESC
118 | 	");
119 | 	$sql->execute();
120 | 	while($row = $sql->fetch(PDO::FETCH_ASSOC)){
121 | 		if ($row['value_occurrence'] == 1){$singular='';}else{$singular='s';}
122 | 		echo number_format($row['value_occurrence'])." hit".$singular." for <a href=\"./release-br-view.php?submit=Release&ban_reason=".$row['ban_reason']."\">".$row['ban_reason']."</a><br>";
123 | 	}
124 | ?>
125 | 	</div>
126 | 
127 | 	<div class="secright">
128 | 		<h2>Release a Country:</h2>
129 | 		Will search for matching unreleased IPs.<br><br>
130 | 		<form autocomplete="off" action='release-country-view.php' method='GET'>
131 | 			<input type="text" id="country" name="country">
132 | 			<input type='submit' name='submit' value='Review' />
133 | 		</form>
134 | 	</div>
135 | 	<div class="clear"></div>
136 | </div>
137 | 
138 | <div class="section">
139 | 	<div class="secleft">
140 | 		<h2>Release an IP range:</h2>
141 | 		Will release any matching presently banned IPs within the range and remove firewall rule.<br><br>
142 | 		<form autocomplete="off" action='release-iprange.php' method='GET'>
143 | 			<input type="text" pattern="^(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)(\/(2[2-9]|3[0-2]))?$" title="255.255.255.255 OR 255.255.255.255/23" id="ipRange" name="ipRange">
144 | 			<input type="submit" name="submit" value="Review">
145 | 		</form>
146 | 		<br>IP Ranges MUST be in: <br>
147 | 		<b>255.255.255.255</b> OR <br>
148 | 		<b>255.255.255.255/24</b> format. <br><br>
149 | 		Single IPs will be automatically converted to /32 CIDR for search purposes. Netmask /22 - /32 only. Click to review options before committing to firewall rule removal.
150 | 	</div>
151 | 
152 | 	<div class="secright">
153 | 		<h2>Release something else:</h2>
154 | 		Whatever shall we release? Work in progress placeholder. Suggestions welcome.
155 | 	</div>
156 | 	<div class="clear"></div>
157 | </div>
158 | 
159 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/www/charthitsperweekcombined.php:
--------------------------------------------------------------------------------
  1 | <!DOCTYPE html> 
  2 | <html>
  3 | <head>
  4 | <title>hMailServer Firewall Ban</title>
  5 | <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
  6 | <meta http-equiv="Content-Style-Type" content="text/css">
  7 | <meta name="viewport" content="width=device-width, initial-scale=1">
  8 | <link rel="stylesheet" type="text/css" media="all" href="stylesheet.css">
  9 | <link href="https://fonts.googleapis.com/css?family=Roboto" rel="stylesheet">
 10 | <link href="https://fonts.googleapis.com/css?family=Oswald" rel="stylesheet"> 
 11 | <script type="text/javascript" src="https://www.google.com/jsapi"></script>
 12 | <script type="text/javascript" src="https://www.gstatic.com/charts/loader.js"></script>
 13 | <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js"></script>
 14 | <?php include("charthitsperdaycombined.php") ?>
 15 | 
 16 | <script type="text/javascript">
 17 | google.load("visualization", "1", {packages:["corechart", "line"]});
 18 | google.setOnLoadCallback(drawChart);
 19 | function drawChart() {
 20 | 	var data = new google.visualization.DataTable();
 21 | 	data.addColumn('date', 'Date');
 22 | 	data.addColumn('number', 'IPs Added');
 23 | 	data.addColumn('number', 'IPs Blocked');
 24 | 	data.addRows([
 25 | <?php 
 26 | 	include_once("config.php");
 27 | 	include_once("functions.php");
 28 | 	
 29 | 	$sql = $pdo->prepare("
 30 | 		SELECT 
 31 | 			a.week_beginning,
 32 | 			a.year,
 33 | 			a.month,
 34 | 			a.day,
 35 | 			a.ipperweek,
 36 | 			b.blockperweek
 37 | 		FROM
 38 | 		(
 39 | 			SELECT 
 40 | 				FROM_DAYS(TO_DAYS(timestamp) -MOD(TO_DAYS(timestamp) -1, 7)) AS week_beginning,
 41 | 				DATE_FORMAT(FROM_DAYS(TO_DAYS(timestamp) -MOD(TO_DAYS(timestamp) -1, 7)), '%Y') AS year,
 42 | 				(DATE_FORMAT(FROM_DAYS(TO_DAYS(timestamp) -MOD(TO_DAYS(timestamp) -1, 7)), '%c') - 1) AS month,
 43 | 				DATE_FORMAT(FROM_DAYS(TO_DAYS(timestamp) -MOD(TO_DAYS(timestamp) -1, 7)), '%e') AS day,
 44 | 				COUNT(id) AS ipperweek 
 45 | 			FROM hm_fwban
 46 | 			GROUP BY FROM_DAYS(TO_DAYS(timestamp) -MOD(TO_DAYS(timestamp) -1, 7))
 47 | 			ORDER BY FROM_DAYS(TO_DAYS(timestamp) -MOD(TO_DAYS(timestamp) -1, 7))
 48 | 		) AS a
 49 | 		LEFT JOIN
 50 | 		(
 51 | 			SELECT 
 52 | 				FROM_DAYS(TO_DAYS(timestamp) -MOD(TO_DAYS(timestamp) -1, 7)) AS week_beginning,
