CyberMind-FR
c68b1b2cc0
The netifyd collector cron job now persists across reboots: - Add collector_enabled option to UCI config (secubox-netifyd.sink) - Create init script (secubox-netifyd-collector) to manage cron job - Update netifyd-collector-setup with enable/disable/status commands - Apply collector settings on first boot via uci-defaults Usage: netifyd-collector-setup unix /tmp/netifyd-flows.json # Enable netifyd-collector-setup disable # Disable netifyd-collector-setup status # Show status Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
52 lines
1.3 KiB
Plaintext
52 lines
1.3 KiB
Plaintext
config settings 'settings'
|
|
option enabled '1'
|
|
option socket_type 'unix'
|
|
option socket_address '127.0.0.1'
|
|
option socket_port '7150'
|
|
option unix_socket_path '/var/run/netifyd/netifyd.sock'
|
|
option auto_start '1'
|
|
option flow_retention '3600'
|
|
option max_flows '10000'
|
|
|
|
config monitoring 'monitoring'
|
|
option enable_flow_tracking '1'
|
|
option enable_app_detection '1'
|
|
option enable_protocol_detection '1'
|
|
option enable_device_tracking '1'
|
|
option enable_ssl_inspection '1'
|
|
option enable_dns_inspection '1'
|
|
|
|
config analytics 'analytics'
|
|
option enabled '1'
|
|
option retention_days '7'
|
|
option top_apps_limit '10'
|
|
option top_protocols_limit '10'
|
|
option top_devices_limit '20'
|
|
|
|
config alerts 'alerts'
|
|
option enabled '0'
|
|
option alert_on_new_device '0'
|
|
option alert_on_suspicious_traffic '0'
|
|
option alert_threshold_mbps '100'
|
|
|
|
config sink 'sink'
|
|
option enabled '0'
|
|
option type 'unix'
|
|
option unix_path '/tmp/netifyd-flows.json'
|
|
option tcp_address '127.0.0.1'
|
|
option tcp_port '9501'
|
|
option collector_enabled '0'
|
|
|
|
config plugin 'bittorrent'
|
|
option enabled '0'
|
|
option ipset 'secubox-bittorrent'
|
|
option ipset_family 'inet'
|
|
option match_application 'bittorrent'
|
|
|
|
config plugin 'nftables'
|
|
option enabled '0'
|
|
option table 'filter'
|
|
option chain 'SECUBOX'
|
|
option action 'drop'
|
|
option target_ipset 'secubox-banned'
|