FuseGuard Logo

fuseguard.components.filters
Component RepeatOffenderFilter

filters.BaseFilter
  |
  +--filters.RepeatOffenderFilter

Detects IP's that have been blocked multiple times, and allows you to block all subsequent requests

Method Summary
public any init(any firewallInstance)
          Called Once On Application Initialization
public string getDescription()
public string getIPWhiteList()
          Returns the list of IPs that are whitelisted
public numeric getMaximumBlockedRequests()
          Returns the max number of blocked requests allowed before all are blocked by the ip.
public string getName()
public numeric inspectRequest()
public boolean isWhitelisted([string ip])
          Returns true if an ip has been whitelisted.
public void processBlockedRequest([any filter], [numeric level])
          Callback invoked by event handler to notify when a block happens.
public void setDatasource(any datasource, [any username=""], [any password=""], [any dbtype=""])
          Sets the datasource info.
public void setIPWhiteList(string ips)
          Adds a list of IP addresses to be ignored by this filter, IPs may contain * as a wildcard, eg 10.10.*.*
public void setMaximumBlockedRequests(numeric maximumBlockedRequests)
          Once a remote ip acheives this many blocks, it will be blocked from all requests

Methods inherited from filters.BaseFilter
logEnabled, getThreatCategory, ignoreVariable, getBlockLevel, setScopes, setFilterLevel, getFirewall, setFilterID, filterEnabled, blockEnabled, getRequestLogMessageDetail, logOnly, getFilterInstanceName, inspectVariables, setLogLevel, ignoresVariable, getFilterID, ignoreURI, filterRequest, inspectsCGIScope, getRequestLogMessage, inspectsURI, getLogLevel, setAllowDenyOrder, inspectsCookieScope, setBlockLevel, filterVariables, setFilterInstanceName, inspectVariable, allowURI, getHelp, inspectsUrlScope, getFilterLevel, denyURI, setRequestLogMessage, getFilterComponent, inspectsFormScope
 

Method Detail

getDescription

public string getDescription()

getIPWhiteList

public string getIPWhiteList()
Returns the list of IPs that are whitelisted


getMaximumBlockedRequests

public numeric getMaximumBlockedRequests()
Returns the max number of blocked requests allowed before all are blocked by the ip.


getName

public string getName()

init

public any init(any firewallInstance)
Called Once On Application Initialization

Parameters:
any firewallInstance

inspectRequest

public numeric inspectRequest()

isWhitelisted

public boolean isWhitelisted([string ip])
Returns true if an ip has been whitelisted.

Parameters:
[string ip]

processBlockedRequest

public void processBlockedRequest([any filter], [numeric level])
Callback invoked by event handler to notify when a block happens.

Parameters:
[any filter] - The filter triggering the event
[numeric level] - The threat level indicated by the filter

setDatasource

public void setDatasource(any datasource, [any username=""], [any password=""], [any dbtype=""])
Sets the datasource info.

Parameters:
any datasource - The name of a valid datasource
[any username=""] - Optional, the datasource username
[any password=""] - Optional, the datasource password
[any dbtype=""] - mysql, sqlserver, or derby

setIPWhiteList

public void setIPWhiteList(string ips)
Adds a list of IP addresses to be ignored by this filter, IPs may contain * as a wildcard, eg 10.10.*.*

Parameters:
string ips - A comma seperated list of IPs

setMaximumBlockedRequests

public void setMaximumBlockedRequests(numeric maximumBlockedRequests)
Once a remote ip acheives this many blocks, it will be blocked from all requests

Parameters:
numeric maximumBlockedRequests