利用ip_conntrack表实现封ip的shell脚本,并有简单的web发布

来源： 作者： 时间：2007-01-28 Tag： 点击：

#if [ "$wc" -gt 2500 ] && [ "$date2" -gt 10 ]
if [ "$wc" -ge 0 ]
then
#------------------------------
 awk '{$1}{if ($1>30 && $1<50) print $2}' /tmp/tmp11.txt > /tmp/tmp22-1.txt
 awk '{$1}{if ($1>=50 && $1<100) print $2}' /tmp/tmp11.txt > /tmp/tmp22-2.txt
 awk '{$1}{if ($1>=100) print $2}' /tmp/tmp11.txt > /tmp/tmp22-3.txt
 cut -c1-15 /tmp/tmp22-1.txt > /tmp/tmp33-1.txt
 cut -c1-15 /tmp/tmp22-2.txt > /tmp/tmp33-2.txt
 cut -c1-15 /tmp/tmp22-3.txt > /tmp/tmp33-3.txt
 wcblackip1=`cat /tmp/tmp33-1.txt | wc -l`
 wcblackip2=`cat /tmp/tmp33-2.txt | wc -l`
 wcblackip3=`cat /tmp/tmp33-3.txt | wc -l`

######################################
##---------------- To make a index.html -----------------------##
######################################

echo "If the total IPs >2500 (total $wc at $date) AND if:" > /var/www/html/wwy/drop/index.html
 echo "you connect \">100\", you ip will be killed in 30min." >>/var/www/html/wwy/drop/index.html
 echo "you connect \"50-100\", you ip will be killed in 15min." >>/var/www/html/wwy/drop/index.html
 echo "you connect \"30-50\", you ip will be killed in 10min." >>/var/www/html/wwy/drop/index.html
 echo "<hr color=\"#ff8000\">" >> /var/www/html/wwy/drop/index.html
 echo "These IPs (total $wcblackip3 + $wcblackip2 + $wcblackip1) were killed, at $date <a href=../all>(look-up all IPs)</a>" >> /var/www/html/wwy/drop/index.html
 awk '{$1}{if ($1>=100) print $1, $2}' /tmp/tmp11.txt|sort -nr|awk '{print """"$1"""\t",""$2"""\t""kill 30min"""}' >> /var/www/html/wwy/drop/index.html
 awk '{$1}{if ($1>=50 && $1<100) print $1, $2}' /tmp/tmp11.txt|sort -nr|awk '{print ""$1"\t",""$2"""\t""kill 15min"""}' >> /var/www/html/wwy/drop/index.html
 awk '{$1}{if ($1>30 && $1<50) print $1, $2}' /tmp/tmp11.txt|sort -nr|awk '{print ""$1"\t",""$2"""\t""kill 10min"""}' >> /var/www/html/wwy/drop/index.html
 echo "You can \"ctrl + F\" to find your ip's connects.(total $wc IPs at $date)" > /var/www/html/wwy/all/index.html
 echo "<a href=../drop> <-- back </a>" >> /var/www/html/wwy/all/index.html
 cat /tmp/tmp11.txt | sort -nr | awk '{print ""$1"\t",$2"\t"""}' >> /var/www/html/wwy/all/index.html

#####################################
##----------------- Use iptables to DROP ---------------------##
#####################################

        make_clr
        if [ -s /tmp/tmp33-3.txt ];then
                kill 30m /tmp/tmp33-3-clr.txt /tmp/tmp33-3.txt &
                sleep 1s
        fi
        if [ -s /tmp/tmp33-2.txt ];then
                kill 15m /tmp/tmp33-2-clr.txt /tmp/tmp33-2.txt &
                sleep 1s
        fi
        if [ -s /tmp/tmp33-1.txt ];then
                kill 10m /tmp/tmp33-1-clr.txt /tmp/tmp33-1.txt &
                sleep 1s
        fi

#-------------------------------
elif [ "$date2" -lt 5 ] && [ "$date2" -gt 3 ]
then
 while read clrall;do
 clr_conns $clrall
 done < /tmp/tmp111.txt
 echo "clr at $date " >> /tmp/killip/tmp.log.txt
fi

#####################################
##------------------- make system log ------------------------##
#####################################
if [ ! -e /tmp/killip/tmp.log.txt ]; then
mkdir /tmp/killip
touch /tmp/killip/tmp.log.txt
fi
echo "$wc $date $cpu $cpu2 $wcblackip3 + $wcblackip2 + $wcblackip1" >> /tmp/killip/tmp.log.txt

[收藏] [推荐] [评论] [打印] [关闭]

顶一下

上一篇：Shell初学者的入门知识
下一篇：30分钟搞定BASH脚本编程！

最新评论共有 4 位网友发表了评论

查看所有评论

发表评论

栏目列表