 53 | 				COUNT(DISTINCT(ipaddress)) AS blockperweek
 54 | 			FROM hm_fwban_rh 
 55 | 			GROUP BY FROM_DAYS(TO_DAYS(timestamp) -MOD(TO_DAYS(timestamp) -1, 7))
 56 | 		) AS b
 57 | 		ON a.week_beginning = b.week_beginning
 58 | 		ORDER BY a.week_beginning
 59 | 	");
 60 | 	$sql->execute();
 61 | 	while($row = $sql->fetch(PDO::FETCH_ASSOC)){
 62 | 		if (is_null($row['blockperweek'])){$blockperweek = 0;} else {$blockperweek = $row['blockperweek'];}
 63 | 		echo "[new Date(".$row['year'].", ".$row['month'].", ".$row['day']."), ".$row['ipperweek'].", ".$blockperweek."],";
 64 | 	}
 65 | ?>
 66 | 	]);
 67 | 
 68 | 	var chart = new google.visualization.LineChart(document.getElementById('chart_combined_week'));
 69 | 	  chart.draw(data, {
 70 | 		width: 350,
 71 | 		height: 200,
 72 | 		colors: ['#ff0000','#000000'],
 73 | 		legend: { position: 'bottom' },
 74 | 		trendlines: { 
 75 | 			0: { 
 76 | 				type: 'polynomial',
 77 | 				degree: 2,
 78 | 				visibleInLegend: false,
 79 | 				},
 80 | 			1: { 
 81 | 				type: 'polynomial',
 82 | 				degree: 2,
 83 | 				visibleInLegend: false,
 84 | 				},
 85 | 		},
 86 | 	  });
 87 | }	
 88 | </script>
 89 | 
 90 | <script type="text/javascript">
 91 | google.load("visualization", "1", {packages:["corechart", "line"]});
 92 | google.setOnLoadCallback(drawChart);
 93 | function drawChart() {
 94 | 	var data = new google.visualization.DataTable();
 95 | 	data.addColumn('date', 'Date');
 96 | 	data.addColumn('number', 'IPs Added');
 97 | 	data.addColumn('number', 'IPs Blocked');
 98 | 	data.addRows([
 99 | <?php 
100 | 	include_once("config.php");
101 | 	include_once("functions.php");
102 | 	
103 | 	$sql = $pdo->prepare("
104 | 		SELECT 
105 | 			a.week_beginning,
106 | 			a.year,
107 | 			a.month,
108 | 			a.day,
109 | 			a.ipperweek,
110 | 			b.blockperweek
111 | 		FROM
112 | 		(
113 | 			SELECT 
114 | 				FROM_DAYS(TO_DAYS(timestamp) -MOD(TO_DAYS(timestamp) -1, 7)) AS week_beginning,
115 | 				DATE_FORMAT(FROM_DAYS(TO_DAYS(timestamp) -MOD(TO_DAYS(timestamp) -1, 7)), '%Y') AS year,
116 | 				(DATE_FORMAT(FROM_DAYS(TO_DAYS(timestamp) -MOD(TO_DAYS(timestamp) -1, 7)), '%c') - 1) AS month,
117 | 				DATE_FORMAT(FROM_DAYS(TO_DAYS(timestamp) -MOD(TO_DAYS(timestamp) -1, 7)), '%e') AS day,
118 | 				COUNT(id) AS ipperweek 
119 | 			FROM hm_fwban
120 | 			GROUP BY FROM_DAYS(TO_DAYS(timestamp) -MOD(TO_DAYS(timestamp) -1, 7))
121 | 			ORDER BY FROM_DAYS(TO_DAYS(timestamp) -MOD(TO_DAYS(timestamp) -1, 7))
122 | 		) AS a
123 | 		LEFT JOIN
124 | 		(
125 | 			SELECT 
126 | 				FROM_DAYS(TO_DAYS(timestamp) -MOD(TO_DAYS(timestamp) -1, 7)) AS week_beginning,
127 | 				COUNT(DISTINCT(ipaddress)) AS blockperweek
128 | 			FROM hm_fwban_rh 
129 | 			GROUP BY FROM_DAYS(TO_DAYS(timestamp) -MOD(TO_DAYS(timestamp) -1, 7))
130 | 		) AS b
131 | 		ON a.week_beginning = b.week_beginning
132 | 		ORDER BY a.week_beginning
133 | 	");
134 | 	$sql->execute();
135 | 	while($row = $sql->fetch(PDO::FETCH_ASSOC)){
136 | 		if (is_null($row['blockperweek'])){$blockperweek = 0;} else {$blockperweek = $row['blockperweek'];}
137 | 		echo "[new Date(".$row['year'].", ".$row['month'].", ".$row['day']."), ".$row['ipperweek'].", ".$blockperweek."],";
138 | 	}
139 | ?>
140 | 	]);
141 | 
142 | 	var chart = new google.visualization.LineChart(document.getElementById('chart_combined_week_test'));
143 |       google.visualization.events.addListener(chart, 'ready', function () {
144 |         chart_combined_week_test.innerHTML = '<img src="' + chart.getImageURI() + '">';
145 |         console.log(chart_combined_week_test.innerHTML);
146 | 		document.getElementById('png').outerHTML = ' ' + chart.getImageURI() + ' ';
147 |       });
148 | 	  chart.draw(data, {
149 | 		width: 350,
150 | 		height: 200,
151 | 		colors: ['#ff0000','#000000'],
152 | 		legend: { position: 'bottom' },
153 | 		trendlines: { 
154 | 			0: { 
155 | 				type: 'polynomial',
156 | 				degree: 2,
157 | 				visibleInLegend: false,
158 | 				},
159 | 			1: { 
160 | 				type: 'polynomial',
161 | 				degree: 2,
162 | 				visibleInLegend: false,
163 | 				},
164 | 		},
165 | 	  });
166 | }	
167 | </script>
168 | 
169 | </head>
170 | <body>
171 | <div class="wrapper">
172 | 
173 | 	<div class="section">
174 | 		<div class="secleft">
175 | 			<h2>Hits per day from inception:</h2>
176 | 			<div id="chart_combined_staticdata"></div>
177 | 		</div>
178 | 		<div class="secright">
