Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature] Custom Lookup Services #212

Open
tnodir opened this issue Feb 10, 2024 · 0 comments
Open

[Feature] Custom Lookup Services #212

tnodir opened this issue Feb 10, 2024 · 0 comments

Comments

@tnodir
Copy link
Owner

tnodir commented Feb 10, 2024

Problem you are trying to solve

In most cases:

1. We block the complete traffic

2. Set up some rules

And then every time an unknown file/domain-name, ip-address or port appears, we start to research (look up for more details).

We want to know:

* Is internet access for the application necessary for our operation?

* Is this original and in the right position?

* (Relatively) trustworthy enough?

* What does it actually do or is need for?

And in the end, we look up these details on search-engines and services about these details. How would be a shortcut via clickable links which open the relative service-type with custom-service-URL queries in the web-browser?

Suggested solution

The integration of custom lookup services for:

* Websites (domains)

* IP addresses (IPv4/IPv6)

* Applications (filename, full path, possibly SHA1 hash)

* Ports

By lookup services, I mean websites which return information about a specific topic (domains, IP-addresses, files, ports) by search or query-URLs.

However, to avoid dictating which service the user has to use, we could allow them to define their own provider/service via custom-query with variable/placeholder in the/a settings page. Like this, a user could choose which provider they trust for their inquiries and use them then to look everything up.

Via SHIFT+LEFT-CLICK (via mouse or context-menu) on a Domain, IP-Address, Filename or Port in the SimpleWall application, the application would open the respective service-information via web-browser.

Example lookup patterns:

- https://www.file.net/prozess/{filename_raw}.html 
- http://www.datei.info/was_ist/{filename_underscore_seperator}.html

- https://iplocation.io/ip-whois-lookup/{IPv4}
- https://iplocation.io/ip-whois-lookup/{IPv6}

- https://whois.domaintools.com/{domain.tld}
- https://lookup.icann.org/whois/en?q={domain.tld}&t=a
- https://mxtoolbox.com/SuperTool.aspx?action=whois%3a{domain.tld}&run=toolpage

- https://www.speedguide.net/port.php?port={port}
- https://isc.sans.edu/data/port/{port}

(Copied from henrypp/simplewall#1720)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant