Docker: single container compose

2022-06-12 20:02:05 +02:00
parent 088d1e406a
commit 67e5014d78
47 changed files with 32 additions and 292 deletions
--- a/firewall/.dockerignore
+++ b/firewall/.dockerignore
@@ -0,0 +1,6 @@
+Dockerfile
+docker-compose.yml
+**/*.pyc
+**/__pycache__/
+/.vscode/**
+
--- a/firewall/Dockerfile
+++ b/firewall/Dockerfile
@@ -0,0 +1,38 @@
+
+#Frontend build
+FROM node:16-alpine AS frontend
+RUN apk add --update npm
+RUN npm install -g npm@latest
+RUN mkdir /app
+WORKDIR /app
+ADD ./frontend/package.json .
+ADD ./frontend/package-lock.json .
+RUN npm install
+COPY ./frontend/ .
+RUN npm run build
+
+#Building main conteiner
+FROM python:3-buster
+
+RUN apt-get update && apt-get -y install supervisor build-essential libboost-dev nginx
+
+RUN mkdir /execute
+WORKDIR /execute
+
+ADD ./requirements.txt /execute/requirements.txt
+RUN pip install --no-cache-dir -r /execute/requirements.txt
+
+COPY . /execute/
+COPY ./config/nginx.conf /etc/nginx/nginx.conf
+COPY ./config/supervisord.conf /etc/supervisor/supervisord.conf
+
+#Copy react app in the main container
+COPY --from=frontend /app/build/ ./frontend/
+
+RUN usermod -a -G root nobody
+RUN chown -R nobody:root /execute && \
+  chmod -R 660 /execute && chmod -R u+X /execute
+
+ENTRYPOINT ["/usr/bin/supervisord","-c","/etc/supervisor/supervisord.conf"]
+
+
--- a/firewall/README.md
+++ b/firewall/README.md
@@ -0,0 +1,188 @@
+# **WORK IN PROGRESS**
+
+# Firegex-API Documentation
+### This is a short description of the API
+
+#
+# Documentation
+## Index
+
+- [General stats](#get-apigeneral-stats)
+- [List services](#get-apiservices)
+- [Service info](#get-apiserviceserv)
+- [Stop service](#get-apiserviceservstop)
+- [Start service](#get-apiserviceservstart)
+- [Delete service](#get-apiserviceservdelete)
+- [Terminate service](#get-apiserviceservterminate)
+- [Regenerate public port](#get-apiserviceservregen-port)
+- [Service regexes](#get-apiserviceservregexes)
+- [Regex info](#get-apiregexregexid)
+- [Delete regex](#get-apiregexregexiddelete)
+- [Add regex](#post-apiregexesadd)
+- [Add service](#post-apiservicesadd)
+
+#
+#
+## **GET** **```/api/general-stats```**
+### Server response:
+```json
+{
+    "services": <total number of services>,
+    "closed": <total number of rejected packets>,
+    "regex": <total number of regexes>
+}
+```
+
+#
+## **GET** **```/api/services```**
+### Server response:
+```json
+[
+    {
+        "id": <service_id>,
+        "status": <service status>,
+        "public_port": <public port>,
+        "internal_port": <internal port>,
+        "n_packets": <number of rejected packets>,
+        "n_regex": <number of regexes>
+    },
+    {
+        // Another service
+    }
+]
+```
+
+#
+## **GET** **```/api/service/<serv>```**
+### Server response:
+```json
+{
+    "id": <service_id>,
+    "status": <service status>,
+    "public_port": <public port>,
+    "internal_port": <internal port>,
+    "n_packets": <number of rejected packets>,
+    "n_regex": <number of regexes>
+}
+```
+
+#
+## **GET** **```/api/service/<serv>/stop```**
+### Server response:
+```json
+{
+    "status": "ok"
+}
+```
+
+#
+## **GET** **```/api/service/<serv>/start```**
+### Server response:
+```json
+{
+    "status": "ok"
+}
+```
+
+#
+## **GET** **```/api/service/<serv>/delete```**
+### Server response:
+```json
+{
+    "status": "ok"
+}
+```
+
+#
+## **GET** **```/api/service/<serv>/terminate```**
+### Server response:
+```json
+{
+    "status": "ok"
+}
+```
+
+#
+## **GET** **```/api/service/<serv>/regen-port```**
+### Server response:
+```json
+{
+    "status": "ok"
+}
+```
+
+#
+## **GET** **```/api/service/<serv>/regexes```**
+### Server response:
+```json
+[
+    {
+        "id": <regex id>,
+        "service_id": <service_id>,
+        "regex": <base64 encoded regex>,
+        "is_blacklist": <true|false>,
+        "n_packets": <number of blocked packets>,
+        "mode": <"C"|"S"|"B"> // Client to server, server to client or both
+    },
+    {
+        // Another regex
+    }
+]
+```
+
+#
+## **GET** **```/api/regex/<regex_id>```**
+### Server response:
+```json
+{
+    "id": <regex id>,
+    "service_id": <service_id>,
+    "regex": <base64 encoded regex>,
+    "is_blacklist": <true|false>,
+    "n_packets": <number of blocked packets>,
+    "mode" <"C"|"S"|"B"> // Client to server, server to client or both
+}
+```
+
+#
+## **GET** **```/api/regex/<regex_id>/delete```**
+### Server response:
+```json
+{
+    "status": "ok"
+}
+```
+
+#
+## **POST** **```/api/regexes/add```**
+### Client request:
+```json
+{
+    "service_id": <service_id>,
+    "regex": <base64 encoded regex>,
+    "is_blacklist": <true|false>,
+    "mode": <"C"|"S"|"B"> // Client to server, server to client or both
+}
+```
+### Server response:
+```json
+{
+    "status": "ok"
+}
+```
+
+#
+## **POST** **```/api/services/add```**
+### Client request:
+```json
+{
+    "name": <the id used to identify the service>,
+    "port": <the internal port>
+}
+```
+### Server response:
+```json
+{
+    "status": "ok"
+}
+```
--- a/firewall/app.py
+++ b/firewall/app.py
@@ -0,0 +1,269 @@
+import sqlite3, random, string, subprocess
+from flask import Flask, jsonify, request
+
+
+class SQLite():
+    def __init__(self, db_name) -> None:
+        self.conn = None
+        self.cur = None
+        self.db_name = db_name
+
+    def connect(self) -> None:
+        try:
+            self.conn = sqlite3.connect(self.db_name + '.db', check_same_thread = False)
+        except:
+            with open(self.db_name + '.db', 'x') as f:
+                pass
+
+            self.conn = sqlite3.connect(self.db_name + '.db', check_same_thread = False)
+
+        self.cur = self.conn.cursor()
+
+    def disconnect(self) -> None:
+        self.conn.close()
+
+    def check_integrity(self, tables = {}) -> None:
+        for t in tables:
+            self.cur.execute('''
+                SELECT name FROM sqlite_master WHERE type='table' AND name='{}';
+            '''.format(t))
+
+            if len(self.cur.fetchall()) == 0:
+                self.cur.execute('''CREATE TABLE main.{}({});'''.format(t, ''.join([(c + ' ' + tables[t][c] + ', ') for c in tables[t]])[:-2]))
+
+    def query(self, query, values = ()):
+        self.cur.execute(query, values)
+        return self.cur.fetchall()
+
+# DB init
+db = SQLite('firegex')
+db.connect()
+
+
+app = Flask(__name__)
+
+@app.route('/api/general-stats')
+def get_general_stats():
+    n_services = db.query('''
+        SELECT COUNT (*) FROM services;
+    ''')[0][0]
+    n_regexes = db.query('''
+        SELECT COUNT (*) FROM regexes;
+    ''')[0][0]
+    n_packets = db.query('''
+        SELECT SUM(blocked_packets) FROM regexes;
+    ''')[0][0]
+
+    res = {
+        'services': n_services,
+        'regexes': n_regexes,
+        'closed': n_packets if n_packets else 0
+    }
+
+    return res
+
+
+@app.route('/api/services')
+def get_services():
+    res = []
+    for i in db.query('SELECT * FROM services;'):
+        n_regex = db.query('SELECT COUNT (*) FROM regexes WHERE service_id = ?;', (i[1],))[0][0]
+        n_pacchetti = db.query('SELECT SUM(blocked_packets) FROM regexes WHERE service_id = ?;', (i[1],))[0][0]
+
+        res.append({
+            'id': i[1],
+            'status': i[0],
+            'public_port': i[3],
+            'internal_port': i[2],
+            'n_regex': n_regex,
+            'n_pacchetti': n_pacchetti if n_pacchetti else 0,
+            'name': i[4]
+        })
+
+    return jsonify(res)
+
+
+@app.route('/api/service/<serv>')
+def get_service(serv):
+    q = db.query('SELECT * FROM services WHERE service_id = ?;', (serv,))
+
+    res = {}
+    if len(q) != 0:
+        n_regex = db.query('SELECT COUNT (*) FROM regexes WHERE service_id = ?;', (serv,))[0][0]
+        n_pacchetti = db.query('SELECT SUM(blocked_packets) FROM regexes WHERE service_id = ?;', (serv,))[0][0]
+
+        print(q[0])
+        res = {
+            'id': q[0][1],
+            'status': q[0][0],
+            'public_port': q[0][3],
+            'internal_port': q[0][2],
+            'n_packets': n_pacchetti if n_pacchetti else 0,
+            'n_regex': n_regex,
+            'name': q[0][4]
+        }
+
+    return res
+
+
+@app.route('/api/service/<serv>/stop')
+def get_service_stop(serv):
+    db.query('''
+        UPDATE services SET status = 'stop' WHERE service_id = ?;