179 | 			<h2>Hits per week from inception:</h2>
180 | 			<div id="chart_combined_week"></div>
181 | 		</div>
182 | 		<div class="clear"></div>
183 | 
184 | 	<div class="section">
185 | 		<div class="secleft">
186 | 			<!--h2>Hits per day from inception:</h2-->
187 | 			<!--div id="chart_combined_staticdata"></div-->
188 | 		</div>
189 | 		<div class="secright">
190 | 			<h2>Hits per week from inception:</h2>
191 | 			<div id="chart_combined_week_test"></div>
192 | 			<div id='png'></div>
193 | 		</div>
194 | 		<div class="clear"></div>
195 | 	</div>
196 | 
197 | </div>
198 | </body>
199 | </html>


--------------------------------------------------------------------------------
/www/reban.php:
--------------------------------------------------------------------------------
  1 | <?php include("head-r.php") ?>
  2 | 
  3 | <?php
  4 | 	$today = date('Y-m-d');
  5 | 	$yesterday = date('Y-m-d', strtotime(date('Y-m-d')." -1 day"));
  6 | 	$twodaysago = date('Y-m-d', strtotime(date('Y-m-d')." -2 day"));
  7 | 	$threedaysago = date('Y-m-d', strtotime(date('Y-m-d')." -3 day"));
  8 | 	$fourdaysago = date('Y-m-d', strtotime(date('Y-m-d')." -4 day"));
  9 | 	$thismonth = date('Y-m');
 10 | 	$lastmonth = date('Y-m', strtotime(date('Y-m')." -1 month"));
 11 | 	$twomonthsago = date('Y-m', strtotime(date('Y-m')." -2 month"));
 12 | 	$threemonthsago = date('Y-m', strtotime(date('Y-m')." -3 month"));
 13 | 	$fourmonthsago = date('Y-m', strtotime(date('Y-m')." -4 month"));
 14 | ?>
 15 | 
 16 | <div class="section">
 17 | 	<div class="secleft">
 18 | 		<h2>Re-Ban a date range:</h2>
 19 | 		Enter start & end dates and click to review.<br><br>
 20 | 		<form autocomplete="off" action='reban-date-view.php' method='GET'>
 21 | 			<table>
 22 | 				<tr>
 23 | 				<tr><td>Starting Date: </td><td><input type="text" id="dateFrom" name="dateFrom" /></td></tr>
 24 | 				<tr><td>Ending Date: </td><td><input type="text" id="dateTo" name="dateTo" /></td></tr>
 25 | 				<tr><td><input type='submit' name='submit' value='Review' /></td></tr>
 26 | 			</table>
 27 | 		</form>
 28 | 		<br>Note: Range can be a single day, but start and end dates must both be filled in.<br>
 29 | 	</div>
 30 | 
 31 | 	<div class="secright">
 32 | 		<h2>Re-Ban a recent day:</h2>
 33 | 		Released IPs over the past five days. Click below to review.<br><br>
 34 | 		
 35 | <?php
 36 | 	include_once("config.php");
 37 | 	include_once("functions.php");
 38 | 
 39 | 	$sql = $pdo->prepare("
 40 | 		SELECT 
 41 | 			COUNT(id) AS value_occurrence 
 42 | 		FROM hm_fwban 
 43 | 		WHERE timestamp BETWEEN '{$today} 00:00:00' AND '{$today} 23:59:59' AND (flag=1 OR flag=2)
 44 | 	");
 45 | 	$sql->execute();
 46 | 	while($row = $sql->fetch(PDO::FETCH_ASSOC)){
 47 | 	if ($row['value_occurrence'] == 1){$singular="";}else{$singular="s";}
 48 | 	echo "<a href=\"./reban-date-view.php?dateFrom=".$today."&dateTo=".$today."&submit=Ban\">".number_format($row['value_occurrence'])." Hit".$singular."</a> Today<br>"; 
 49 | 	}
 50 | 	
 51 | 	$sql = $pdo->prepare("
 52 | 		SELECT 
 53 | 			COUNT(id) AS value_occurrence 
 54 | 		FROM hm_fwban 
 55 | 		WHERE timestamp BETWEEN '{$yesterday} 00:00:00' AND '{$yesterday} 23:59:59' AND (flag=1 OR flag=2)
 56 | 	");
 57 | 	$sql->execute();
 58 | 	while($row = $sql->fetch(PDO::FETCH_ASSOC)){
 59 | 	if ($row['value_occurrence'] == 1){$singular="";}else{$singular="s";}
 60 | 	echo "<a href=\"./reban-date-view.php?dateFrom=".$yesterday."&dateTo=".$yesterday."&submit=Ban\">".number_format($row['value_occurrence'])." Hit".$singular."</a> Yesterday<br>"; 
 61 | 	}
 62 | 	
 63 | 	$sql = $pdo->prepare("
 64 | 		SELECT 
 65 | 			COUNT(id) AS value_occurrence 
 66 | 		FROM hm_fwban 
 67 | 		WHERE timestamp BETWEEN '{$twodaysago} 00:00:00' AND '{$twodaysago} 23:59:59' AND (flag=1 OR flag=2)
 68 | 	");
 69 | 	$sql->execute();
 70 | 	while($row = $sql->fetch(PDO::FETCH_ASSOC)){
 71 | 	if ($row['value_occurrence'] == 1){$singular="";}else{$singular="s";}
 72 | 	echo "<a href=\"./reban-date-view.php?dateFrom=".$twodaysago."&dateTo=".$twodaysago."&submit=Ban\">".number_format($row['value_occurrence'])." Hit".$singular."</a> on ".date("l", strtotime($twodaysago))."<br>"; 
 73 | 	}
 74 | 	
 75 | 	$sql = $pdo->prepare("
 76 | 		SELECT 
 77 | 			COUNT(id) AS value_occurrence 
 78 | 		FROM hm_fwban 
 79 | 		WHERE timestamp BETWEEN '{$threedaysago} 00:00:00' AND '{$threedaysago} 23:59:59' AND (flag=1 OR flag=2)
