Re: [cobalt-users] script to use log DENY to compile hosts.deny?

[Gerald Waugh <gwaugh@xxxxxxxxxxxxxxxxxxxxxxx>]

On Tue, 30 Jul 2002, Glenn Parsons wrote:

> I am on two pipes to the Internet and one of them has a whole lot of ugly
> lurkers out there looking for something to trash. Most of my external
> traffic sits on the cleaner pipe,  but I have two eth interfaces that take
> a lot of abuse in a day.
>
> Has anyone written a script to automatically add these bad IPs into a
> hosts.deny? I'm talking about parsing lines from logsentry to extract the
> IPs and insert in a hosts.deny. Any downside to doing this?
>
> I'm going to have to do it myself. Will notify if I have to implement
> myself and post this somewhere.
>
There is a guy on the isp-linux list that wrote an attack-monitor.
I forgot the URL, I think I have the script, but have to find it also.
Maybe if you search the isp-linux archives
If I find the stuff, I'll post it

--
Gerald Waugh <gwaugh@xxxxxxxxxxxxxxxxxxxxxxx>
http://frontstreetnetworks.com | Website Hosts & SOHO Networks
229 Front Street, Ste.#C, New Haven, CT. 06513 United States
voice +1 203-785-0699 | fax +1 203-785-1787