the permanent TODO

January 18, 2010

dumb apache2 iptables security

Filed under: tech — Tags: , , — {Francisco,François} Varas @ 9:00 am

This is an aggressive script that will -j DROP anything that moves.

This is the regexp list (noisily named “regexp-list.ib” in my filesystem):

#file containing idiotblocker's database
w00tw00t
php.my.admin

This is the script:

for i in `grep -iv ^# regexp-list.ib`
do for a in `grep -i $i /var/log/apache2/access.log | awk -F'-' '{print $1}' |sort -n | uniq`
do echo "$a found and screwed with iptables"
iptables -A INPUT -s $a -j DROP
done
done

Powered by WordPress