 80 | 	");
 81 | 	$sql->execute();
 82 | 	while($row = $sql->fetch(PDO::FETCH_ASSOC)){
 83 | 	if ($row['value_occurrence'] == 1){$singular="";}else{$singular="s";}
 84 | 	echo "<a href=\"./reban-date-view.php?dateFrom=".$threedaysago."&dateTo=".$threedaysago."&submit=Ban\">".number_format($row['value_occurrence'])." Hit".$singular."</a> on ".date("l", strtotime($threedaysago))."<br>"; 
 85 | 	}
 86 | 	
 87 | 	$sql = $pdo->prepare("
 88 | 		SELECT 
 89 | 			COUNT(id) AS value_occurrence 
 90 | 		FROM hm_fwban 
 91 | 		WHERE timestamp BETWEEN '{$fourdaysago} 00:00:00' AND '{$fourdaysago} 23:59:59' AND (flag=1 OR flag=2)
 92 | 	");
 93 | 	$sql->execute();
 94 | 	while($row = $sql->fetch(PDO::FETCH_ASSOC)){
 95 | 	if ($row['value_occurrence'] == 1){$singular="";}else{$singular="s";}
 96 | 	echo "<a href=\"./reban-date-view.php?dateFrom=".$fourdaysago."&dateTo=".$fourdaysago."&submit=Ban\">".number_format($row['value_occurrence'])." Hit".$singular."</a> on ".date("l", strtotime($fourdaysago))."<br>"; 
 97 | 	}
 98 | 
 99 | ?>
100 | 	</div>
101 | 	<div class="clear"></div>
102 | </div>
103 | 
104 | <div class="section">
105 | 	<div class="secleft">
106 | 		<h2>Re-Ban a Ban Reason:</h2>
107 | 		Released IPs for the following ban reasons. Click to review.<br><br>
108 | <?php
109 | 	include_once("config.php");
110 | 	include_once("functions.php");
111 | 	$sqlcount = $pdo->prepare("
112 | 		SELECT 
113 | 			COUNT(id) AS value_occurrence 
114 | 		FROM hm_fwban 
115 | 		WHERE flag=1 OR flag=2
116 | 	");
117 | 	$sqlcount->execute();
118 | 	$total_rows = $sqlcount->fetchColumn();
119 | 	if ($total_rows > 0) { 
120 | 		$sql = $pdo->prepare("
121 | 			SELECT 
122 | 				ban_reason, 
123 | 				COUNT(ban_reason) AS value_occurrence 
124 | 			FROM hm_fwban 
125 | 			WHERE flag=1 OR flag=2 
126 | 			GROUP BY ban_reason 
127 | 			ORDER BY value_occurrence DESC
128 | 		");
129 | 		$sql->execute();
130 | 		while($row = $sql->fetch(PDO::FETCH_ASSOC)){
131 | 		if ($row['value_occurrence'] == 1){$singular="";}else{$singular="s";}
132 | 		echo number_format($row['value_occurrence'])." hit".$singular." for <a href=\"./reban-br-view.php?submit=Reban&ban_reason=".$row['ban_reason']."\">".$row['ban_reason']."</a><br>"; 
133 | 		}
134 | 	} else {
135 | 		echo "No released records for any ban reason.";
136 | 	}
137 | 
138 | ?>
139 | 	</div>
140 | 
141 | 	<div class="secright">
142 | 		<h2>Re-Ban a Country:</h2>
143 | 		Will search for matching released IPs.<br><br>
144 | 		<form autocomplete="off" action='reban-country-view.php' method='GET'>
145 | 			<input type="text" id="country" name="country">
146 | 			<input type='submit' name='submit' value='Review' />
147 | 		</form>
148 | 		<br>Note: Only applies to previously released IPs for the selected country.
149 | 	</div>
150 | 	<div class="clear"></div>
151 | </div>
152 | 
153 | <div class="section">
154 | 	<div class="secleft">
155 | 		<h2>Manually ban an IP range:</h2>
156 | 		Enter an IP or IP range. Will search for matches and if found will reban. If no matches found will add IP to firewall ban list with reason "Manual". Not dependent on previous bans/releases.<br><br>
157 | 		<form autocomplete="off" action="reban-iprange.php" method="GET">
158 | 			<input type="text" pattern="^(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)(\/(2[2-9]|3[0-2]))?$" title="255.255.255.255 OR 255.255.255.255/23" id="ipRange" name="ipRange">
159 | 			<input type="submit" name="submit" value="Review">
160 | 		</form>
161 | 		<br>IP Ranges MUST be in: <br>
162 | 		<b>255.255.255.255</b> OR <br>
163 | 		<b>255.255.255.255/24</b> format. <br><br>
164 | 		Single IPs will be automatically converted to /32 CIDR for insertion as firewall rule. Netmask /22 - /32 only. Click to review options before committing to a network ban.
165 | 	</div>
166 | 
167 | 	<div class="secright">
168 | 		<h2>Ban something else:</h2>
169 | 		Whatever shall we ban? Work in progress placeholder. Suggestions welcome.
170 | 	</div>
171 | 	<div class="clear"></div>
172 | </div>
173 | 
174 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/www/search.php:
--------------------------------------------------------------------------------
  1 | <?php include("head.php") ?>
  2 | 
  3 | <div class="section">
  4 | To search for a date range <a href="./search-date.php">click here</a>.