+    ''', (serv,))
+
+    res = {
+        'status': 'ok'
+    }
+
+    return res
+
+
+@app.route('/api/service/<serv>/start')
+def get_service_start(serv):
+    db.query('''
+        UPDATE services SET status = 'active' WHERE service_id = ?;
+    ''', (serv,))
+
+    res = {
+        'status': 'ok'
+    }
+
+    return res
+
+
+@app.route('/api/service/<serv>/delete')
+def get_service_delete(serv):
+    db.query('''
+        DELETE FROM services WHERE service_id = ?;
+    ''', (serv,))
+
+    res = {
+        'status': 'ok'
+    }
+
+    return res
+
+
+@app.route('/api/service/<serv>/terminate')
+def get_service_termite(serv):
+    db.query('''
+        UPDATE services SET status = 'stop' WHERE service_id = ?;
+    ''', (serv,))
+
+    res = {
+        'status': 'ok'
+    }
+
+    return res
+
+
+@app.route('/api/service/<serv>/regen-port')
+def get_regen_port(serv):
+    db.query('UPDATE services SET public_port = ? WHERE service_id = ?;', (random.randint(30000, 45000), serv))
+
+    res = {
+        'status': 'ok'
+    }
+
+    return res
+
+
+@app.route('/api/service/<serv>/regexes')
+def get_service_regexes(serv):
+    res = []
+    for i in db.query('SELECT * FROM regexes WHERE service_id = ?;', (serv,)):
+        res.append({
+            'id': i[5],
+            'service_id': i[2],
+            'regex': i[0],
+            'is_blacklist': i[3],
+            'mode': i[1]
+        })
+
+    return jsonify(res)
+
+
+@app.route('/api/regex/<int:regex_id>')
+def get_regex_id(regex_id):
+    q = db.query('SELECT * FROM regexes WHERE regex_id = ?;', (regex_id,))
+
+    res = {}
+    if len(q) != 0:
+        res = {
+            'id': regex_id,
+            'service_id': q[0][2],
+            'regex': q[0][0],
+            'is_blacklist': q[0][3],
+            'mode': q[0][1]
+        }
+
+    return res
+
+
+@app.route('/api/regex/<int:regex_id>/delete')
+def get_regex_delete(regex_id):
+    db.query('DELETE FROM regexes WHERE regex_id = ?;', (regex_id,))
+
+    res = {
+        'status': 'ok'
+    }
+
+    return res
+
+
+@app.route('/api/regexes/add', methods = ['POST'])
+def post_regexes_add():
+    req = request.get_json(force = True)
+
+    db.query('''
+        INSERT INTO regexes (regex_id, service_id, regex, is_blacklist, mode) VALUES (?, ?, ?, ?, ?);
+    ''', (random.randint(1, 1 << 32), req['service_id'], req['regex'], req['is_blacklist'], req['mode']))
+
+    res = {
+        'status': 'ok'
+    }
+
+    return res
+
+
+@app.route('/api/services/add', methods = ['POST'])
+def post_services_add():
+    req = request.get_json(force = True)
+
+    serv_id = req['name'].strip().replace(" ","-")
+    serv_id = "".join([c for c in serv_id if c in (string.ascii_uppercase + string.ascii_lowercase + string.digits + "-")])
+    serv_id = serv_id.lower()
+
+    db.query('''
+        INSERT INTO services (name, service_id, internal_port, public_port, status) VALUES (?, ?, ?, ?, ?)
+    ''', (req['name'], serv_id, req['port'], random.randint(30000, 45000), 'stop'))
+
+    res = {
+        'status': 'ok'
+    }
+
+    return res
+
+if __name__ == '__main__':
+    db.check_integrity({
+        'regexes': {
+            'regex': 'TEXT NOT NULL',
+            'mode': 'CHAR(1)',
+            'service_id': 'TEXT NOT NULL',
+            'is_blacklist': 'CHAR(50) NOT NULL',
+            'blocked_packets': 'INTEGER DEFAULT 0',
+            'regex_id': 'INTEGER NOT NULL'
+        },
+        'services': {
+            'status': 'CHAR(50)',
+            'service_id': 'TEXT NOT NULL',
+            'internal_port': 'INT NOT NULL',
+            'public_port': 'INT NOT NULL',
+            'name': 'TEXT NOT NULL'
+        }
+    })
+
+    #uwsgi 
+    subprocess.run(["uwsgi","--http","127.0.0.1:8080","--master","--module","app:app"])
+
--- a/firewall/c_back/proxy
+++ b/firewall/c_back/proxy
--- a/firewall/c_back/proxy.cpp
+++ b/firewall/c_back/proxy.cpp
@@ -0,0 +1,379 @@
+#include <cstdlib>
+#include <cstddef>
+#include <iostream>
+#include <string>
+
+#include <boost/regex.hpp>
+#include <boost/shared_ptr.hpp>
+#include <boost/enable_shared_from_this.hpp>
+#include <boost/bind.hpp>
+#include <boost/asio.hpp>
+#include <boost/thread/mutex.hpp>
+
+#include <cctype> // is*
+
+//#define DEBUG
+
+using namespace std;
+
+int to_int(int c) {
+  if (not isxdigit(c)) return -1; // error: non-hexadecimal digit found
+  if (isdigit(c)) return c - '0';
+  if (isupper(c)) c = tolower(c);
+  return c - 'a' + 10;
+}
+
+template<class InputIterator, class OutputIterator> int
+unhexlify(InputIterator first, InputIterator last, OutputIterator ascii) {
+  while (first != last) {
+    int top = to_int(*first++);
+    int bot = to_int(*first++);
+    if (top == -1 or bot == -1)
+      return -1; // error
+    *ascii++ = (top << 4) + bot;
+  }
+  return 0;
+}
+
+vector<pair<string,boost::regex>> regex_s_c_w, regex_c_s_w, regex_s_c_b, regex_c_s_b;
+
+bool filter_data(unsigned char* data, const size_t& bytes_transferred, vector<pair<string,boost::regex>> const &blacklist, vector<pair<string,boost::regex>> const &whitelist){
+   #ifdef DEBUG
+   cout << "---------------- Packet ----------------" << endl;
+   for(int i=0;i<bytes_transferred;i++){
+      cout << data[i];
+   }
+   cout << "\n" << "---------------- End Packet ----------------" << endl;
+   #endif
+   for (pair<string,boost::regex> ele:blacklist){
+      boost::cmatch what;
+      if (boost::regex_match(reinterpret_cast<const char*>(data),
+            reinterpret_cast<const char*>(data) + bytes_transferred, what, ele.second)){
+         cout << "BLOCKED " << ele.first << endl;
+         return false;
+      }
+   }
+   for (pair<string,boost::regex> ele:whitelist){
+      boost::cmatch what;
+      if (!boost::regex_match(reinterpret_cast<const char*>(data),
+            reinterpret_cast<const char*>(data) + bytes_transferred, what, ele.second)){
+         cout << "BLOCKED " << ele.first << endl;
+         return false;
+      }
+   }
+   #ifdef DEBUG
+   cout << "Packet Accepted!" << endl;
+   #endif
+   return true;
+}
+
+namespace tcp_proxy
+{
+   namespace ip = boost::asio::ip;
+
+   class bridge : public boost::enable_shared_from_this<bridge>
+   {
+   public:
+
+      typedef ip::tcp::socket socket_type;
+      typedef boost::shared_ptr<bridge> ptr_type;
+
+      bridge(boost::asio::io_service& ios)
+      : downstream_socket_(ios),
+        upstream_socket_  (ios)
+      {}
+
+      socket_type& downstream_socket()
+      {
+         // Client socket
+         return downstream_socket_;
+      }
+
+      socket_type& upstream_socket()
+      {
+         // Remote server socket
+         return upstream_socket_;
+      }
+
+      void start(const std::string& upstream_host, unsigned short upstream_port)
+      {
+         // Attempt connection to remote server (upstream side)
+         upstream_socket_.async_connect(
+              ip::tcp::endpoint(
+                   boost::asio::ip::address::from_string(upstream_host),
+                   upstream_port),
+               boost::bind(&bridge::handle_upstream_connect,
+                    shared_from_this(),
+                    boost::asio::placeholders::error));
+      }
+
+      void handle_upstream_connect(const boost::system::error_code& error)
+      {
+         if (!error)
+         {
+            // Setup async read from remote server (upstream)
+            upstream_socket_.async_read_some(
+                 boost::asio::buffer(upstream_data_,max_data_length),
+                 boost::bind(&bridge::handle_upstream_read,
+                      shared_from_this(),
+                      boost::asio::placeholders::error,
+                      boost::asio::placeholders::bytes_transferred));
+
+            // Setup async read from client (downstream)
+            downstream_socket_.async_read_some(
+                 boost::asio::buffer(downstream_data_,max_data_length),
+                 boost::bind(&bridge::handle_downstream_read,
+                      shared_from_this(),
+                      boost::asio::placeholders::error,
+                      boost::asio::placeholders::bytes_transferred));
+         }
+         else
+            close();
+      }
+
+   private:
+
+      /*
+         Section A: Remote Server --> Proxy --> Client
+         Process data recieved from remote sever then send to client.
