Setup your own IP Feed in your LAN – Series I
Firewall Feed is an open source web based tool written on PHP to setup and manage your own IP address feed in your local network.
The tool facilitates maintaining IP addresses in a text file. As and when needed, you can add or remove IP address in the text file. Most Next Generation firewalls support reading of such text files on regular intervals, and you can enforce in firewall security policies to either allow or block traffic to these IP addresses. Hence you don’t need to make configuration change or commit on the firewall every time.
Yes, you are right. Firewall Feed is similar to spamhaus and other blocklists available on internet, but Firewall Feedis your own IP address feed that is running on your local LAN.
Why do you need?
May be you are also like me and others, performing regular task of adding bad IP addresses on your firewalls to block suspicious traffic. Usually you receive this list from your CERT or SOC team. As security is major concern of everyone, delay is not at all acceptable in this case and you have to add those IP address right away after you are informed. What if you have to manage several main and branch firewalls ? Firewall Feed simplifies the job for you.
In the future releases, we are introducing bulk upload facility and feeds of domain names and URLs.