bandb

A stupid iptables helper for persistent ban database.

Concept

This is mainly intended to satisfy my own needs since I use iptables.service (/etc/iptables/ip*tables.rules) and sshguard.

Since sshguard does not provide an easy way to permanently ban addresses/networks, I decided to add one more chain to the rule set.

Installation

You'd need to add this rule to your *filter table at an earliest as possible convenient place:

:bandb - [0:0]
-A INPUT -j bandb

Script/service installation is as simple as:

install -Dm755 bandb /usr/bin/bandb
install -Dm644 bandb.service /usr/lib/systemd/system/bandb.service
systemctl daemon-reload
systemctl enable bandb.service
systemctl start bandb.service