+      */
+
+      // Read from remote server complete, now send data to client
+      void handle_upstream_read(const boost::system::error_code& error,
+                                const size_t& bytes_transferred) // Da Server a Client
+      {
+         if (!error)
+         {
+            if (filter_data(upstream_data_, bytes_transferred, regex_s_c_b, regex_s_c_w)){
+               async_write(downstream_socket_,
+                  boost::asio::buffer(upstream_data_,bytes_transferred),
+                  boost::bind(&bridge::handle_downstream_write,
+                        shared_from_this(),
+                        boost::asio::placeholders::error));
+            }else{
+               close();
+            }
+         }
+         else
+            close();
+      }
+
+      // Write to client complete, Async read from remote server
+      void handle_downstream_write(const boost::system::error_code& error)
+      {
+         if (!error)
+         {
+            upstream_socket_.async_read_some(
+                 boost::asio::buffer(upstream_data_,max_data_length),
+                 boost::bind(&bridge::handle_upstream_read,
+                      shared_from_this(),
+                      boost::asio::placeholders::error,
+                      boost::asio::placeholders::bytes_transferred));
+         }
+         else
+            close();
+      }
+      // *** End Of Section A ***
+
+
+      /*
+         Section B: Client --> Proxy --> Remove Server
+         Process data recieved from client then write to remove server.
+      */
+
+      // Read from client complete, now send data to remote server
+      void handle_downstream_read(const boost::system::error_code& error,
+                                  const size_t& bytes_transferred) // Da Client a Server
+      {
+         if (!error)
+         {
+            if (filter_data(downstream_data_, bytes_transferred, regex_c_s_b, regex_c_s_w)){
+               async_write(upstream_socket_,
+                  boost::asio::buffer(downstream_data_,bytes_transferred),
+                  boost::bind(&bridge::handle_upstream_write,
+                        shared_from_this(),
+                        boost::asio::placeholders::error));
+            }else{
+               close();
+            }
+         }
+         else
+            close();
+      }
+
+      // Write to remote server complete, Async read from client
+      void handle_upstream_write(const boost::system::error_code& error)
+      {
+         if (!error)
+         {
+            downstream_socket_.async_read_some(
+                 boost::asio::buffer(downstream_data_,max_data_length),
+                 boost::bind(&bridge::handle_downstream_read,
+                      shared_from_this(),
+                      boost::asio::placeholders::error,
+                      boost::asio::placeholders::bytes_transferred));
+         }
+         else
+            close();
+      }
+      // *** End Of Section B ***
+
+      void close()
+      {
+         boost::mutex::scoped_lock lock(mutex_);
+
+         if (downstream_socket_.is_open())
+         {
+            downstream_socket_.close();
+         }
+
+         if (upstream_socket_.is_open())
+         {
+            upstream_socket_.close();
+         }
+      }
+
+      socket_type downstream_socket_;
+      socket_type upstream_socket_;
+
+      enum { max_data_length = 8192 }; //8KB
+      unsigned char downstream_data_[max_data_length];
+      unsigned char upstream_data_  [max_data_length];
+
+      boost::mutex mutex_;
+
+   public:
+
+      class acceptor
+      {
+      public:
+
+         acceptor(boost::asio::io_service& io_service,
+                  const std::string& local_host, unsigned short local_port,
+                  const std::string& upstream_host, unsigned short upstream_port)
+         : io_service_(io_service),
+           localhost_address(boost::asio::ip::address_v4::from_string(local_host)),
+           acceptor_(io_service_,ip::tcp::endpoint(localhost_address,local_port)),
+           upstream_port_(upstream_port),
+           upstream_host_(upstream_host)
+         {}
+
+         bool accept_connections()
+         {
+            try
+            {
+               session_ = boost::shared_ptr<bridge>(new bridge(io_service_));
+
+               acceptor_.async_accept(session_->downstream_socket(),
+                    boost::bind(&acceptor::handle_accept,
+                         this,
+                         boost::asio::placeholders::error));
+            }
+            catch(std::exception& e)
+            {
+               std::cerr << "acceptor exception: " << e.what() << std::endl;
+               return false;
+            }
+
+            return true;
+         }
+
+      private:
+
+         void handle_accept(const boost::system::error_code& error)
+         {
+            if (!error)
+            {
+               session_->start(upstream_host_,upstream_port_);
+
+               if (!accept_connections())
+               {
+                  std::cerr << "Failure during call to accept." << std::endl;
+               }
+            }
+            else
+            {
+               std::cerr << "Error: " << error.message() << std::endl;
+            }
+         }
+
+         boost::asio::io_service& io_service_;
+         ip::address_v4 localhost_address;
+         ip::tcp::acceptor acceptor_;
+         ptr_type session_;
+         unsigned short upstream_port_;
+         std::string upstream_host_;
+      };
+
+   };
+}
+
+void push_regex(char* arg, vector<pair<string,boost::regex>> &v){
+   size_t expr_len = (strlen(arg)-1)/2;
+   char expr[expr_len];
+   unhexlify(arg+1, arg+strlen(arg)-1, expr);
+   boost::regex regex(reinterpret_cast<char*>(expr),
+      reinterpret_cast<char*>(expr) + expr_len);
+   v.push_back(make_pair(string(arg), regex));
+}
+
+int main(int argc, char* argv[])
+{
+   if (argc < 5)
+   {
+      std::cerr << "usage: tcpproxy_server <local host ip> <local port> <forward host ip> <forward port> C..... S....." << std::endl;
+      return 1;
+   }
+
+   const unsigned short local_port   = static_cast<unsigned short>(::atoi(argv[2]));
+   const unsigned short forward_port = static_cast<unsigned short>(::atoi(argv[4]));
+   const std::string local_host      = argv[1];
+   const std::string forward_host    = argv[3];
+   for (int i=5;i<argc;i++){
+      if (strlen(argv[i]) >= 1){
+         switch(argv[i][0]){
+            case 'C': { // Client to server Blacklist
+               push_regex(argv[i], regex_c_s_b);
+               break;
+            }
+            case 'c': { // Client to server Whitelist
+               push_regex(argv[i], regex_c_s_w);
+               break;
+            }
+            case 'S': { // Server to client Blacklist
+               push_regex(argv[i], regex_s_c_b);
+               break;
+            }
+            case 's': { // Server to client Whitelist
+               push_regex(argv[i], regex_s_c_w);
+               break;
+            }
+         }
+      }
+   }
+
+   boost::asio::io_service ios;
+
+   try
+   {
+      tcp_proxy::bridge::acceptor acceptor(ios,
+                                           local_host, local_port,
+                                           forward_host, forward_port);
+
+      acceptor.accept_connections();
+
+      ios.run();
+   }
+   catch(std::exception& e)
+   {
+      std::cerr << "Error: " << e.what() << std::endl;
+      return 1;
+   }
+
+   return 0;
+}
+
+/*
+ * [Note] On posix systems the tcp proxy server build command is as follows:
+ * c++ -pedantic -ansi -Wall -Werror -O3 -o tcpproxy_server tcpproxy_server.cpp -L/usr/lib -lstdc++ -lpthread -lboost_thread -lboost_system
+ */
--- a/firewall/c_back/proxy_wrap.py
+++ b/firewall/c_back/proxy_wrap.py
@@ -0,0 +1,87 @@
+import subprocess, re
+
+#c++ -o proxy proxy.cpp
+
+class Filter:
+    def __init__(self, regex, is_blacklist=True, c_to_s=False, s_to_c=False ):
+        self.regex = regex
+        self.is_blacklist = is_blacklist
+        if c_to_s == s_to_c: c_to_s = s_to_c = True # (False, False) == (True, True)
+        self.c_to_s = c_to_s
+        self.s_to_c = s_to_c
+        self.blocked = 0
+    
+    def compile(self):
+        if isinstance(self.regex, str): self.regex = self.regex.encode()
+        if not isinstance(self.regex, bytes): raise Exception("Invalid Regex Paramether")
+        re.compile(self.regex) # raise re.error if is invalid!
