自动封杀非法连接http的IP
Submitted by on 2008, March 12, 6:16 PM. 技术
vi /kevin/fuckgo
shell代码如下:
#! /bin/bash
fuck_who()
{
netstat -an|grep -i 80| awk '{print $5}'| cut -d':' -f4| sort |uniq -c| awk '{if ($1 >= 15) print $1"="$2}'
}
for _un in $(fuck_who)
do
if [ $(echo $_un|awk -F'=' '{print $1;}') -ge 15 ]
then
iptables -I INPUT -s $(echo $_un|gawk -F'=' '{print $2;}') -j DROP
fi
done
crontab -e
00-59/1 * * * * root /kevin/fuckgo
/etc/rc.d/init.d/crond restart
这样就增加了自动封杀非法连接http的IP 规则是超过15个的连接就做封IP处理
moqiruyi
2008, March 14, 2:16 AM
1