[OT] Re: kill ip from bootnets and zombi (shell script)

2009-05-19 Thread lst_hoe02
Zitat von Andreas Schuldei : * Julio Cesar Covolato (ju...@psi.com.br) [090514 07:26]: Hi! I made a litle shell script to stoping bootnets and zombis, and I want know what you think about it. The purpose is drop via iptables hosts that are rejected several times in a litle space of time,

Re: kill ip from bootnets and zombi (shell script)

2009-05-18 Thread Benny Pedersen
On Fri, May 15, 2009 09:24, Corey Chandler wrote: > fail2ban interfaces with iptables. > FreeBSD uses pf. and fail2ban works with pf also it just need another action.conf to pf > That little bit of trivia aside, the firewall is a kernel builtin; it's > not a daemon. Perhaps that makes a differe

Re: kill ip from bootnets and zombi (shell script)

2009-05-18 Thread Benny Pedersen
On Thu, May 14, 2009 07:23, Julio Cesar Covolato wrote: > Download pf-ip-killer : > http://psi.com.br/~julio/postfix/pf-ip-killer.tgz nice script but have you tryed http://www.fail2ban.org/wiki/index.php/Postfix ? here i hook fail2ban into shorewall allow|drop|reject that way i do not mess wit

Re: kill ip from bootnets and zombi (shell script)

2009-05-15 Thread Wietse Venema
LuKreme: > On 15-May-2009, at 04:18, Wietse Venema wrote: > > LuKreme: > >> On 14-May-2009, at 17:29, mouss wrote: > >>> LuKreme a _crit : > I think I have it all sussed out, except there doesn_t seem to be > an > init script installed under FreeBSD. > >> > >>> because fail2ban wor

Re: kill ip from bootnets and zombi (shell script)

2009-05-15 Thread LuKreme
On 15-May-2009, at 04:18, Wietse Venema wrote: LuKreme: On 14-May-2009, at 17:29, mouss wrote: LuKreme a _crit : I think I have it all sussed out, except there doesn_t seem to be an init script installed under FreeBSD. because fail2ban works on freebsd? I meant a script to start fail2ba

Re: kill ip from bootnets and zombi (shell script)

2009-05-15 Thread Sahil Tandon
On Fri, 15 May 2009, LuKreme wrote: > On 14-May-2009, at 17:29, mouss wrote: >> LuKreme a écrit : >>> I think I have it all sussed out, except there doesn’t seem to be an >>> init script installed under FreeBSD. > >> because fail2ban works on freebsd? > > I meant a script to start fail2ban, like i

Re: kill ip from bootnets and zombi (shell script)

2009-05-15 Thread Wietse Venema
LuKreme: > On 14-May-2009, at 17:29, mouss wrote: > > LuKreme a _crit : > >> I think I have it all sussed out, except there doesn_t seem to be an > >> init script installed under FreeBSD. > > > because fail2ban works on freebsd? > > I meant a script to start fail2ban, like in rc.d (init.d in Linu

Re: kill ip from bootnets and zombi (shell script)

2009-05-15 Thread LuKreme
On May 15, 2009, at 1:24, Corey Chandler wrote: LuKreme wrote: On 14-May-2009, at 17:29, mouss wrote: LuKreme a écrit : I think I have it all sussed out, except there doesn’t seem to be an init script installed under FreeBSD. because fail2ban works on freebsd? I meant a script to star

Re: kill ip from bootnets and zombi (shell script)

2009-05-15 Thread Corey Chandler
LuKreme wrote: On 14-May-2009, at 17:29, mouss wrote: LuKreme a écrit : I think I have it all sussed out, except there doesn’t seem to be an init script installed under FreeBSD. because fail2ban works on freebsd? I meant a script to start fail2ban, like in rc.d (init.d in Linux). Am I the

Re: kill ip from bootnets and zombi (shell script)

2009-05-14 Thread LuKreme
On 14-May-2009, at 17:29, mouss wrote: LuKreme a écrit : I think I have it all sussed out, except there doesn’t seem to be an init script installed under FreeBSD. because fail2ban works on freebsd? I meant a script to start fail2ban, like in rc.d (init.d in Linux). Am I the only person ca

Re: kill ip from bootnets and zombi (shell script)

2009-05-14 Thread mouss
LuKreme a écrit : > On 14-May-2009, at 01:39, Bill Landry wrote: >> Have you taken a look at fail2ban?: >> >> http://www.fail2ban.org >> >> It already does this using python, run in daemon mode, and can support >> any application that writes to a log file. > > > Looking at that now. Looks neat

Re: kill ip from bootnets and zombi (shell script)

2009-05-14 Thread LuKreme
On 14-May-2009, at 01:39, Bill Landry wrote: Have you taken a look at fail2ban?: http://www.fail2ban.org It already does this using python, run in daemon mode, and can support any application that writes to a log file. Looking at that now. Looks neat, but I wish there was a HOWTO readme

Re: kill ip from bootnets and zombi (shell script)

2009-05-14 Thread Bill Landry
Julio Cesar Covolato wrote: > Hi! > > I made a litle shell script to stoping bootnets and zombis, and I want > know what you think about it. > > The purpose is drop via iptables hosts that are rejected several > times in a litle space of time, reading the log generated by postfix. > > Teste

Re: kill ip from bootnets and zombi (shell script)

2009-05-13 Thread Andreas Schuldei
* Julio Cesar Covolato (ju...@psi.com.br) [090514 07:26]: > Hi! > > I made a litle shell script to stoping bootnets and zombis, and I want > know what you think about it. > > The purpose is drop via iptables hosts that are rejected several > times in a litle space of time, reading the log

Re: kill ip from bootnets and zombi (shell script)

2009-05-13 Thread Julio Cesar Covolato
Hi! Sorry! You must configure your path to postfix mail log and iptables. Edit the script pf-ip-killer and set the variables to your enviroment. []'s - _Julio Cesar Covolato 0v0 /(_)\ F: 55-11-3129-3366 ^ ^ PSI INTERNET --

kill ip from bootnets and zombi (shell script)

2009-05-13 Thread Julio Cesar Covolato
Hi! I made a litle shell script to stoping bootnets and zombis, and I want know what you think about it. The purpose is drop via iptables hosts that are rejected several times in a litle space of time, reading the log generated by postfix. Tested in a Linux box. The script is so poor,