+        if self.c_to_s:
+            yield "C"+self.regex.hex() if self.is_blacklist else "c"+self.regex.hex()
+        if self.s_to_c:
+            yield "S"+self.regex.hex() if self.is_blacklist else "s"+self.regex.hex()
+
+
+
+class Proxy:
+    def __init__(self, internal_port, public_port, filters=None, public_host="0.0.0.0", internal_host="127.0.0.1"):
+        self.public_host = public_host
+        self.public_port = public_port
+        self.internal_host = internal_host
+        self.internal_port = internal_port
+        self.filters = set(filters) if filters else set([])
+        self.process = None
+    
+    def start(self, callback=None):
+        if self.process is None:
+            filter_map = self.compile_filters()
+            filters_codes = list(filter_map.keys())
+            self.process = subprocess.Popen(
+                ["./proxy", str(self.public_host), str(self.public_port), str(self.internal_host), str(self.internal_port), *filters_codes],
+                stdout=subprocess.PIPE, universal_newlines=True
+            )
+            for stdout_line in iter(self.process.stdout.readline, ""):
+                if stdout_line.startswith("BLOCKED"):
+                    regex_id = stdout_line.split()[1]
+                    filter_map[regex_id].blocked+=1
+                    if callback: callback(filter_map[regex_id])
+            self.process.stdout.close()
+            return self.process.wait()
+    
+    def stop(self):
+        if self.process:
+            self.process.terminate()
+            try:
+                self.process.wait(timeout=3)
+                return True
+            except Exception:
+                self.process.kill()
+                return False
+            finally:
+                self.process = None
+        return True
+
+    def restart(self):
+        status = self.stop()
+        self.start()
+        return status
+    
+    def reload(self):
+        if self.process: self.restart()
+
+    def compile_filters(self):
+        res = {}
+        for filter_obj in self.filters:
+            raw_filters = filter_obj.compile()
+            for filter in raw_filters:
+                res[filter] = filter_obj
+        return res
+
+    def add_filter(self, filter):
+        self.filters.add(filter)
+        self.reload()
+
+    def remove_filter(self, filter):
+        try:
+            del self.filters[self.filters.remove(filter)]
+        except ValueError: return
+        self.reload()
--- a/firewall/config/nginx.conf
+++ b/firewall/config/nginx.conf
@@ -0,0 +1,28 @@
+worker_processes  5;  ## Default: 1
+pid /var/run/nginx.pid;
+
+user nobody nogroup;
+
+events {
+  worker_connections  1024;
+}
+
+
+http{
+    server {
+        listen ${NGINX_PORT};
+        server_name _;
+
+
+        root /execute/frontend/;
+        location / {
+            try_files $uri /index.html;  
+        }
+
+        location /api/ {
+            include proxy_params;
+            proxy_pass http://127.0.0.1:8080;
+        }
+
+    }
+}
--- a/firewall/config/supervisord.conf
+++ b/firewall/config/supervisord.conf
@@ -0,0 +1,31 @@
+[supervisord]
+logfile = /dev/null
+loglevel = info
+user = root
+pidfile = /var/run/supervisord.pid
+nodaemon = true
+
+[program:nginx]
+command=/usr/sbin/nginx -g "daemon off;"
+autostart=true
+autorestart=true
+user = root
+startretries=5
+numprocs=1
+startsecs=0
+process_name=%(program_name)s_%(process_num)02d
+stderr_logfile=/var/log/supervisor/%(program_name)s_stderr.log
+stderr_logfile_maxbytes=10MB
+stdout_logfile=/var/log/supervisor/%(program_name)s_stdout.log
+stdout_logfile_maxbytes=10MB
+
+[program:backend]
+directory=/execute
+user = nobody
+command=python3 app.py
+stdout_logfile="syslog"
+stderr_logfile="syslog"
+startsecs=10
+stopsignal=QUIT
+stopasgroup=true
+killasgroup=true
--- a/firewall/frontend/.dockerignore
+++ b/firewall/frontend/.dockerignore
@@ -0,0 +1,28 @@
+Dockerfile
+docker-compose.yml
+**/*.pyc
+**/__pycache__/
+/.vscode/**
+
+#Node filters
+
+/node_modules
+/.pnp
+.pnp.js
+
+# testing
+/coverage
+
+# production
+/build
+
+# misc
+.DS_Store
+.env.local
+.env.development.local
+.env.test.local
+.env.production.local
+
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
--- a/firewall/frontend/.gitignore
+++ b/firewall/frontend/.gitignore
@@ -0,0 +1,23 @@
+# See https://help.github.com/articles/ignoring-files/ for more about ignoring files.
+
+# dependencies
+/node_modules
+/.pnp
+.pnp.js
+
+# testing
+/coverage
+
+# production
+/build
+
+# misc
+.DS_Store
+.env.local
+.env.development.local
+.env.test.local
+.env.production.local
+
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
--- a/firewall/frontend/README.md
+++ b/firewall/frontend/README.md
@@ -0,0 +1,46 @@
+# Getting Started with Create React App
+
+This project was bootstrapped with [Create React App](https://github.com/facebook/create-react-app).
+
+## Available Scripts
+
+In the project directory, you can run:
+
+### `npm start`
+
+Runs the app in the development mode.\
+Open [http://localhost:3000](http://localhost:3000) to view it in the browser.
+
+The page will reload if you make edits.\
+You will also see any lint errors in the console.
+
+### `npm test`
+
+Launches the test runner in the interactive watch mode.\
+See the section about [running tests](https://facebook.github.io/create-react-app/docs/running-tests) for more information.
+
+### `npm run build`
+
+Builds the app for production to the `build` folder.\
+It correctly bundles React in production mode and optimizes the build for the best performance.
+
+The build is minified and the filenames include the hashes.\
+Your app is ready to be deployed!
+
+See the section about [deployment](https://facebook.github.io/create-react-app/docs/deployment) for more information.
+
+### `npm run eject`
+
+**Note: this is a one-way operation. Once you `eject`, you can’t go back!**
+
+If you aren’t satisfied with the build tool and configuration choices, you can `eject` at any time. This command will remove the single build dependency from your project.
+
+Instead, it will copy all the configuration files and the transitive dependencies (webpack, Babel, ESLint, etc) right into your project so you have full control over them. All of the commands except `eject` will still work, but they will point to the copied scripts so you can tweak them. At this point you’re on your own.
+
+You don’t have to ever use `eject`. The curated feature set is suitable for small and middle deployments, and you shouldn’t feel obligated to use this feature. However we understand that this tool wouldn’t be useful if you couldn’t customize it when you are ready for it.
+
+## Learn More
+
+You can learn more in the [Create React App documentation](https://facebook.github.io/create-react-app/docs/getting-started).
+
+To learn React, check out the [React documentation](https://reactjs.org/).
--- a/firewall/frontend/package-lock.json
+++ b/firewall/frontend/package-lock.json
--- a/firewall/frontend/package.json
+++ b/firewall/frontend/package.json
@@ -0,0 +1,54 @@
+{
+  "name": "firegex-frontend",
+  "version": "0.1.0",
+  "private": true,
+  "dependencies": {
+    "@mantine/core": "^4.2.8",
+    "@mantine/form": "^4.2.8",
+    "@mantine/hooks": "^4.2.8",
+    "@mantine/modals": "^4.2.8",
+    "@mantine/notifications": "^4.2.8",
+    "@mantine/prism": "^4.2.8",
+    "@mantine/spotlight": "^4.2.8",
+    "@testing-library/jest-dom": "^5.16.4",
+    "@testing-library/react": "^13.3.0",
+    "@testing-library/user-event": "^13.5.0",
+    "@types/jest": "^27.5.2",
+    "@types/node": "^16.11.39",
+    "@types/react": "^18.0.12",
+    "@types/react-dom": "^18.0.5",
+    "buffer": "^6.0.3",
+    "react": "^18.1.0",
+    "react-dom": "^18.1.0",
+    "react-icons": "^4.4.0",
+    "react-router-dom": "^6.3.0",
+    "react-scripts": "5.0.1",
+    "sass": "^1.52.3",
+    "typescript": "^4.7.3",
+    "web-vitals": "^2.1.4"
+  },
+  "scripts": {
+    "start": "react-scripts start",
+    "build": "react-scripts build",
+    "test": "react-scripts test",
+    "eject": "react-scripts eject"
+  },
+  "eslintConfig": {
+    "extends": [
+      "react-app",
+      "react-app/jest"
+    ]
+  },
+  "browserslist": {
+    "production": [
+      ">0.2%",
+      "not dead",
+      "not op_mini all"
+    ],
+    "development": [
+      "last 1 chrome version",
+      "last 1 firefox version",
+      "last 1 safari version"
+    ]
+  }
+}
--- a/firewall/frontend/public/favicon.ico
+++ b/firewall/frontend/public/favicon.ico
--- a/firewall/frontend/public/index.html
+++ b/firewall/frontend/public/index.html
@@ -0,0 +1,43 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <link rel="icon" href="%PUBLIC_URL%/favicon.ico" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="theme-color" content="#000000" />
+    <meta
+      name="description"
+      content="Web site created using create-react-app"
+    />
+    <link rel="apple-touch-icon" href="%PUBLIC_URL%/logo192.png" />
+    <!--
+      manifest.json provides metadata used when your web app is installed on a
+      user's mobile device or desktop. See https://developers.google.com/web/fundamentals/web-app-manifest/
+    -->
+    <link rel="manifest" href="%PUBLIC_URL%/manifest.json" />
+    <!--
+      Notice the use of %PUBLIC_URL% in the tags above.
+      It will be replaced with the URL of the `public` folder during the build.
+      Only files inside the `public` folder can be referenced from the HTML.
