summaryrefslogtreecommitdiff
path: root/fztodo.md
blob: 1a1a8aa01fc74b78844807cab226cda6cc46a95d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
FailZero TODO List
โœ… Completed

fz_ip_validator.py runs on Krang with systemd and venv

Logging to /var/log/failzero/ip_validator.log

IP abuse detection via /validate endpoint

PayPal billing form with terminal-style UI

Telegram alerts on order

Abuse watcher with threshold-based disable

genesisctl disable --ip blocks outbound traffic

    Screen-based background runner (genesisctl watch-abuse)

๐Ÿง  Next Steps (Active TODO List)
๐Ÿ”’ Abuse Management

Build /api/report endpoint to manually flag IPs from Krang or external tools

Switch abuse_list in fz_ip_validator.py to file-based or Redis-backed source

    Log confirmed abuse incidents to /var/log/genesis-abuse-confirmed.log

๐ŸŒ Frontend Integration

Modify billing HTML to call /validate before starting PayPal process

Display an error if IP is flagged (valid === false) and block purchase

    Show dynamic pricing and risk flags in the form using the validator output

๐Ÿ’ณ Billing + Provision

Hook PayPal IPN or success return URL to trigger VPS creation

Match PayPal TXID to IP + label and log it

Generate reverse DNS automatically on provision (e.g., nighthawk01.failzero.net)

    Add /privacy and /terms static pages to keep things legally clean

โš™๏ธ Tooling & UX

Add genesisctl enable --ip to unblock previously flagged IPs

Add genesisctl status --ip to query abuse hits / log activity

    Optionally hash or sign each VPS order for non-repudiation audit trail

๐Ÿงช Optional / Nice-to-Have

Build a minimal dashboard or log viewer for flagged IPs

Rate-limit /validate via nginx or Flask limiter

Replace all external IP tools with internal validator