CyberMind-FR
77a78053e2
- Add netifyd-plugin-setup script for Netify repository management - Add ipset and kmod-nft-compat dependencies - Add postinst to create plugin directories and ipsets - Extend UCI config with new plugin sections: - flow_actions: Flow Actions processor plugin - streaming: Streaming services IP set (Netflix, YouTube, etc.) - category_block: Category-based blocking (malware, ads, tracking) - flow_rule: Custom flow rules support - Update RPCD backend with apply_plugin_config for all plugins: - Auto-create ipsets (secubox-bittorrent, secubox-banned, secubox-streaming) - Auto-create nftables table/chain when enabled - Support for Flow Actions processor, IPSet, and nftables plugins - Update settings UI with new plugin configuration sections - Add plugin installation instructions in UI Plugin packages (from netify.ai repository): - netify-proc-flow-actions: Flow Actions processor - netify-sink-socket: Socket sink for local export Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
100 lines
2.5 KiB
Plaintext
100 lines
2.5 KiB
Plaintext
config settings 'settings'
|
|
option enabled '1'
|
|
option socket_type 'unix'
|
|
option socket_address '127.0.0.1'
|
|
option socket_port '7150'
|
|
option unix_socket_path '/var/run/netifyd/netifyd.sock'
|
|
option auto_start '1'
|
|
option flow_retention '3600'
|
|
option max_flows '10000'
|
|
|
|
config monitoring 'monitoring'
|
|
option enable_flow_tracking '1'
|
|
option enable_app_detection '1'
|
|
option enable_protocol_detection '1'
|
|
option enable_device_tracking '1'
|
|
option enable_ssl_inspection '1'
|
|
option enable_dns_inspection '1'
|
|
|
|
config analytics 'analytics'
|
|
option enabled '1'
|
|
option retention_days '7'
|
|
option top_apps_limit '10'
|
|
option top_protocols_limit '10'
|
|
option top_devices_limit '20'
|
|
|
|
config alerts 'alerts'
|
|
option enabled '0'
|
|
option alert_on_new_device '0'
|
|
option alert_on_suspicious_traffic '0'
|
|
option alert_threshold_mbps '100'
|
|
|
|
config sink 'sink'
|
|
option enabled '0'
|
|
option type 'unix'
|
|
option unix_path '/tmp/netifyd-flows.json'
|
|
option tcp_address '127.0.0.1'
|
|
option tcp_port '9501'
|
|
option collector_enabled '0'
|
|
|
|
# Flow Actions Processor Plugin
|
|
config plugin 'flow_actions'
|
|
option enabled '0'
|
|
option config_file '/etc/netifyd/flow-actions.json'
|
|
|
|
# BitTorrent IP Set Plugin
|
|
config plugin 'bittorrent'
|
|
option enabled '0'
|
|
option ipset 'secubox-bittorrent'
|
|
option ipset_family 'inet'
|
|
option match_application 'bittorrent'
|
|
option ipset_timeout '900'
|
|
|
|
# nftables Verdicts Plugin
|
|
config plugin 'nftables'
|
|
option enabled '0'
|
|
option table 'inet secubox'
|
|
option chain 'flow_actions'
|
|
option action 'drop'
|
|
option target_ipset 'secubox-banned'
|
|
|
|
# Streaming Services Detection Plugin
|
|
config plugin 'streaming'
|
|
option enabled '0'
|
|
option ipset 'secubox-streaming'
|
|
option ipset_family 'inet'
|
|
option ipset_timeout '1800'
|
|
list match_application 'netflix'
|
|
list match_application 'youtube'
|
|
list match_application 'spotify'
|
|
list match_application 'twitch'
|
|
list match_application 'disney'
|
|
list match_application 'amazon_video'
|
|
|
|
# Application Category Blocking
|
|
config plugin 'category_block'
|
|
option enabled '0'
|
|
option table 'inet secubox'
|
|
option chain 'flow_actions'
|
|
option action 'drop'
|
|
list block_category 'malware'
|
|
list block_category 'ads'
|
|
list block_category 'tracking'
|
|
|
|
# Custom Flow Rules
|
|
config flow_rule
|
|
option enabled '0'
|
|
option name 'block_social'
|
|
option match_type 'application'
|
|
option match_value 'facebook|instagram|tiktok'
|
|
option action 'drop'
|
|
option schedule ''
|
|
|
|
config flow_rule
|
|
option enabled '0'
|
|
option name 'mark_gaming'
|
|
option match_type 'category'
|
|
option match_value 'game'
|
|
option action 'mark'
|
|
option mark_value '0x10'
|