+
+      Unlike "/favicon.ico" or "favicon.ico", "%PUBLIC_URL%/favicon.ico" will
+      work correctly both with client-side routing and a non-root public URL.
+      Learn how to configure a non-root public URL by running `npm run build`.
+    -->
+    <title>React App</title>
+  </head>
+  <body>
+    <noscript>You need to enable JavaScript to run this app.</noscript>
+    <div id="root"></div>
+    <!--
+      This HTML file is a template.
+      If you open it directly in the browser, you will see an empty page.
+
+      You can add webfonts, meta tags, or analytics to this file.
+      The build step will place the bundled scripts into the <body> tag.
+
+      To begin the development, run `npm start` or `yarn start`.
+      To create a production bundle, use `npm run build` or `yarn build`.
+    -->
+  </body>
+</html>
--- a/firewall/frontend/public/logo192.png
+++ b/firewall/frontend/public/logo192.png
--- a/firewall/frontend/public/logo512.png
+++ b/firewall/frontend/public/logo512.png
--- a/firewall/frontend/public/manifest.json
+++ b/firewall/frontend/public/manifest.json
@@ -0,0 +1,25 @@
+{
+  "short_name": "React App",
+  "name": "Create React App Sample",
+  "icons": [
+    {
+      "src": "favicon.ico",
+      "sizes": "64x64 32x32 24x24 16x16",
+      "type": "image/x-icon"
+    },
+    {
+      "src": "logo192.png",
+      "type": "image/png",
+      "sizes": "192x192"
+    },
+    {
+      "src": "logo512.png",
+      "type": "image/png",
+      "sizes": "512x512"
+    }
+  ],
+  "start_url": ".",
+  "display": "standalone",
+  "theme_color": "#000000",
+  "background_color": "#ffffff"
+}
--- a/firewall/frontend/public/robots.txt
+++ b/firewall/frontend/public/robots.txt
@@ -0,0 +1,3 @@
+# https://www.robotstxt.org/robotstxt.html
+User-agent: *
+Disallow:
--- a/firewall/frontend/src/App.tsx
+++ b/firewall/frontend/src/App.tsx
@@ -0,0 +1,17 @@
+import React from 'react';
+import { Navigate, Outlet, Route, Routes } from 'react-router-dom';
+import MainLayout from './components/MainLayout';
+import HomePage from './pages/HomePage';
+import ServiceDetails from './pages/ServiceDetails';
+
+function App() {
+  return <Routes>
+        <Route element={<MainLayout><Outlet /></MainLayout>}>
+          <Route index element={<HomePage />} />
+          <Route path=":srv_id" element={<ServiceDetails />} />
+          <Route path="*" element={<Navigate to="/" />} />
+        </Route>
+    </Routes>
+}
+
+export default App;
--- a/firewall/frontend/src/_vars.scss
+++ b/firewall/frontend/src/_vars.scss
@@ -0,0 +1,4 @@
+
+$primary_color: #242a33;
+$second_color: #1A1B1E;
+$third_color:#25262b;
--- a/firewall/frontend/src/components/AddNewRegex.tsx
+++ b/firewall/frontend/src/components/AddNewRegex.tsx
@@ -0,0 +1,120 @@
+import { Button, Group, NumberInput, Space, TextInput, Notification, Switch, NativeSelect } from '@mantine/core';
+import { useForm } from '@mantine/hooks';
+import React, { useState } from 'react';
+import { RegexAddForm, ServiceAddForm } from '../js/models';
+import { addregex, addservice, b64encode, validateRegex } from '../js/utils';
+import { ImCross } from "react-icons/im"
+import FilterTypeSelector from './FilterTypeSelector';
+
+
+type RegexAddInfo = {
+    regex:string,
+    type:string,
+    mode:string,
+    regex_exact:boolean,
+    percentage_encoding:boolean
+}
+
+function AddNewRegex({ closePopup, service }:{ closePopup:()=>void, service:string }) { 
+
+    const form = useForm({
+        initialValues: {
+            regex:"",
+            type:"blacklist",
+            mode:"C <-> S",
+            regex_exact:false,
+            percentage_encoding:false
+        },
+        validationRules:{
+            regex: (value) => value !== "" && validateRegex(value),
+            type: (value) => ["blacklist","whitelist"].includes(value),
+            mode: (value) => ['C -> S', 'S -> C', 'C <-> S'].includes(value)
+        }
+    })
+
+    const [submitLoading, setSubmitLoading] = useState(false)
+    const [error, setError] = useState<string|null>(null)
+
+    const submitRequest = (values:RegexAddInfo) => {
+        setSubmitLoading(true)
+        const filter_mode = ({'C -> S':'C', 'S -> C':'S', 'C <-> S':'B'}[values.mode])
+
+        let final_regex = values.regex
+        if (values.percentage_encoding){
+            final_regex = decodeURIComponent(final_regex)
+        }
+        if(!values.regex_exact){
+            final_regex = ".*"+final_regex+".*"
+        }
+
+        const request:RegexAddForm = {
+            is_blacklist:values.type !== "whitelist",
+            service_id: service,
+            mode: filter_mode?filter_mode:"B",
+            regex: b64encode(final_regex)
+        }
+        setSubmitLoading(false)
+        addregex(request).then( res => {
+            if (!res){
+                setSubmitLoading(false)
+                closePopup();
+            }else{
+                setSubmitLoading(false)
+                setError("Invalid request! [ "+res+" ]")
+            }
+        }).catch( err => {
+            setSubmitLoading(false)
+            setError("Request Failed! [ "+err+" ]")
+        })
+        
+    }    
+
+
+  return <form onSubmit={form.onSubmit(submitRequest)}>
+        <TextInput
+            required
+            label="Regex"
+            placeholder="[A-Z0-9]{31}="
+            {...form.getInputProps('regex')}
+        />
+        <Space h="md" />
+        <Switch
+            label="Use percentage encoding for binary values"
+            {...form.getInputProps('percentage_encoding', { type: 'checkbox' })}
+        />
+        <Space h="md" />
+        <Switch
+            label="Match the exactly the regex"
+            {...form.getInputProps('regex_exact', { type: 'checkbox' })}
+        />
+        <Space h="md" />
+        <NativeSelect
+            data={['C -> S', 'S -> C', 'C <-> S']}
+            label="Choose the source of the packets to filter"
+            variant="filled"
+            required
+            {...form.getInputProps('mode')}
+        />
+        <Space h="md" />
+        <FilterTypeSelector
+            size="md"
+            color="gray"
+            required
+            {...form.getInputProps('type')}
+        />
+        <Group position="right" mt="md">
+            <Button loading={submitLoading} type="submit">Add Filter</Button>
+        </Group>
+
+        <Space h="md" />
+        
+        {error?<>
+        <Notification icon={<ImCross size={14} />} color="red" onClose={()=>{setError(null)}}>
+            Error: {error}
+        </Notification><Space h="md" /></>:null}
+        
+    </form>
+
+}
+
+export default AddNewRegex;
--- a/firewall/frontend/src/components/AddNewService.tsx
+++ b/firewall/frontend/src/components/AddNewService.tsx
@@ -0,0 +1,77 @@
+import { Button, Group, NumberInput, Space, TextInput, Notification } from '@mantine/core';
+import { useForm } from '@mantine/hooks';
+import React, { useState } from 'react';
+import { ServiceAddForm } from '../js/models';
+import { addservice } from '../js/utils';
+import { ImCross } from "react-icons/im"
+
+function AddNewService({ closePopup }:{ closePopup:()=>void }) {
+
+    const form = useForm({
+        initialValues: {
+            name:"",
+            port:1,
+        },
+        validationRules:{
+            name: (value) => value !== ""?true:false,
+            port: (value) => value>0 && value<65536
+        }
+    })
+
+    const [submitLoading, setSubmitLoading] = useState(false)
+    const [error, setError] = useState<string|null>(null)
+
+    const submitRequest = (values:ServiceAddForm) =>{
+        setSubmitLoading(true)
+        addservice(values).then( res => {
+            if (!res){
+                setSubmitLoading(false)
+                closePopup();
+            }else{
+                setSubmitLoading(false)
+                setError("Invalid request! [ "+res+" ]")
+            }
+        }).catch( err => {
+            setSubmitLoading(false)
+            setError("Request Failed! [ "+err+" ]")
+        })
+    }    
+
+
+  return <form onSubmit={form.onSubmit(submitRequest)}>
+        <TextInput
+            required
+            label="Service name"
+            placeholder="Challenge 01"
+            {...form.getInputProps('name')}
+        />
+        <Space h="md" />
+
+        <NumberInput
+            required
+            placeholder="8080"
+            min={1}
+            max={65535}
+            label="Service port"
+            {...form.getInputProps('port')}
+        />
+
+
+        <Space h="md" />
+
+        <Group position="right" mt="md">
+            <Button loading={submitLoading} type="submit">Add Service</Button>
+        </Group>
+
+        <Space h="md" />
+        
+        {error?<>
+        <Notification icon={<ImCross size={14} />} color="red" onClose={()=>{setError(null)}}>
+            Error: {error}
+        </Notification><Space h="md" /></>:null}
+        
+    </form>
+
+}
+
+export default AddNewService;
--- a/firewall/frontend/src/components/FilterTypeSelector.tsx
+++ b/firewall/frontend/src/components/FilterTypeSelector.tsx
@@ -0,0 +1,32 @@
