Repository navigation
fwscope 1.1.0
Download index.html and open it in a browser, or use it online at https://magikh0e.github.io/fwscope/ (it still runs entirely in your browser).
Added
- Add files to what's loaded: once logs are open, the button reads Add logs. Opening or dropping more files adds them to the dashboard, and a note says how many new events each added and how many duplicates were skipped. Your filter, view and block ticks stay as they were. Clear starts over.
- fail2ban caught or missed: with a fail2ban log loaded, the Scans card marks each scanner or hammerer as fail2ban banned or not banned. Block suggestions say the same. The Sources list notes banned by fail2ban, and
seen:f2bfilters to the sources it banned. - The sample data now includes an nftables host, a fail2ban log and Cloudflare firewall events.
- Saved HTML reports carry the fwscope version and credit line.
- A credit line on every screen: author, source, license and support links.
Changed
- The rate-limit filter chip reads CHALLENGE or LIMIT/CHALLENGE when Cloudflare challenges are loaded.
- fail2ban lines no longer count as "seen by the firewall" in the firewall + WAF cross-check.
Fixed
- Pasting log lines while the sample was showing mixed them into the sample. They now replace it, as opened files do.
- The footer no longer says Cloudflare's own firewall events were unwrapped from
CF-Connecting-IP. It counts them separately.
Full history: CHANGELOG.md