Julio Cesar Covolato wrote: > Hi! > > I made a litle shell script to stoping bootnets and zombis, and I want > know what you think about it. > > The purpose is drop via iptables hosts that are rejected several > times in a litle space of time, reading the log generated by postfix. > > Tested in a Linux box. > > The script is so poor, but it's functional! I think that using perl > will be very better ( Anyone? I'm very bad in perl, sorry!). > > Just download, untar, configure (optional), and run it by comand line > for a few minutes, and see the show!!!!!!! > > The idea is block via firewall the connections that is garbage. Test it!! > > Download pf-ip-killer : > > http://psi.com.br/~julio/postfix/pf-ip-killer.tgz
Have you taken a look at fail2ban?: http://www.fail2ban.org It already does this using python, run in daemon mode, and can support any application that writes to a log file. Bill