  5 | </div>
  6 | 
  7 | <?php
  8 | 	include_once("config.php");
  9 | 	include_once("functions.php");
 10 | 
 11 | 	if (isset($_GET['page'])) {
 12 | 		$page = $_GET['page'];
 13 | 		$display_pagination = 1;
 14 | 	} else {
 15 | 		$page = 1;
 16 | 		$total_pages = 1;
 17 | 		$display_pagination = 0;
 18 | 	}
 19 | 	if (isset($_GET['submit'])) {$button = $_GET['submit'];} else {$button = "";}
 20 | 	if (isset($_GET['search'])) {$search = $_GET['search'];} else {$search = "";}
 21 | 	if (isset($_GET['RS'])) {$RS = $_GET['RS'];} else {$RS = "";}
 22 | 	if (isset($_GET['flag'])) {$flag = $_GET['flag'];} else {$flag = "";}
 23 | 	if (isset($_GET['ban_reason'])) {$ban_reason = $_GET['ban_reason'];} else {$ban_reason = "";}
 24 | 
 25 | 	echo "<div class='section'>";
 26 | 	echo "	<form action='search.php' method='GET'>";
 27 | 	echo "		<input type='text' size='20' name='search' placeholder='Search...' value='".$search."'>";
 28 | 	echo "		<select name='RS'>";
 29 | 	echo "			<option value=''>RS</option>";
 30 | 	echo "			<option value='YES'>YES</option>";
 31 | 	echo "			<option value='NO'>NO</option>";
 32 | 	echo "			<option value='NEW'>NEW</option>";
 33 | 	echo "			<option value='SAF'>SAF</option>";
 34 | 	echo "		</select>";
 35 | 	echo "		<input type='submit' name='submit' value='Search' >";
 36 | 	echo "	</form>";
 37 | 	echo "</div>";
 38 | 
 39 | 	echo "<div class='section'>";
 40 | 
 41 | 	$no_of_records_per_page = 20;
 42 | 	$offset = ($page-1) * $no_of_records_per_page;
 43 | 	
 44 | 	if ($RS=="NO"){$RS_SQL = " AND (flag IS NULL OR flag=3 OR flag=7)";}
 45 | 	elseif ($RS=="YES"){$RS_SQL = " AND (flag=1 OR flag=2)";}
 46 | 	elseif ($RS=="NEW"){$RS_SQL = " AND flag=4";}
 47 | 	elseif ($RS=="SAF"){$RS_SQL = " AND (flag=5 OR flag=6)";}
 48 | 	elseif ($RS==2){$RS_SQL = " AND flag=2";}
 49 | 	elseif ($RS==3){$RS_SQL = " AND flag=3";}
 50 | 	elseif ($RS==5){$RS_SQL = " AND flag=5";}
 51 | 	elseif ($RS==7){$RS_SQL = " AND flag=7";}
 52 | 	else {$RS_SQL = "";}
 53 | 
 54 | 	if ($ban_reason==""){
 55 | 		$ban_reason_sql="";
 56 | 	} else {
 57 | 		$search="";
 58 | 		$ban_reason_sql=" AND ban_reason LIKE '{$ban_reason}'";
 59 | 	}
 60 | 
 61 | 	$total_pages_sql = $pdo->prepare("
 62 | 		SELECT Count( * ) AS count 
 63 | 		FROM hm_fwban 
 64 | 		WHERE (".(IsMSSQL() ? DBCastDateTimeFieldAsDate('timestamp') : 'timestamp')." LIKE '%{$search}%' OR ipaddress LIKE '%{$search}%' OR ban_reason LIKE '%{$search}%' OR country LIKE '%{$search}%' OR helo LIKE '%{$search}%' OR ptr LIKE '%{$search}%')".$ban_reason_sql.$RS_SQL
 65 | 	);
 66 | 	$total_pages_sql->execute();
 67 | 	$total_rows = $total_pages_sql->fetchColumn();
 68 | 	$total_pages = ceil($total_rows / $no_of_records_per_page);
 69 | 
 70 | 	$sql = $pdo->prepare("
 71 | 		SELECT
 72 | 			a.tsf,
 73 | 			a.ipaddress,
 74 | 			a.ban_reason,
 75 | 			a.country,
 76 | 			a.flag,
 77 | 			a.helo,
 78 | 			a.ptr,
 79 | 			b.returnhits
 80 | 		FROM
 81 | 		(
 82 | 			SELECT 
 83 | 				".DBFormatDate('timestamp', '%y/%m/%d %T')." AS tsf, 
 84 | 				timestamp, 
 85 | 				ipaddress, 
 86 | 				ban_reason, 
 87 | 				country, 
 88 | 				flag, 
 89 | 				helo, 
 90 | 				ptr
 91 | 			FROM hm_fwban 
 92 | 			WHERE (".(IsMSSQL() ? DBCastDateTimeFieldAsDate('timestamp') : 'timestamp')." LIKE '%{$search}%' OR ipaddress LIKE '%{$search}%' OR ban_reason LIKE '%{$search}%' OR country LIKE '%{$search}%' OR helo LIKE '%{$search}%' OR ptr LIKE '%{$search}%')".$ban_reason_sql."".$RS_SQL." 
