Added firewall logging

Author: Kudzai P Matizirofa

firewall.log

@@ -1,4 +1,6 @@
 from scapy.all import IP, TCP, sniff
+import logging    # first of all import the module
+
 
 """
 Represents a network packet with source and destination IP addresses
@@ -13,32 +15,31 @@ def get_summary(self, pkt):
                 for rule in self.rules:
                     #print("src",pkt[IP].src, pkt[TCP].sport,"dst", pkt[IP].dst, pkt[TCP].dport)
                     #Check if the ip address and port number matches
-                    if ( 
-                        ( pkt[IP].src == rule[1]) or ( pkt[IP].dst == rule[3]) and
-                        ( pkt[TCP].sport == rule[2]) or ( pkt[TCP].dport == rule[4])
-                    ):
-                        #If they matches check if that rule is to be allowed or blocked
-                        if rule[0] == True: return "BLOCK", "src",pkt[IP].src, pkt[TCP].sport,"dst", pkt[IP].dst, pkt[TCP].dport
-                        elif rule[0] == False: return "ALLOW", "src",pkt[IP].src, pkt[TCP].sport,"dst", pkt[IP].dst, pkt[TCP].dport
+                    if (pkt[IP].src == rule[1] and pkt[IP].dst == rule[3]): 
+
+                        if(True): #pkt[TCP].sport == rule[2]  ports changes a lot
+                            
+                            #If they matches check if that rule is to be allowed or blocked
+                            if rule[0] == True: 
+                                log = "Status: ", "BLOCK", "Src IP: ",pkt[IP].src, "Src Port:", pkt[TCP].sport,"Dst IP: ", pkt[IP].dst,"Dst Port:" ,pkt[TCP].dport
+                                logging.basicConfig(filename='firewall.log', filemode='w', format="%(asctime)s %(message)s")
+                                logging.warning(log)
+                                print(log)
+                                
+                            elif rule[0] == False:
+                                log = "Status: ", "ALLOW", "Src IP: ",pkt[IP].src, "Src Port:", pkt[TCP].sport,"Dst IP: ", pkt[IP].dst,"Dst Port:" ,pkt[TCP].dport
+                                logging.basicConfig(filename='firewall.log', filemode='w', format="%(asctime)s %(message)s")
+                                logging.warning(log)
+                                print(log)
+                                
                     else:
-                        return "src",pkt[IP].src, pkt[TCP].sport,"dst", pkt[IP].dst, pkt[TCP].dport    
+                        print("Src IP: ",pkt[IP].src, "Src Port:", pkt[TCP].sport,"Dst IP: ", pkt[IP].dst,"Dst Port:" ,pkt[TCP].dport)     
             else:
-                return "Waiting for pkt...."
+                pass
+                # return "Waiting for pkt...."
         except Exception as e:
             print(f"[ERR] Error could not get pkt: {e}")
             False
 
 # capture = sniff(5)
 # capture.summary()    
-# arr = [
-#     [True, "192.168.36.44", "60916", "20.42.65.89", "443"], ##block
-#     [True, "12.168.3.1009", "0", "10.0.0.100", "0"],
-#     [True, "12.168.3.1009", "0", "10.0.0.100", "0"],
-#     [False, "44.236.154.173", "443", "192.168.36.44", "61035"] ##allow
-# ]        
-# packet = Packet(arr)
-# sniff(10,filter="ip",prn=packet.get_summary)
-
-    #sniff(filter="ip",prn=get_summary)
-    # or it possible to filter with filter parameter...!
-    #sniff(filter="ip and host 192.168.0.1",prn=get_summary)

firewall/__pycache__/packet.cpython-311.pyc

@@ -8,15 +8,16 @@ def run():
     print("FIREWALL IS RUNNING......")
     try:
         rules = RuleList()
-        rules.add_rule(False,'192.168.36.44', '57881', '93.184.221.240', '80')
+        rules.add_rule(False,'192.168.36.205', '59770', '192.168.36.44', '443')
+        rules.add_rule(True,'192.168.36.44', '60237', '209.197.3.8', '80')
+        rules.add_rule(True,'192.168.36.44', '60181', '192.168.36.205', '53')
 
         packet_manager = Packet(rules.get_all_rules())
         firewall = Firewall(packet_manager)
 
         while True:
             for _ in range(10):
                 firewall.run()
-                print(rules.get_all_rules())
                 time.sleep(100)
 
     except KeyboardInterrupt: