static void Main(string[] args)
{
AppDomain.CurrentDomain.ProcessExit += (a, b) => shouldExit = true;
Console.CancelKeyPress += (a, b) => shouldExit = true;
AssemblyLoadContext.Default.Unloading += (a) => shouldExit = true;
Log.Logger = new LoggerConfiguration()
.ReadFrom.Configuration(Configuration.Root)
.CreateLogger();
ILogger logger = Log.ForContext <Program>();
var config = Configuration.Instance;
if (!config.Validate())
{
logger.Error("Errors were found while validating your configuration.");
Console.ReadLine();
return;
}
logger.Information("Successfully validated configuration.");
var logParser = new NginxLogParser(config.Scanning.IpAddressPatterns.Select(p => new Regex(p)), config.Scanning.Patterns);
using (var ipBlocker = new NginxBlockedIps(config.Nginx.RulesFile, config.Scanning.ViolationsThreshold, config.Nginx.MaxRefreshInterval, config.Scanning.WhitelistedIps))
using (var logFolder = new NginxLogsWatcher(config.Nginx.LogFolder))
{
logFolder.NewLine += (fullPath, text) =>
{
var fileName = Path.GetFileName(fullPath);
logger.Verbose("Got line from {file}: {line}", fileName, text);
var ip = logParser.GetMatchedIp(text);
if (ip == null)
{
logger.Verbose("Ignoring line from {fileName} since there were no matches: {line}", text);
return;
}
if (ipBlocker.IsWhitelisted(ip))
{
logger.Verbose("Ignoring line from {fileName} since {ip} is whitelisted", fileName, ip);
return;
}
if (ipBlocker.ContainsIp(ip))
{
logger.Verbose("Ignoring line from {fileName} since {ip} is already blocked", fileName, ip);
return;
}
logger.Debug("Blocking {ip} for: {line}", ip, text);
ipBlocker.BlockIp(ip);
};
while (!shouldExit)
{
Task.Delay(50).Wait();
}
}
logger.Information("Exiting...");
Log.CloseAndFlush();
}
public JobContext(NginxLogsWatcher target)
{
this.target = target;
Interlocked.Increment(ref target.jobCounter);
}
