Phase 1 implementation of Vortex DNS Firewall - SecuBox's first line of defense blocking threats at DNS level BEFORE any connection is established. Features: - Threat intel aggregator (URLhaus, OpenPhish, Malware Domains) - SQLite-based blocklist database with domain deduplication - dnsmasq integration via sinkhole hosts file - x47 vitality multiplier concept (each DNS block prevents ~47 connections) - RPCD handler for LuCI integration with 8 methods - CLI tool: vortex-firewall intel/stats/start/stop Tested with 765 blocked domains across 3 threat feeds. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
29 lines
356 B
Bash
Executable File
29 lines
356 B
Bash
Executable File
#!/bin/sh /etc/rc.common
|
|
# Vortex DNS Firewall - DNS-level threat blocking
|
|
|
|
START=95
|
|
STOP=10
|
|
USE_PROCD=1
|
|
|
|
PROG=/usr/sbin/vortex-firewall
|
|
|
|
start_service() {
|
|
$PROG start
|
|
}
|
|
|
|
stop_service() {
|
|
$PROG stop
|
|
}
|
|
|
|
service_triggers() {
|
|
procd_add_reload_trigger "vortex-firewall"
|
|
}
|
|
|
|
reload_service() {
|
|
$PROG intel update
|
|
}
|
|
|
|
status() {
|
|
$PROG status
|
|
}
|