+import { Box, Center, SegmentedControl } from "@mantine/core";
+import React from "react";
+import { FaListAlt } from "react-icons/fa";
+import { TiCancel } from "react-icons/ti";
+
+
+
+export default function FilterTypeSelector(props:any){
+    return <SegmentedControl
+        data={[
+            {
+            value: 'blacklist',
+            label: (
+                <Center style={{color:"#FFF"}}>
+                <TiCancel size={23} color="red"/>
+                <Box ml={10}>Blacklist</Box>
+                </Center>
+            ),
+            },
+            {
+            value: 'whitelist',
+            label: (
+                <Center style={{color:"#FFF"}}>
+                <FaListAlt size={16} color="gray"/>
+                <Box ml={10}>Whitelist</Box>
+                </Center>
+            ),
+            },
+        ]}
+        {...props}
+    />
+}
--- a/firewall/frontend/src/components/Footer/Footer.module.scss
+++ b/firewall/frontend/src/components/Footer/Footer.module.scss
@@ -0,0 +1,9 @@
+@use "../../vars" as *;
+@use "../../index.scss" as *;
+
+.footer{
+    height: 150px;
+    margin-top: 50px;
+    background-color: $primary_color;
+    @extend .center-flex;
+}
--- a/firewall/frontend/src/components/Footer/index.tsx
+++ b/firewall/frontend/src/components/Footer/index.tsx
@@ -0,0 +1,12 @@
+import React from 'react';
+
+import style from "./Footer.module.scss";
+
+
+function Footer() {
+  return <div id="footer" className={style.footer}>
+        Made by Pwnzer0tt1
+  </div>
+}
+
+export default Footer;
--- a/firewall/frontend/src/components/Header/Header.module.scss
+++ b/firewall/frontend/src/components/Header/Header.module.scss
@@ -0,0 +1,17 @@
+
+@use "../../vars" as *;
+
+.header{
+    width: 100%;
+    height: 140px;
+    background-color: $primary_color;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+}
+
+.logo{
+    width: 200px;
+    margin-left: 40px;
+    height: 70%;
+}
--- a/firewall/frontend/src/components/Header/index.tsx
+++ b/firewall/frontend/src/components/Header/index.tsx
@@ -0,0 +1,68 @@
+import React, { useEffect, useState } from 'react';
+import { ActionIcon, Badge, Modal } from '@mantine/core';
+import style from "./Header.module.scss";
+import { errorNotify, generalstats } from '../../js/utils';
+import { GeneralStats, update_freq } from '../../js/models';
+import { BsPlusLg } from "react-icons/bs"
+import { AiFillHome } from "react-icons/ai"
+import { useLocation, useNavigate, useParams } from 'react-router-dom';
+import AddNewRegex from '../AddNewRegex';
+import AddNewService from '../AddNewService';
+
+
+function Header() {
+  
+  const [generalStats, setGeneralStats] = useState<GeneralStats>({closed:0, regexes:0, services:0});
+  const location = useLocation()
+
+  const navigator = useNavigate()
+
+    const updateInfo = () => {
+      generalstats().then(res => {
+        setGeneralStats(res)
+      }).catch(
+        err => errorNotify("General Info Auto-Update failed!", err.toString())
+      )
+  }
+
+  useEffect(()=>{
+      updateInfo()
+      const updater = setInterval(updateInfo, update_freq)
+      return () => { clearInterval(updater) }
+  }, []);
+
+
+  const {srv_id} = useParams()
+  const [open, setOpen] = useState(false);
+  const closeModal = () => {setOpen(false);}
+
+  return <div id="header-page" className={style.header}>
+        <div className={style.logo} >LOGO</div>
+        <div className="flex-spacer" />
+        <Badge color="green" size="lg" variant="filled">Services: {generalStats.services}</Badge>
+        <Badge style={{marginLeft:"10px"}} size="lg" color="yellow" variant="filled">Filtered Connections: {generalStats.closed}</Badge>
+        <Badge style={{marginLeft:"10px"}} size="lg" color="violet" variant="filled">Regexes: {generalStats.regexes}</Badge>
+        <div style={{marginLeft:"20px"}}></div>
+        { location.pathname !== "/"?
+            <ActionIcon color="teal" style={{marginRight:"10px"}}
+              size="xl" radius="md" variant="filled"
+              onClick={()=>navigator("/")}>
+              <AiFillHome size="25px" />
+            </ActionIcon>
+        :null}
+        <ActionIcon color="blue" onClick={()=>setOpen(true)} size="xl" radius="md" variant="filled"><BsPlusLg size="20px" /></ActionIcon>
+        {srv_id?
+          <Modal size="xl" title="Add a new regex filter" opened={open} onClose={closeModal} closeOnClickOutside={false} centered>
+            <AddNewRegex closePopup={closeModal} service={srv_id} />
+          </Modal>:
+          <Modal size="xl" title="Add a new service" opened={open} onClose={closeModal} closeOnClickOutside={false} centered>
+            <AddNewService closePopup={closeModal} />
+          </Modal>
+        }
+            
+        
+        <div style={{marginLeft:"40px"}}></div>
+  </div>
+}
+
+export default Header;
--- a/firewall/frontend/src/components/MainLayout.tsx
+++ b/firewall/frontend/src/components/MainLayout.tsx
@@ -0,0 +1,23 @@
+import { Container, MantineProvider, Space } from '@mantine/core';
+import { NotificationsProvider } from '@mantine/notifications';
+import React from 'react';
+import Footer from './Footer';
+import Header from './Header';
+
+function MainLayout({ children }:{ children:any }) {
+  return <>
+      <MantineProvider theme={{ colorScheme: 'dark' }} withGlobalStyles withNormalizeCSS>
+        <NotificationsProvider>
+            <Header />
+            <Space h="xl" />
+            <Container size="xl" style={{minHeight:"57.5vh"}}>
+                {children}
+            </Container>
+            <Space h="xl" />
+            <Footer />
+        </NotificationsProvider>
+      </MantineProvider>
+  </>
+}
+
+export default MainLayout;
--- a/firewall/frontend/src/components/RegexView/RegexView.module.scss
+++ b/firewall/frontend/src/components/RegexView/RegexView.module.scss
@@ -0,0 +1,13 @@
+
+@use "../../vars" as *;
+
+.box{
+    padding:30px;
+    margin:5px;
+}
+
+.regex_text{
+    padding: 10px;
+    background-color: $third_color;
+    border-radius: 15px;
+}
--- a/firewall/frontend/src/components/RegexView/index.tsx
+++ b/firewall/frontend/src/components/RegexView/index.tsx
@@ -0,0 +1,78 @@
+import { Center, Grid, SegmentedControl, Text, Title, Box, Badge, Space, ActionIcon } from '@mantine/core';
+import React, { useState } from 'react';
+import { RegexFilter } from '../../js/models';
+import { getHumanReadableRegex } from '../../js/utils';
+import style from "./RegexView.module.scss";
+import { FaListAlt } from "react-icons/fa"
+import { TiCancel } from "react-icons/ti"
+import { BsTrashFill } from "react-icons/bs"
+import YesNoModal from '../YesNoModal';
+import FilterTypeSelector from '../FilterTypeSelector';
+
+
+function RegexView({ regexInfo }:{ regexInfo:RegexFilter }) {
+
+  const mode_string = regexInfo.mode === "C"? "C -> S":
+                      regexInfo.mode === "S"? "S -> C":
+                      regexInfo.mode === "B"? "S <-> C": "🤔"
+
+  let regex_expr = getHumanReadableRegex(regexInfo.regex);
+  let exact_regex = true;
+
+  if (regex_expr.length>=4 && regex_expr.startsWith(".*") && regex_expr.endsWith(".*")){
+    regex_expr = regex_expr.substring(2,regex_expr.length-2)
+    exact_regex = false;
+  }
+
+  const [deleteModal, setDeleteModal] = useState(false);
+
+  return <div className={style.box}>
+        <Grid>
+          <Grid.Col span={2}>
+            <Title order={2} style={{color:"#FFF"}}>Regex:</Title> 
+          </Grid.Col>
+          <Grid.Col span={8}>
+            <Text className={style.regex_text}> {regex_expr}</Text>
+          </Grid.Col>
+          <Grid.Col span={2}>
+            <ActionIcon color="red" onClick={()=>setDeleteModal(true)} size="xl" radius="md" variant="filled"><BsTrashFill size={22} /></ActionIcon>
+          </Grid.Col>
+          <Grid.Col span={2} />
+          <Grid.Col className='center-flex-row' span={4}>
+            <Space h="xs" />
+            <FilterTypeSelector 
+                size="md"
+                color="gray"
+                disabled
+                value={regexInfo.is_blacklist?"blacklist":"whitelist"}
+            />
+            <Space h="md" />
+            <div className='center-flex'>
+              <Badge size="md" color="green" variant="filled">Service: {regexInfo.service_id}</Badge>
+              <Space w="xs" />
+              <Badge size="md" color="gray" variant="filled">ID: {regexInfo.id}</Badge>
+            </div>
+          </Grid.Col>
+          <Grid.Col style={{width:"100%"}} span={6}>
+            <Space h="xs" />
+            <div className='center-flex-row'>
+              <Badge size="md" color={exact_regex?"grape":"pink"} variant="filled">Match: {exact_regex?"EXACT":"FIND"}</Badge>
+              <Space h="xs" />
+              <Badge size="md" color="yellow" variant="filled">Packets filtered: {regexInfo.n_packets}</Badge>
+              <Space h="xs" />
+              <Badge size="md" color="blue" variant="filled">Mode: {mode_string}</Badge>
+            </div>
+          </Grid.Col>
+        </Grid>
+        <YesNoModal
+            title='Are you sure to delete this regex?'
