Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature] Custom Lookup Services #1720

Open
3 tasks done
nemeth-it opened this issue Feb 9, 2024 · 0 comments
Open
3 tasks done

[Feature] Custom Lookup Services #1720

nemeth-it opened this issue Feb 9, 2024 · 0 comments
Labels

Comments

@nemeth-it
Copy link

Checklist

  • I have used the search function to see if someone else has already submitted the same feature request.
  • I will describe the problem with as much detail as possible.
  • This issue only contains a request for one single feature, not multiple (related) features.

App version

3.7.8

Problem you are trying to solve

In most cases:

  1. We block the complete traffic
  2. Set up some rules

And then every time an unknown file/domain-name, ip-address or port appears, we start to research (look up for more details).

We want to know:

  • Is internet access for the application necessary for our operation?
  • Is this original and in the right position?
  • (Relatively) trustworthy enough?
  • What does it actually do or is need for?

And in the end, we look up these details on search-engines and services about these details.
How would be a shortcut via clickable links which open the relative service-type with custom-service-URL queries in the web-browser?

Suggested solution

The integration of custom lookup services for:

  • Websites (domains)
  • IP addresses (IPv4/IPv6)
  • Applications (filename, full path, possibly SHA1 hash)
  • Ports

By lookup services, I mean websites which return information about a specific topic (domains, IP-addresses, files, ports) by search or query-URLs.

However, to avoid dictating which service the user has to use, we could allow them to define their own provider/service via custom-query with variable/placeholder in the/a settings page. Like this, a user could choose which provider they trust for their inquiries and use them then to look everything up.

Via SHIFT+LEFT-CLICK (via mouse or context-menu) on a Domain, IP-Address, Filename or Port in the SimpleWall application, the application would open the respective service-information via web-browser.

Example lookup patterns:

- https://www.file.net/prozess/{filename_raw}.html 
- http://www.datei.info/was_ist/{filename_underscore_seperator}.html

- https://iplocation.io/ip-whois-lookup/{IPv4}
- https://iplocation.io/ip-whois-lookup/{IPv6}

- https://whois.domaintools.com/{domain.tld}
- https://lookup.icann.org/whois/en?q={domain.tld}&t=a
- https://mxtoolbox.com/SuperTool.aspx?action=whois%3a{domain.tld}&run=toolpage

- https://www.speedguide.net/port.php?port={port}
- https://isc.sans.edu/data/port/{port}

Screenshots / Drawings / Technical details

No response

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant