PoshCode Archive  Artifact [3ab0d1348c]

Artifact 3ab0d1348c7d7043144a3b8ffce5bb53b011871140f3d7994bf83475b4649403:

• File Get-BogonList.ps1 — part of check-in [f725f9be72] at 2018-06-10 13:16:49 on branch trunk — Heres a function to quickly look up the latest version of the bogon list maintained by Team Cymru from within PowerShell. (user: Rich Kusak size: 5121)

# encoding: ascii
# api: powershell
# title: Get-BogonList
# description: Heres a function to quickly look up the latest version of the bogon list maintained by Team Cymru from within PowerShell.
# version: 1.3.1.0
# type: function
# author: Rich Kusak 
# license: CC0
# function: Get-BogonList
# x-poshcode-id: 2913
# x-archived: 2011-11-05T17:09:50
# x-published: 2011-08-14T07:33:00
#
#
function Get-BogonList {
<#
	.SYNOPSIS
		Gets the bogon list.
	
	.DESCRIPTION
		The Get-BogonList function retrieves the bogon prefix list maintained by Team Cymru.
		A bogon prefix is a route that should never appear in the Internet routing table.
		A packet routed over the public Internet (not including over VPNs or other tunnels) should never have a source address in a bogon range.
		These are commonly found as the source addresses of DDoS attacks.
		Bogons are defined as Martians (private and reserved addresses defined by RFC 1918 and RFC 5735) and netblocks that have not been allocated
		to a regional internet registry (RIR) by the Internet Assigned Numbers Authority. Fullbogons are a larger set which also includes IP space
		that has been allocated to an RIR, but not assigned by that RIR to an actual ISP or other end-user.
	
	.PARAMETER Aggregated
		Retrieves the aggreated traditional bogon list. By default the unaggregated list is retrieved.
	
	.PARAMETER FullBogons
		Retrieves the full bogon list.
	
	.PARAMETER IPVersion
		Specifies which IP version of the full bogon list will be retrieved. The FullBogons parameter is required.
		The default value is version 4.
		
	.INPUTS
		None
	
	.OUTPUTS
		PSObject
	
	.EXAMPLE
		Get-BogonList
		Retrieves the traditional unaggregated bogon list from Team Cymru.
		
	.EXAMPLE
		Get-BogonList -Verbose
		Retrieves the traditional unaggregated bogon list from Team Cymru with additional header information.
			
	.EXAMPLE
		Get-BogonList -Aggregated
		Retrieves the traditional aggregated bogon list from Team Cymru.
	
	.EXAMPLE
		Get-BogonList -FullBogons
		Retrieves the full IPv4 bogon list from Team Cymru.
	
	.EXAMPLE
		Get-BogonList -FullBogons -IPVersion 6
		Retrieves the full IPv6 bogon list from Team Cymru.

	.NOTES
		Name: Get-BogonList
		Author: Rich Kusak (rkusak@cbcag.edu)
		Created: 2010-01-31
		LastEdit: 2011-08-14 09:26
		Version: 1.3.1.0
		
		#Requires -Version 2.0
		
	.LINK
		http://www.team-cymru.org/Services/Bogons/

#>
	
	[CmdletBinding(DefaultParameterSetName='Traditional')]
	param (
		[Parameter(ParameterSetName='Traditional')]
		[switch]$Aggregated,
		
		[Parameter(ParameterSetName='Full')]
		[switch]$FullBogons,
		
		[Parameter(ParameterSetName='Full')]
		[ValidateSet(4,6)]
		[int]$IPVersion = 4
	)
	
	# Create a web client object
	$webClient = New-Object System.Net.WebClient
	
	if ($psCmdlet.ParameterSetName -eq 'Traditional') {
		$referencePage = $webClient.DownloadString('http://www.team-cymru.org/Services/Bogons/')

		$traditionalUpdated = [regex]::Match($referencePage, 'Updated:.*(\d{2}\s\w+\s\d{4})', 'IgnoreCase').Groups[1].Value
		
		$currentVersion = [regex]::Match($referencePage, 'version:.*(\d+\.\d+)', 'IgnoreCase').Groups[1].Value
		
		if ($PSBoundParameters['Verbose']) {
			# Display title, update, and version information
			Write-Output 'Team Cymru Traditional Bogon List'
			'Updated: {0}' -f $traditionalUpdated
			'Current version: {0}' -f $currentVersion
		}
		
		# Retrieve and display the aggregated bogon list
		if ($Aggregated) {
			foreach ($bogon in $webClient.DownloadString('http://www.team-cymru.org/Services/Bogons/bogon-bn-agg.txt') -split "`n") {
				New-Object PSObject -Property @{'Aggregated' = $bogon}
			}

		# Retrieve and display the unaggregated bogon list
		} else {
			foreach ($bogon in $webClient.DownloadString('http://www.team-cymru.org/Services/Bogons/bogon-bn-nonagg.txt') -split "`n") {
				New-Object PSObject -Property @{'Unaggregated' = $bogon}
			}
		}
	} # if ($psCmdlet.ParameterSetName -eq 'Traditional')
	
	if ($psCmdlet.ParameterSetName -eq 'Full') {
		if (-not $FullBogons) {
			return Write-Error 'The FullBogons parameter is required to set the IPVersion.'
		}
		
		switch ($IPVersion) {
			4 {
				$bogons = $webClient.DownloadString('http://www.team-cymru.org/Services/Bogons/fullbogons-ipv4.txt') -split "`n"
				$propertyName = 'IPv4FullBogons'
				break
			}
			6 {
				$bogons = $webClient.DownloadString('http://www.team-cymru.org/Services/Bogons/fullbogons-ipv6.txt') -split "`n"
				$propertyName = 'IPv6FullBogons'
				break
			}
		}
		
		$fullUpdated = [regex]::Match($bogons[0], '\(.+\)').Value.Trim('()')
		
		if ($PSBoundParameters['Verbose']) {
			# Display title and update information
			Write-Output 'Team Cymru Full Bogon List'
			'Updated: {0}' -f $fullUpdated
		}
		
		# Create full bogon list output object
		foreach ($bogon in $bogons -match '^\d') {
			New-Object PSObject -Property @{$propertyName = $bogon}
		}
	} # if ($psCmdlet.ParameterSetName -eq 'Full')
} # function Get-BogonList