+            description={`You are going to delete the regex '${regex_expr}', causing the restart of the firewall if it is active.`}
+            onClose={()=>setDeleteModal(false)}
+            action={()=>console.log("Delete regex please!")}
+            opened={deleteModal}
+        />
+        
+  </div>
+}
+
+export default RegexView;
--- a/firewall/frontend/src/components/ServiceRow/ServiceRow.module.scss
+++ b/firewall/frontend/src/components/ServiceRow/ServiceRow.module.scss
@@ -0,0 +1,18 @@
+
+@use "../../index.scss" as *;
+
+.row{
+    width: 95%;
+    padding: 30px 0px;
+    border-radius: 20px;
+    margin: 10px;
+    @extend .center-flex;
+}
+
+.name{
+    font-size: 2.3em;
+    font-weight: bolder;
+    margin-right: 10px;
+    margin-bottom: 13px;
+    color:#FFF;
+}
--- a/firewall/frontend/src/components/ServiceRow/index.tsx
+++ b/firewall/frontend/src/components/ServiceRow/index.tsx
@@ -0,0 +1,89 @@
+import { ActionIcon, Badge, Grid, Space, Title } from '@mantine/core';
+import React, { useState } from 'react';
+import { FaPause, FaPlay, FaStop } from 'react-icons/fa';
+import { Service } from '../../js/models';
+import { MdOutlineArrowForwardIos } from "react-icons/md"
+import style from "./ServiceRow.module.scss";
+import YesNoModal from '../YesNoModal';
+
+//"status":"stop"/"wait"/"active"/"pause",
+function ServiceRow({ service, onClick, additional_buttons }:{ service:Service, onClick?:()=>void, additional_buttons?:any }) {
+
+    let status_color = "gray";
+    switch(service.status){
+        case "stop": status_color = "red"; break;
+        case "wait": status_color = "yellow"; break;
+        case "active": status_color = "teal"; break;
+        case "pause": status_color = "cyan"; break;
+    }
+
+    const [stopModal, setStopModal] = useState(false);
+    const [buttonLoading, setButtonLoading] = useState(false)
+
+    const stopService = () => {
+        setButtonLoading(true)
+        console.log("Stop this service please!")
+        setButtonLoading(false)
+    }
+
+    const startService = () => {
+        setButtonLoading(true)
+        console.log("Start this service please!")
+        setButtonLoading(false)
+    }
+
+    const pauseService = () => {
+        if (service.status === "pause") return setStopModal(true)
+        setButtonLoading(true)
+        console.log("Pause this service please!")
+        setButtonLoading(false)
+    }
+
+    
+
+    return <>
+        <Grid className={style.row} style={{width:"100%"}}>
+            <Grid.Col span={4}>
+                <div className="center-flex-row">
+                    <div className="center-flex"><Title className={style.name}>{service.name}</Title> <Badge size="xl" gradient={{ from: 'indigo', to: 'cyan' }} variant="gradient">:{service.public_port}</Badge></div>
+                    <Badge color={status_color} size="xl" radius="md">{service.internal_port} {"->"} {service.public_port}</Badge>
+                </div>
+            </Grid.Col>
+            <Grid.Col className="center-flex" span={8}>
+                <div className='flex-spacer'></div>
+                <div className="center-flex-row">
+                    <Badge style={{marginBottom:"20px"}} color={status_color} radius="sm" size="xl" variant="filled">Status: <u>{service.status}</u></Badge>
+                    <Badge style={{marginBottom:"8px"}}color="violet" radius="sm" size="lg" variant="filled">Regex: {service.n_regex}</Badge>
+                    <Badge color="yellow" radius="sm" size="lg" variant="filled">Connections Blocked: {service.n_packets}</Badge>
+                </div>
+                <Space w="xl" /><Space w="xl" />
+                <div className="center-flex">
+                    {additional_buttons}
+                    <ActionIcon color={service.status === "pause"?"yellow":"red"} loading={buttonLoading}
+                                onClick={pauseService} size="xl" radius="md" variant="filled"
+                                disabled={!["wait","active","pause"].includes(service.status)?true:false}>
+                        {service.status === "pause"?<FaStop size="20px" />:<FaPause size="20px" />}
+                    </ActionIcon>
+                    <Space w="md"/>
+                    <ActionIcon color="teal" size="xl" radius="md" onClick={startService} loading={buttonLoading}
+                                variant="filled" disabled={!["stop","pause"].includes(service.status)?true:false}>
+                        <FaPlay size="20px" />
+                    </ActionIcon>
+                </div>
+                <Space w="xl" /><Space w="xl" />
+                {onClick?<MdOutlineArrowForwardIos onClick={onClick} style={{cursor:"pointer"}} size="45px" />:null}
+                <Space w="xl" />
+            </Grid.Col>
+        </Grid>
+        <YesNoModal
+            title='Are you sure to stop this service!'
+            description={`You are going to delete the service '${service.id}', causing the stopping of the firewall. This will cause the shutdown of your service ⚠️!`}
+            onClose={()=>setStopModal(false)}
+            action={stopService}
+            opened={stopModal}
+        />
+        <hr style={{width:"100%"}}/>
+    </>
+}
+
+export default ServiceRow;
--- a/firewall/frontend/src/components/YesNoModal.tsx
+++ b/firewall/frontend/src/components/YesNoModal.tsx
@@ -0,0 +1,19 @@
+import { Button, Group, Modal } from '@mantine/core';
+import React from 'react';
+
+function YesNoModal( { title, description, action, onClose, opened}:{ title:string, description:string, onClose:()=>void, action:()=>void, opened:boolean} ){
+
+    return <Modal size="xl" title={title} opened={opened} onClose={onClose} centered>
+            {description}
+            <Group position="right" mt="md">
+                <Button onClick={()=>{
+                    onClose()
+                    action()
+                }} color="teal" type="submit">Yes</Button>
+                <Button onClick={onClose} color="red" type="submit">No</Button>
+                
+            </Group>
+          </Modal>
+}
+
+export default YesNoModal;
--- a/firewall/frontend/src/index.scss
+++ b/firewall/frontend/src/index.scss
@@ -0,0 +1,35 @@
+
+@use "vars" as *;
+
+@import url('https://fonts.googleapis.com/css2?family=Lato&display=swap');
+
+body {
+  margin: 0;
+  font-family: 'Lato', sans-serif;
+}
+
+.center-flex{
+  display: flex;
+  justify-content: center;
+  align-items: center;
+}
+
+.center-flex-row{
+  @extend .center-flex;
+  flex-direction: column;
+}
+
+.flex-spacer{
+  flex-grow: 1;
+}
+
+::-webkit-scrollbar {
+  width: 12px;
+  margin:3px;
+  background: #333;
+  cursor: pointer;
+}
+::-webkit-scrollbar-thumb {
+  background: #757575;
+  border-radius: 8px;
+}
--- a/firewall/frontend/src/index.tsx
+++ b/firewall/frontend/src/index.tsx
@@ -0,0 +1,14 @@
+import React from 'react';
+import ReactDOM from 'react-dom/client';
+import { BrowserRouter } from "react-router-dom"
+import './index.scss';
+import App from './App';
+
+const root = ReactDOM.createRoot(
+  document.getElementById('root') as HTMLElement
+);
+root.render(
+  <BrowserRouter>
+      <App />
+  </BrowserRouter>
+);
--- a/firewall/frontend/src/js/models.ts
+++ b/firewall/frontend/src/js/models.ts
@@ -0,0 +1,45 @@
+
+
+export const update_freq = 3000;
+export const notification_time = 2000;
+
+export type GeneralStats = {
+    services:number,
+    closed:number,
+    regexes:number
+}
+
+export type Service = {
+    id:string,
+    name:string,
+    status:string,
+    public_port:number,
+    internal_port:number,
+    n_packets:number,
+    n_regex:number,
+}
+
+export type ServiceAddForm = {
+    name:string,
+    port:number
+}
+
+export type ServerResponse = {
+    status:string
+}
+
+export type RegexFilter = {
+    id:number,
+    service_id:string,
+    regex:string
+    is_blacklist:boolean,
+    mode:string //C S B => C->S S->C BOTH
+    n_packets:number
+}
+
+export type RegexAddForm = {
+    "service_id":string,
+    "regex":string,
+    "is_blacklist":boolean,
+    "mode":string // C->S S->C BOTH
+}
--- a/firewall/frontend/src/js/utils.tsx
+++ b/firewall/frontend/src/js/utils.tsx
@@ -0,0 +1,105 @@
+import { showNotification } from "@mantine/notifications";
+import { ImCross } from "react-icons/im";
+import { TiTick } from "react-icons/ti"
