NAME

ereshkigal - Firewall ban manager.

SYNOPSIS

ereshkigal [-s <socket>] <command> [<args>]

ereshkigal start [--config=<config>] [-f|--foreground]

ereshkigal stop

ereshkigal status [--all] [<kur>]

ereshkigal banned

ereshkigal ban [--kur=<kur>] [--ban-time=<seconds>] <IP> [<IP> ...]

ereshkigal unban --all|<IP>

ereshkigal cidr-ban [--kur=<kur>] [--ban-time=<seconds>] <CIDR> [<CIDR> ...]

ereshkigal cidr-unban <CIDR>

ereshkigal checkpoint [<kur>]

ereshkigal re-init [<kur>]

ereshkigal clear-retries [--ip=<IP>|--cidr=<CIDR>] [<kur>]

ereshkigal add <kur> --backend=<backend>|--fan-out=<kurs> [--ports=<ports>] [--protocols=<protocols>] [--prefix=<prefix>] [--option <key>=<value>] [--interfaces=<interfaces>] [--self-heal <0/1>] [--ban-time=<seconds>] [--checkpoint=<seconds>] [--enable-cidr <0/1>] [--cidr-silent-drop <0/1>]

ereshkigal remove <kur>

DESCRIPTION

Manages kur instances, each of which is a single Net::Firewall::BlockerHelper instance served up over a unix socket.

ereshkigal start reads the config, by default /usr/local/etc/ereshkigal.toml, daemonizes, and spawns and supervises a kur process for each hash under kur in the config. The other commands talk to the running manager over its unix socket, by default /var/run/ereshkigal/socket.

Every subcommand takes --help (or -h), which covers what it does, what it will do to the firewall, and its options. ereshkigal help <command> prints the same thing.

See Ereshkigal for the config file format.

EXIT CODES

0 - clean success
1 - transport or server error, printed to STDERR
2 - the command completed, but the result carries per-kur,
    per-IP, or per-CIDR failures