security/maltrail: add whitelist support (#1447)

security/maltrail/pkg-descr

@@ -14,6 +14,7 @@ Changelog
 1.1
 
 * Add a note in General tab
+* Add whitelisting support
 
 1.0
 

security/maltrail/src/opnsense/mvc/app/controllers/OPNsense/Maltrail/forms/general.xml

@@ -23,4 +23,12 @@
         <type>select_multiple</type>
         <help>List of interface to listen on, none means listen on all interfaces.</help>
     </field>
+    <field>
+        <id>general.whitelist</id>
+        <label>Whitelist</label>
+        <type>select_multiple</type>
+        <style>tokenize</style>
+        <allownew>true</allownew>
+        <help>Here you can whitelist IP addresses or domains.</help>
+    </field>
 </form>

security/maltrail/src/opnsense/mvc/app/models/OPNsense/Maltrail/General.xml

@@ -19,5 +19,8 @@
             <multiple>Y</multiple>
             <Required>N</Required>
         </monitorinterface>
+        <whitelist type="CSVListField">
+            <Required>N</Required>
+        </whitelist>
     </items>
 </model>

security/maltrail/src/opnsense/service/templates/OPNsense/Maltrail/maltrail.conf

@@ -38,6 +38,9 @@ USE_HEURISTICS true
 USE_HEURISTICS false
 {% endif %}
 CHECK_MISSING_HOST false
+{% if helpers.exists('OPNsense.maltrail.general.whitelist') and OPNsense.maltrail.general.whitelist != '' %}
+USER_WHITELIST {{ OPNsense.maltrail.general.whitelist }}
+{% endif %}
 CHECK_HOST_DOMAINS false
 SHOW_DEBUG false
 LOG_DIR /var/log/maltrail