Rozdiely pre scripts/shell/firewall/fw-universal.sh medzi verziami 2.21 a 2.22
| verzia 2.21, 2005/03/06 19:18:04 |
verzia 2.22, 2005/03/16 13:53:36 |
|
|
| # Licensed under terms of GNU General Public License. |
# Licensed under terms of GNU General Public License. |
| # All rights reserved. |
# All rights reserved. |
| # |
# |
| # $Platon: scripts/shell/firewall/fw-universal.sh,v 2.20 2005/03/04 23:53:14 rajo Exp $ |
# $Platon: scripts/shell/firewall/fw-universal.sh,v 2.21 2005/03/06 19:18:04 rajo Exp $ |
| # |
# |
| # Changelog: |
# Changelog: |
| # 2003-10-24 - created |
# 2003-10-24 - created |
|
|
| |
|
| } # }}} |
} # }}} |
| |
|
| |
bann_ip_adresses() |
| |
{ # {{{ |
| |
# |
| |
# This feature has been developed for following reason: |
| |
# UbiCrawler spam our website with many requests (they are duplicit requests of the same page!) |
| |
# And this web robot doesn't accept HTTP META tags (http://www.robotstxt.org/wc/faq.html#extension) |
| |
# |
| |
# Bann them too! |
| |
# |
| |
#IP address is: 146.48.97.11 146.48.97.13 |
| |
# User Agent: "UbiCrawler/v0.4beta (http://ubi.iit.cnr.it/projects/ubicrawler/)" |
| |
# |
| |
if [ ! -z "$BANNED_IP" ]; then |
| |
echo -en "Dropping ALL packets from IP:" |
| |
for banned_ip in $BANNED_IP; do |
| |
echo -en " $banned_ip" |
| |
$IPTABLES -A INPUT -s $banned_ip -j DROP |
| |
$IPTABLES -A FORWARD -s $banned_ip -j DROP |
| |
done |
| |
echo " done." |
| |
fi |
| |
} # }}} |
| |
|
| allow_accept_all() |
allow_accept_all() |
| { # {{{ |
{ # {{{ |
| if [ ! -z "$IFACE_ACCEPT_ALL" ]; then |
if [ ! -z "$IFACE_ACCEPT_ALL" ]; then |
|
|
| # |
# |
| # (un)commnet next lines as needed |
# (un)commnet next lines as needed |
| # |
# |
| |
bann_ip_adresses |
| allow_accept_all |
allow_accept_all |
| nmap_scan_filter |
nmap_scan_filter |
| invalid_packet_filter |
invalid_packet_filter |
Platon Group <platon@platon.sk> http://platon.sk/
|
|