 93 | 		)  a
 94 | 		LEFT JOIN
 95 | 		(
 96 | 			SELECT 
 97 | 				hits AS returnhits, 
 98 | 				ipaddress
 99 | 			FROM hm_fwban_blocks_ip
100 | 		)  b
101 | 		ON a.ipaddress = b.ipaddress
102 | 		".DBLimitRowsWithOffset('a.tsf','DESC',0,0,$offset,$no_of_records_per_page)
103 | 	);
104 | 	$sql->execute();
105 | 	
106 | 	if ($RS=="YES"){$RSres=" with release status \"<b>YES</b>\"";} 
107 | 	elseif ($RS=="NO"){$RSres=" with release status \"<b>NO</b>\"";} 
108 | 	elseif ($RS=="NEW"){$RSres=" with release status \"<b>NEW</b>\"";} 
109 | 	elseif ($RS=="SAF"){$RSres=" with release status \"<b>SAFE</b>\"";} 
110 | 	else {$RSres = "";} 
111 | 	
112 | 	if ($search==""){$search_res="";}
113 | 	else {$search_res=" for search term \"<b>".$search."</b>\"";}
114 | 
115 | 	if ($ban_reason==""){$ban_reason_res="";}
116 | 	else {$ban_reason_res=" for Ban Reason \"<b>".$ban_reason."</b>\"";}
117 | 
118 | 	if ($total_rows == 1){$singular = '';} else {$singular= 's';}
119 | 	if ($total_rows == 0){
120 | 		if ($search == "" && $ban_reason == ""){
121 | 			echo "Please enter a search term";
122 | 		} else {
123 | 			echo "No results ".$search_res."".$ban_reason_res."";
124 | 		}	
125 | 	} else {
126 | 		echo "Results ".$search_res."".$ban_reason_res.": ".number_format($total_rows)." Hit".$singular." (Page: ".number_format($page)." of ".number_format($total_pages).")<br>";
127 | 		echo "<table class='section'>
128 | 			<tr>
129 | 				<th>Timestamp</th>
130 | 				<th>IP Address</th>
131 | 				<th>Reason</th>
132 | 				<th>Country</th>
133 | 				<th>HELO</th>
134 | 				<th>FB</th>
135 | 				<th>RS</th>
136 | 			</tr>";
137 | 		while($row = $sql->fetch(PDO::FETCH_ASSOC)){
138 | 			echo "<tr>";
139 | 			echo "<td>".$row['tsf']."</td>";
140 | 			echo "<td><a href=\"search.php?submit=Search&search=".$row['ipaddress']."\">".$row['ipaddress']."</a></td>";
141 | 			echo "<td>".$row['ban_reason']."</td>";
142 | 			echo "<td><a href=\"https://ipinfo.io/".$row['ipaddress']."\"  target=\"_blank\">".$row['country']."</a></td>";
143 | 			if (empty($row['helo'])){$helo_row=$row['ptr'];} else {$helo_row=$row['helo'];} 
144 | 			echo "<td><a onClick=\"window.open('./ptr.php?ip=".$row['ipaddress']."','PTR','resizable,height=240,width=320'); return false;\">".$helo_row."</a><noscript>You need Javascript to use the previous link or use <a href=\"ptr.php?ip=".$row['ipaddress']."\" target=\"_blank\">PTR/detail</a></noscript>";
145 | 			if ($row['returnhits']===NULL){echo "<td style=\"text-align:right;\">0</td>";}
146 | 			else {echo "<td style=\"text-align:right;\"><a href=\"repeats-IP.php?submit=Search&repeatIP=".$row['ipaddress']."\">".number_format($row['returnhits'])."</a></td>";}
147 | 			if($row['flag'] === NULL || $row['flag'] == 3 || $row['flag'] == 7) echo "<td style=\"text-align:center;\"><a href=\"./release-ip.php?submit=Release&ipRange=".$row['ipaddress']."\" onclick=\"return confirm('Are you sure you want to release ".$row['ipaddress']."?')\">No</a></td>";
148 | 			elseif($row['flag'] == 1 || $row['flag'] == 2) echo "<td style=\"text-align:center;\">YES</td>";
149 | 			elseif($row['flag'] == 4) echo "<td style=\"text-align:center;\">NEW</td>";
150 | 			elseif($row['flag'] == 6 || $row['flag'] == 5) echo "<td style=\"text-align:center;\">SAF</td>";
151 | 			else echo "<td style=\"text-align:center;\">ERR</td>";
152 | 			echo "</tr>";
153 | 		}
154 | 		echo "</table>";
155 | 
156 | 		if ($ban_reason==""){$ban_reason_page="";} else {$ban_reason_page="&ban_reason=".$ban_reason."";}
157 | 
158 | 		if ($total_pages == 1){echo "";}
159 | 		else {
160 | 			echo "<ul>";
161 | 			if($page <= 1){echo "<li>First </li>";} else {echo "<li><a href=\"?submit=Search&search=".$search.$ban_reason_page."&RS=".$RS."&page=1\">First </a><li>";}
162 | 			if($page <= 1){echo "<li>Prev </li>";} else {echo "<li><a href=\"?submit=Search&search=".$search.$ban_reason_page."&RS=".$RS."&page=".($page - 1)."\">Prev </a></li>";}
163 | 			if($page >= $total_pages){echo "<li>Next </li>";} else {echo "<li><a href=\"?submit=Search&search=".$search.$ban_reason_page."&RS=".$RS."&page=".($page + 1)."\">Next </a></li>";}
164 | 			if($page >= $total_pages){echo "<li>Last</li>";} else {echo "<li><a href=\"?submit=Search&search=".$search.$ban_reason_page."&RS=".$RS."&page=".$total_pages."\">Last</a></li>";}
165 | 			echo "</ul>";
166 | 		}
167 | 		if ($total_pages > 0){
168 | 			echo "<br>
