NAME

Ereshkigal::App::Command::ban - Ban one or more IPs.

VERSION

Version 0.0.1

SYNOPSIS

# ban on all kur instances
ereshkigal ban 1.2.3.4 5.6.7.8

# ban on just the kur instance sshd
ereshkigal ban --kur sshd 1.2.3.4

# an hour long ban
ereshkigal ban --ban-time 3600 1.2.3.4

# a permanent ban
ereshkigal ban --ban-time 0 1.2.3.4

DESCRIPTION

Bans one or more IPs. Without --kur every kur gets them, each blocking per its own ports and protocols; with --kur only that instance does, and naming a fan_out gate sends them to every kur behind it.

Each IP is answered for separately, so one bad address does not spoil the rest of the request, and re-banning something already banned just resets its sentence rather than erroring.

--ban-time is in seconds and overrides the kur's default for these bans only, with 0 meaning never time out... nothing will release it but an unban. Both IPv4 and IPv6 are taken in any spelling, v6 being canonicalized so long and short forms of one address cannot become two bans. For whole ranges see cidr_ban.

METHODS

The App::Cmd hooks this subcommand supplies... abstract, description, usage_desc, opt_spec, validate_args, and execute.