A lightweight, log file based IP blocker with focus on simplicity and speed.
Have the latest rustup, rust toolchain and cargo installed and run:
cargo buildJust put the file wherever you like and make sure it's reachable by your PATH variable so you can
call it from the CLI everywhere. For example /usr/local/bin/ is a good place.
- The configuration file is expected at
/etc/veto/config.tomland required for Veto to work. - All state related data is saved at
/var/lib/veto/.
To run Veto as a service copy the service file to the appropriate location for your system and enable it in systemd.
A deb package can be found in the release section for easy installation on Debian based systems.
Veto currently requires ipset and iptables to be present on the system which should be available
through your package manager.
Veto doesn't implement a firewall itself but orchestrates existing systems instead. To not pollute your list of iptables ruleset it uses ipset. This allows to let iptables rules check against a separate list of IPs that are managed by ipset and only requires a single rule in iptables.
Veto uses a single configuration file to read all settings and blocking rules. The config is written in the TOML format and furher described in CONFIGURATION.md.
This project is licensed under the AGPL-3.0 License (or https://www.gnu.org/licenses/agpl-3.0.html).