169 | 			FB = Firewall Blocks<br>
170 | 			RS = Release Status<br><br>";
171 | 		}
172 | 	}
173 | ?>
174 | 
175 | <br>
176 | </div> <!-- end of section -->
177 | 
178 | <?php include("foot.php") ?>


--------------------------------------------------------------------------------
/www/functions.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | 	If ($Database['driver'] == 'mysql') {
  4 | 		$pdo = new PDO("mysql:host=".$Database['host'].";port=".$Database['port'].";dbname=".$Database['dbname'], $Database['username'], $Database['password']);
  5 | 	} ElseIf ($Database['driver'] == 'mssql') {
  6 | 		$pdo = new PDO("sqlsrv:Server=".$Database['host'].",".$Database['port'].";Database=".$Database['dbname'], $Database['username'], $Database['password']);
  7 | 	} ElseIf ($Database['driver'] == 'odbc') {
  8 | 		$pdo = new PDO("odbc:Driver={".$Database['dsn']."};Server=".$Database['host'].";Port=".$Database['port'].";Database=".$Database['dbname'].";User=".$Database['username'].";Password=".$Database['password'].";");
  9 | 	} Else {
 10 | 		echo "Configuration Error - No database driver specified";
 11 | 	}
 12 | 
 13 | 	If ($GeoIPDatabase['driver'] == 'mysql') {
 14 | 		$geo_pdo = new PDO("mysql:host=".$GeoIPDatabase['host'].";port=".$GeoIPDatabase['port'].";dbname=".$GeoIPDatabase['dbname'], $GeoIPDatabase['username'], $GeoIPDatabase['password']);
 15 | 	} ElseIf ($GeoIPDatabase['driver'] == 'mssql') {
 16 | 		$geo_pdo = new PDO("sqlsrv:Server=".$GeoIPDatabase['host'].",".$GeoIPDatabase['port'].";Database=".$GeoIPDatabase['dbname'], $GeoIPDatabase['username'], $GeoIPDatabase['password']);
 17 | 	} ElseIf ($GeoIPDatabase['driver'] == 'odbc') {
 18 | 		$geo_pdo = new PDO("odbc:Driver={".$GeoIPDatabase['dsn']."};Server=".$GeoIPDatabase['host'].";Port=".$GeoIPDatabase['port'].";Database=".$GeoIPDatabase['dbname'].";User=".$GeoIPDatabase['username'].";Password=".$GeoIPDatabase['password'].";");
 19 | 	} Else {
 20 | 		echo "Configuration Error - No database driver specified";
 21 | 	}
 22 | 
 23 | 	function ipRangeFinder($cidr) {
 24 | 	   $range = array();
 25 | 	   $cidr = explode('/', $cidr);
 26 | 	   $range[0] = long2ip((ip2long($cidr[0])) & ((-1 << (32 - (int)$cidr[1]))));
 27 | 	   $range[1] = long2ip((ip2long($range[0])) + pow(2, (32 - (int)$cidr[1])) - 1);
 28 | 	   return $range;
 29 | 	}
 30 | 
 31 | 	// $orderBy2 is sub-order to $orderBy1
 32 | 	Function DBLimitRowsWithOffset($orderBy1, $orderByDir1, $orderBy2, $orderByDir2, $offset, $numRows){
 33 | 		global $Database;
 34 | 		$QueryLimit = "";
 35 | 		
 36 | 		if (($orderBy1 === 0) && ($orderByDir1 === 0) && ($orderBy2 === 0) && ($orderByDir2 === 0)){
 37 | 			if (IsMySQL()){
 38 | 				$orderStmt = "";
 39 | 			} elseif (IsMSSQL()){
 40 | 				$orderStmt = " ORDER BY 1";
 41 | 			}
 42 | 		} elseif (($orderBy2 === 0) && ($orderByDir2 === 0)){
 43 | 			$orderStmt = " ORDER BY ".$orderBy1." ".$orderByDir1;
 44 | 		} else {
 45 | 			$orderStmt = " ORDER BY ".$orderBy1." ".$orderByDir1.", ".$orderBy2." ".$orderByDir2;
 46 | 		}
 47 | 		
 48 | 		if (IsMySQL()) {
 49 | 			$QueryLimit = " ".$orderStmt." LIMIT ".$offset.", ".$numRows;
 50 | 		} elseif (IsMSSQL()) {
 51 | 			$QueryLimit = " ".$orderStmt." OFFSET ".$offset." ROWS FETCH NEXT ".$numRows." ROWS ONLY";
 52 | 		} else {
 53 | 			$QueryLimit = "";
 54 | 		}
 55 | 		return $QueryLimit;
 56 | 	}
 57 | 
 58 | 	Function DBGetCurrentDateTime(){
 59 | 		global $Database;
 60 | 		$Return = "";
 61 | 		if (IsMySQL()) {
 62 | 			$Return = "NOW()";
 63 | 		} elseif (IsMSSQL()) {
 64 | 			$Return = "GETDATE()";
 65 | 		}
 66 | 		return $Return;
 67 | 	}
 68 | 
 69 | 	Function DBCastDateTimeFieldAsDate($fieldName){
 70 | 		global $Database;
 71 | 		$Return = "";
 72 | 		if (IsMySQL()) {
 73 | 			$Return = "DATE(".$fieldName.")";
 74 | 		} elseif (IsMSSQL()) {
 75 | 			$Return = "CAST(".$fieldName." AS DATE)";
 76 | 		}
 77 | 		return $Return;
 78 | 	}
 79 | 
 80 | 	Function DBCastDateTimeFieldAsHour($fieldName){
 81 | 		global $Database;
 82 | 		$Return = "";
 83 | 		if (IsMySQL()) {
 84 | 			$Return = "HOUR(".$fieldName.")";
 85 | 		} elseif (IsMSSQL()) {
 86 | 			$Return = "DATEPART(hour,".$fieldName.")";
 87 | 		}
 88 | 		return $Return;
 89 | 	}
 90 | 
 91 | 	Function DBCastDateTimeFieldAsMonth($fieldName){
 92 | 		global $Database;
 93 | 		$Return = "";
 94 | 		if (IsMySQL()) {
