sprungknoedl / reputile Goto Github PK

The IP4 filter should support querying IPs via CIDR notation. A query of ip4=8.0.0.0/8 shoudl return any entries, whose IPv4 address are inside the given range.

This would enable an easy way to monitor for organisations if their some hosts in their IP range are blacklisted.

PostgreSQL supports range queries via http://www.postgresql.org/docs/9.5/static/functions-net.html

To prevent DoS before this service has a wider audience, a mechanism to rate limit database downloads and/or searches should be in place.

The rate limiting should allow special agents to make more request, shoudl the need arise. A sensible default for the beginning could be 10 req/s.

Support blacklisted IPv6 addresses in reputile. As the IPv6 address space is huge, storing single addresses is probably nonsense. The IPv6 addresses could either be stored:

• in a seperate column (ip6)
• or the ip4 column could hold both ipv4 and ipv6 addresses (and be renamed to ip)

Instead storing the smallest sensible subnet (e.g. /64) instead might be more appropriate?

At the very least, this issue would greatly benefit from #1.

The cache database size should not be overwritten when filters are applied to the database. This causes the download link to report wrong sizes (much smaller) than the database really is.

The redis key should only be set when no filters are supplied.