+import { GeneralStats, Service, ServiceAddForm, ServerResponse, RegexFilter, notification_time, RegexAddForm } from "./models";
+
+var Buffer = require('buffer').Buffer 
+
+export async function getapi(path:string):Promise<any>{
+    return await fetch(`/api/${path}`).then( res => res.json() )
+}
+
+export async function postapi(path:string,data:any):Promise<any>{
+    return await fetch(`/api/${path}`, {
+        method: 'POST',
+        cache: 'no-cache',
+        headers: {
+          'Content-Type': 'application/json'
+        },
+        body: JSON.stringify(data)
+    }).then(res => res.json());
+}
+
+
+export async function generalstats(){
+    return await getapi("general-stats") as GeneralStats;
+}
+
+export async function servicelist(){
+    return await getapi("services") as Service[];
+}
+
+export async function serviceinfo(service_id:string){
+    return await getapi(`service/${service_id}`) as Service;
+}
+
+export async function addservice(data:ServiceAddForm) {
+    const { status } = await postapi("services/add",data) as ServerResponse;
+    return status === "ok"?undefined:status
+}
+
+export async function addregex(data:RegexAddForm) {
+    const { status } = await postapi("regexes/add",data) as ServerResponse;
+    return status === "ok"?undefined:status
+}
+
+export async function serviceregexlist(service_id:string){
+    return await getapi(`service/${service_id}/regexes`) as RegexFilter[];
+}
+
+const unescapedChars = "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ!\"#$&\'()*+,-./:;<=>?@[\\]^_`{|}~ ";
+
+export function getHumanReadableRegex(regexB64:string){
+    const regex = Buffer.from(regexB64, "base64")
+    let res = ""
+    for (let i=0; i < regex.length; i++){
+        const byte = String.fromCharCode(regex[i]);
+        if (unescapedChars.includes(byte)){
+            res+=byte
+        }else{
+            res+="%"+regex[i].toString(16)
+        }
+    }
+    return res
+}
+
+export function errorNotify(title:string, description:string ){
+    showNotification({
+        autoClose: notification_time,
+        title: title,
+        message: description,
+        color: 'red',
+        icon: <ImCross />,
+    });
+}
+
+export function okNotify(title:string, description:string ){
+    showNotification({
+        autoClose: notification_time,
+        title: title,
+        message: description,
+        color: 'teal',
+        icon: <TiTick />,
+    });
+}
+
+export function validateRegex(pattern:string) {
+    var parts = pattern.split('/'),
+        regex = pattern,
+        options = "";
+    if (parts.length > 1) {
+        regex = parts[1];
+        options = parts[2];
+    }
+    try {
+        new RegExp(regex, options);
+        return true;
+    }
+    catch(e) {
+        return false;
+    }
+}
+
+export function b64encode(data:string){
+    return Buffer.from(data).toString('base64')
+}
--- a/firewall/frontend/src/pages/HomePage.tsx
+++ b/firewall/frontend/src/pages/HomePage.tsx
@@ -0,0 +1,35 @@
+import { Space, Title } from '@mantine/core';
+import React, { useEffect, useState } from 'react';
+import { useNavigate } from 'react-router-dom';
+import ServiceRow from '../components/ServiceRow';
+import { Service, update_freq } from '../js/models';
+import { errorNotify, servicelist } from '../js/utils';
+
+
+function HomePage() {
+
+    const [services, setServices] = useState<Service[]>([]);
+    const navigator = useNavigate()
+    
+    const updateInfo = () => {
+        servicelist().then(res => {
+            setServices(res)
+        }).catch(
+            err => errorNotify("Home Page Auto-Update failed!", err.toString())
+        )
+    }
+
+    useEffect(()=>{
+        updateInfo()
+        const updater = setInterval(updateInfo, update_freq)
+        return () => { clearInterval(updater) }
+    }, []);
+    
+    return <div id="service-list" className="center-flex-row">
+        {services.length > 0?services.map( srv => <ServiceRow service={srv} key={srv.id} onClick={()=>{
+            navigator("/"+srv.id)
+        }} />):<><Space h="xl"/> <Title className='center-flex' order={3}>No services found! Add one clicking the button above</Title></>}
+    </div>
+}
+
+export default HomePage;
--- a/firewall/frontend/src/pages/ServiceDetails.tsx
+++ b/firewall/frontend/src/pages/ServiceDetails.tsx
@@ -0,0 +1,78 @@
+import { ActionIcon, Grid, Space, Title } from '@mantine/core';
+import React, { useEffect, useState } from 'react';
+import { BsTrashFill } from 'react-icons/bs';
+import { useNavigate, useParams } from 'react-router-dom';
+import RegexView from '../components/RegexView';
+import ServiceRow from '../components/ServiceRow';
+import YesNoModal from '../components/YesNoModal';
+import { RegexFilter, Service, update_freq } from '../js/models';
+import { errorNotify, serviceinfo, serviceregexlist } from '../js/utils';
+
+function ServiceDetails() {
+    const {srv_id} = useParams()
+
+    const [serviceInfo, setServiceInfo] = useState<Service>({
+        id:srv_id?srv_id:"",
+        internal_port:0,
+        n_packets:0,
+        n_regex:0,
+        name:srv_id?srv_id:"",
+        public_port:0,
+        status:"🤔"
+    })
+
+    const [regexesList, setRegexesList] = useState<RegexFilter[]>([])
+
+    const navigator = useNavigate()
+
+    const updateInfo = async () => {
+        if (!srv_id) return
+        let error = false;
+        await serviceinfo(srv_id).then(res => {
+            setServiceInfo(res)
+        }).catch(
+          err =>{
+            errorNotify(`Updater for ${srv_id} service failed [General Info]!`, err.toString())
+            error = true;
+            navigator("/")
+        })
+        if (error) return
+        await serviceregexlist(srv_id).then(res => {
+            setRegexesList(res)
+        }).catch(
+          err =>{
+            errorNotify(`Updater for ${srv_id} service failed [Regex list]!`, err.toString())
+            error = true;
+        })
+    }
+  
+    useEffect(()=>{
+        updateInfo()
+        const updater = setInterval(updateInfo, update_freq)
+        return () => { clearInterval(updater) }
+    }, []);
+
+    const [deleteModal, setDeleteModal] = useState(false)
+    
+    return <>
+        <ServiceRow service={serviceInfo} additional_buttons={<>
+            <ActionIcon color="red" onClick={()=>setDeleteModal(true)} size="xl" radius="md" variant="filled"><BsTrashFill size={22} /></ActionIcon>
+            <Space w="md"/>
+        </>}></ServiceRow>
+        {regexesList.length === 0? 
+            <><Space h="xl" /> <Title className='center-flex' order={3}>No regex found for this service! Add one clicking the add button above</Title></>:
+            <Grid>
+                {regexesList.map( (regexInfo) => <Grid.Col key={regexInfo.id} span={6}><RegexView regexInfo={regexInfo}/></Grid.Col>)}
+            </Grid>
+        }
+        <YesNoModal
+            title='Are you sure to delete this service?'
+            description={`You are going to delete the service '${serviceInfo.id}', causing the stopping of the firewall and deleting all the regex associated. This will cause the shutdown of your service ⚠️!`}
+            onClose={()=>setDeleteModal(false)}
+            action={()=>console.log("Delete the service please!")}
+            opened={deleteModal}
+        />
+    </>
+}
+
+export default ServiceDetails;
--- a/firewall/frontend/src/react-app-env.d.ts
+++ b/firewall/frontend/src/react-app-env.d.ts
@@ -0,0 +1 @@
+/// <reference types="react-scripts" />
--- a/firewall/frontend/tsconfig.json
+++ b/firewall/frontend/tsconfig.json
@@ -0,0 +1,26 @@
+{
+  "compilerOptions": {
+    "target": "es5",
+    "lib": [
+      "dom",
+      "dom.iterable",
+      "esnext"
+    ],
+    "allowJs": true,
+    "skipLibCheck": true,
+    "esModuleInterop": true,
+    "allowSyntheticDefaultImports": true,
+    "strict": true,
+    "forceConsistentCasingInFileNames": true,
+    "noFallthroughCasesInSwitch": true,
+    "module": "esnext",
+    "moduleResolution": "node",
+    "resolveJsonModule": true,
+    "isolatedModules": true,
+    "noEmit": true,
+    "jsx": "react-jsx"
+  },
+  "include": [
+    "src"
+  ]
+}
--- a/firewall/requirements.txt
+++ b/firewall/requirements.txt
@@ -0,0 +1,8 @@
+click==8.1.3
+colorama==0.4.4
+Flask==2.1.2
+itsdangerous==2.1.2
+Jinja2==3.1.2
+MarkupSafe==2.1.1
+Werkzeug==2.1.2
+uwsgi