msmolka / znetcs.aspnetcore.ipfiltering Goto Github PK

I'm using Serilog and would like to log when an IP address is blocked. How can this be accomplished?

Thanks for your contribution, I have a configuration where the web api receives a request only from a reverse proxy, but in the console it shows me the IP of the final client and I want to validate the IP of the proxy in this case, is it possible?

netcoreapp2.0 where I followed the setup, but gets:

Cannot resolve scoped service 'Microsoft.Extensions.Options.IOptionsSnapshot`1[ZNetCS.AspNetCore.IPFiltering.IPFilteringOptions]' from root provider.

Uses:

Any objections to me submitting a pull request that adds IP filtering as a MVC filter? This would bring in a new dependencies of Microsoft.AspNetCore.Mvc.Abstractions.

My thoughts here would be an attribute that could be applied either at the class or method level. Something like [IPFilter(Policy = "MyPolicy")] This would allow for either white listing, black listing at a more granular level than at the middle ware level.

Thanks!

I have two Ips which I've black-listed:

"Blacklist": [ "127.0.0.1", "192.168.0.1" ]

I want to ignore paths separately for each of them:

i.e. for "127.0.0.1"
"IgnoredPaths": [ "POST:/*" ]

and for "192.168.0.1"
"IgnoredPaths": [ "GET:/*" ]

Is there any way to do that?

@msmolka I got a fatal error as follows:

System.IndexOutOfRangeException: Index was outside the bounds of the array.
   at AspNetCoreRateLimit.Bits.GetBitMask(Int32 sizeOfBuff, Int32 bitLen)
   at AspNetCoreRateLimit.IpAddressRange..ctor(String ipRangeString)
   at AspNetCoreRateLimit.IpAddressUtil.ContainsIp(List`1 ipRules, String clientIp)
   at AspNetCoreRateLimit.IpParser.ContainsIp(List`1 ipRules, String clientIp)
   at AspNetCoreRateLimit.IpRateLimitProcessor.IsWhitelisted(ClientRequestIdentity requestIdentity)
   at AspNetCoreRateLimit.RateLimitMiddleware`1.Invoke(HttpContext context)
   at ZNetCS.AspNetCore.IPFiltering.IPFilteringMiddleware.Invoke(HttpContext context)
   at Microsoft.AspNetCore.Diagnostics.ExceptionHandlerMiddleware.<Invoke>g__Awaited|6_0(ExceptionHandlerMiddleware middleware, HttpContext context, Task task)

This library appears to parse the allowed IP ranges on every call to IPAddressChecker.IsAllowed:

However, the config will very rarely change between requests, so it'd be more efficient to only parse these once and reuse the same objects across requests.