 95 | 			$Return = "MONTH(".$fieldName.")";
 96 | 		} elseif (IsMSSQL()) {
 97 | 			$Return = "DATEPART(month,".$fieldName.")";
 98 | 		}
 99 | 		return $Return;
100 | 	}
101 | 
102 | 	Function DBCastDateTimeFieldAsYear($fieldName){ 
103 | 		global $Database; 
104 | 		$Return = ""; 
105 | 		if (IsMySQL()) { 
106 | 			$Return = "YEAR(".$fieldName.")"; 
107 | 		} elseif (IsMSSQL()) { 
108 | 			$Return = "DATEPART(year,".$fieldName.")";
109 | 		} 
110 | 		return $Return; 
111 | 	}
112 | 
113 | 	Function DBCastDateTimeFieldAsDay($fieldName){
114 | 		global $Database;
115 | 		$Return = "";
116 | 		if (IsMySQL()) {
117 | 			$Return = "DAY(".$fieldName.")";
118 | 		} elseif (IsMSSQL()) {
119 | 			$Return = "DATEPART(day,".$fieldName.")";
120 | 		}
121 | 		return $Return;
122 | 	}
123 | 
124 | 	Function DBFormatDate($fieldName, $formatSpecifier){
125 | 		global $Database;
126 | 		$Return = "";
127 | 
128 | 		$dateFormatSpecifiers = array (
129 | 			'%Y'                => 'yyyy',
130 | 			'%c'                => 'MM',
131 | 			'%e'                => 'dd',
132 | 			'Y-m-d'             => 'yyyy-MM-dd',
133 | 			'%y/%m/%d'          => 'yy/MM/dd',
134 | 			'Y-m'               => 'yyyy-MM',
135 | 			'%Y-%m'             => 'yyyy-MM',
136 | 			'%y/%m/%d %T'       => 'yy-MM-dd HH:mm:ss',
137 | 			'%Y/%m/%d %H:%i:%s' => 'yyyy-MM-dd HH:mm:ss',
138 | 			'%Y/%m/01'          => 'yyyy-MM-01',
139 | 			'%y/%c/%e'          => 'yy/MM/dd',
140 | 			'%H'                => 'HH',
141 | 			'%M %D, %Y'         => 'MMMM d, yyyy',
142 | 			'%T'                => 'HH:mm:ss',
143 | 			'%H:%i %p'          => 'hh:mm tt',
144 | 		);
145 | 
146 | 		if (IsMySQL()) {
147 | 			$Return = "DATE_FORMAT(".$fieldName.", '".$formatSpecifier."')";
148 | 		} elseif (IsMSSQL()) {
149 | 			switch ($formatSpecifier) 
150 | 			{ 
151 | 				case '%Y': 
152 | 					$Return = DBCastDateTimeFieldAsYear($fieldName); 
153 | 					break; 
154 | 				case '%c': 
155 | 					$Return = DBCastDateTimeFieldAsMonth($fieldName); 
156 | 					break; 
157 | 				case '%e': 
158 | 					$Return = DBCastDateTimeFieldAsDay($fieldName); 
159 | 					break; 
160 | 				case '%H': 
161 | 					$Return = DBCastDateTimeFieldAsHour($fieldName); 
162 | 					break; 
163 | 				default: 
164 | 					$Return = "FORMAT(".$fieldName.", '".$dateFormatSpecifiers[$formatSpecifier]."', 'en-US')"; 
165 | 					break; 
166 | 			}		}
167 | 		return $Return;
168 | 	}
169 | 
170 | 	Function DBIpStringToIntField($fieldName){
171 | 		global $Database;
172 | 		$Return = "";
173 | 
174 | 		if (IsMySQL()) {
175 | 			$Return = "INET_ATON(".$fieldName.")";
176 | 		} elseif (IsMSSQL()) {
177 | 			$Return = "dbo.ipStringToInt(".$fieldName.")";
178 | 		}
179 | 		return $Return;
180 | 	}
181 | 
182 | 	Function DBIpStringToIntValue($ipString){
183 | 		global $Database;
184 | 		$Return = "";
185 | 
186 | 		if (IsMySQL()) {
187 | 			$Return = "INET_ATON('".$ipString."')";
188 | 		} elseif (IsMSSQL()) {
189 | 			$Return = "dbo.ipStringToInt('".$ipString."')";
190 | 		}
191 | 		return $Return;
192 | 	}
193 | 
194 | 	Function IsMySQL(){
195 | 		global $Database;
196 | 		return ($Database['dbtype'] == 'mysql');
197 | 	}
198 | 
199 | 	Function IsMSSQL(){
200 | 		global $Database;
201 | 		return ($Database['dbtype'] == 'mssql');
202 | 	}
203 | 
204 | 	function ip_country($ip) {
205 | 		global $GeoIPDatabase;
206 | 		global $geo_pdo;
207 | 
208 | 		if ($GeoIPDatabase['use_geoip'] == 'true'){
209 | 
210 | 			$getcountry_sql = $geo_pdo->prepare("
211 | 				SELECT 
212 | 					countryname 
213 | 				FROM (
214 | 					SELECT * 
215 | 					FROM geo_ip 
216 | 					WHERE ".DBIpStringToIntValue($ip)." <= maxipaton 
217 | 					".DBLimitRowsWithOffset(0,0,0,0,0,1)."
218 | 				) AS A 
219 | 				WHERE minipaton <= ".DBIpStringToIntValue($ip)
220 | 			);
221 | 			$getcountry_sql->execute();
222 | 			$country = $getcountry_sql->fetchColumn();
223 | 			if (empty($country)) {
224 | 				$output = "NOT FOUND";
225 | 			}else {
226 | 				$output = $country;
227 | 			}
228 | 			
229 | 		} else {
230 | 
231 | 			$ipdat = @json_decode(file_get_contents("http://ip-api.com/json/" . $ip));
232 | 			if ($ipdat->status == "success"){
233 | 				$output = @$ipdat->country;
234 | 			} else {
235 | 				$output = "NOT FOUND";
236 | 			}
237 | 		}
238 | 		return $output;
239 | 	}
240 | 
241 | 
242 | ?>
243 | 


--------------------------------------------------------------------------------