{"id":18561899,"url":"https://github.com/sir-go/rkn-rejects","last_synced_at":"2026-05-16T18:31:24.893Z","repository":{"id":144671946,"uuid":"556530048","full_name":"sir-go/rkn-rejects","owner":"sir-go","description":"extremely strict parental control for RKN device","archived":false,"fork":false,"pushed_at":"2023-02-18T03:06:37.000Z","size":78,"stargazers_count":0,"open_issues_count":1,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2026-02-12T18:49:08.699Z","etag":null,"topics":["dns","docker","dpi","go","nfqueue","nftables","sniffing"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/sir-go.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2022-10-24T02:48:40.000Z","updated_at":"2022-12-12T14:06:18.000Z","dependencies_parsed_at":null,"dependency_job_id":"36ea8094-9883-4818-b561-fe3c192acb59","html_url":"https://github.com/sir-go/rkn-rejects","commit_stats":null,"previous_names":[],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/sir-go/rkn-rejects","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sir-go%2Frkn-rejects","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sir-go%2Frkn-rejects/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sir-go%2Frkn-rejects/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sir-go%2Frkn-rejects/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/sir-go","download_url":"https://codeload.github.com/sir-go/rkn-rejects/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sir-go%2Frkn-rejects/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33114146,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-16T04:41:52.686Z","status":"ssl_error","status_checked_at":"2026-05-16T04:41:52.009Z","response_time":115,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["dns","docker","dpi","go","nfqueue","nftables","sniffing"],"created_at":"2024-11-06T22:08:12.632Z","updated_at":"2026-05-16T18:31:24.642Z","avatar_url":"https://github.com/sir-go.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# DNS/DPI sniffers and NFT-tables rules\n[![Go Test cmd/checks](https://github.com/sir-go/rkn-rejects/actions/workflows/go-check.yml/badge.svg)](https://github.com/sir-go/rkn-rejects/actions/workflows/go-check.yml)\n[![Go Test cmd/dns](https://github.com/sir-go/rkn-rejects/actions/workflows/go-dns.yml/badge.svg)](https://github.com/sir-go/rkn-rejects/actions/workflows/go-dns.yml)\n[![Go Test cmd/dpi](https://github.com/sir-go/rkn-rejects/actions/workflows/go-dpi.yml/badge.svg)](https://github.com/sir-go/rkn-rejects/actions/workflows/go-dpi.yml)\n[![Go Test cmd/get-rkn](https://github.com/sir-go/rkn-rejects/actions/workflows/go-get-rkn.yml/badge.svg)](https://github.com/sir-go/rkn-rejects/actions/workflows/go-get-rkn.yml)\n\n\nThe parental control project contains four utilities to get white and black lists from RKN service and \ncompletely isolate one certain host from denied resources. Utilities installed at the router between\nthe host and uplink.\n\n## Utilities\n - [get_rkn](cmd/get_rkn)\n\n    SOAP-client for [RKN service](https://vigruzki.rkn.gov.ru/services/OperatorRequest/?wsdl), \n    gets b/w lists, parses them and fills the redis cache.\n    \n - [dns-sniffer](cmd/dns-sniffer)\n\n    watches all DNS traffic, collects A-records, and checks resolved hosts by b/w lists.\n    \n    If the record in the answer is not denied then it puts to the white IP list with resolved TTL.\n\n - [dpi-sniffer](cmd/dpi-sniffer)\n\n    sniffs all traffic and for denied IP or hostname detection.\n\n - [check](cmd/check)\n\n    the testing tool for regularly checking the quality of other parts working. It gets the \n    accessibility of hosts by their list in Redis, runs goroutines with HTTP-clients, and collects status codes.\n\n    It can be run from the docker container for routing all traffic through the router's firewall.\n\n## NF-tables\nTraffic to sniffers redirects by the `nf_queue` kernel module. All traffic rejects by default \nexcept DNS requests and answers. NF-tables rules have a list of allowed IP addresses. \nEvery record in the list has a TTL and deletes when this time is expired.\nAlso, there are the lists filled manually and imported to the rules.\n\nUtilities control the firewall with internal library [internal/fw](internal/fw).\n\nPredefined useful nftables configs located in [configs/nftables](configs/nftables)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsir-go%2Frkn-rejects","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsir-go%2Frkn-rejects","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsir-go%2Frkn-rejects/lists"}