readytalk / bath Goto Github PK

Automatic and predefined blacklists

This coincides with abstracting out the code to truly allow for any port based service (currently, functions begin with the name ssh). This should also allow for multiple port based services

Bath is not "a shell script that connects to a webpage using curl".

HTML to be moved out to front end
Split up library files (at least so I know I am not calling methods from the wrong place)

Need to find a new way to pass messages to/from the daemon, so that it can run as root, or even some other unprivileged user (currently set to run as www-data). This would allow for tighter security.

We need a method of message passing that:

• does not thrash the disk
• is fast so that the user does not have to wait for their firewall rule to be implemented
• does not add significant complexity to the application or its install
• maintains a high level of security

Allow for services to be allowed based on usernames

Add some rules for admin to create/remove/modify blacklists, possibly force user disconnect

I would really like to think this feature out. I kind of like that the 'admin' user doesn't have any privileges. I hesitate to add this functionality to the portion of the app that only requires one method of authentication.

Should the admin interface have read only information?

add SSL to the mix

Move authentication method to script so that we can move away from Apache. This should allow for more authentication methods, and for additional features such as auto-blacklisting.