This is an aggressive script that will -j DROP anything that moves.
This is the regexp list (noisily named “regexp-list.ib” in my filesystem):
#file containing idiotblocker's database
w00tw00t
php.my.admin
This is the script:
for i in `grep -iv ^# regexp-list.ib`
do for a in `grep -i $i /var/log/apache2/access.log | awk -F'-' '{print $1}' |sort -n | uniq`
do echo "$a found and screwed with iptables"
iptables -A INPUT -s $a -j DROP
done
done
[...] Read more: dumb apache2 iptables security « the permanent TODO [...]
Pingback by dumb apache2 iptables security « the permanent TODO | Coder Online — January 18, 2010 @ 2:57 pm