Started blocker.py to remove perl skript

diff --git a/config/syslog-ng/blocker.pl b/config/syslog-ng/blocker.pl
deleted file mode 100644 (file)
index d3dc609..0000000
--- a/config/syslog-ng/blocker.pl
+++ /dev/null
@@ -1,11 +0,0 @@
-#!/usr/bin/perl
-# /usr/local/sbin/blocker.pl
-
-# Later we may increase the recent list
-# modprobe ipt_recent ip_list_tot=1000
-
-while (<>) {
-       if ( /.*[1:1810:12].* -> ((d{1,3}.){3}d{1,3})/ )/ ) {
-               system "echo $1 > /proc/net/ipt_recent/BLOCK";
-       }
-}
\ No newline at end of file

diff --git a/config/syslog-ng/blocker.py b/config/syslog-ng/blocker.py
new file mode 100644 (file)
index 0000000..ad4b744
--- /dev/null
+++ b/config/syslog-ng/blocker.py
@@ -0,0 +1,14 @@
+#!/usr/bin/python
+
+import sys,os,re
+#print sys.argv
+
+if len(sys.argv) < 2:
+       print 'Es wurden keine Parameter uebergeben.'
+       sys.exit()
+
+#os.system('modprobe ipt_recent ip_list_tot=1000')
+
+m = re.findall(r"[1-9]{1,1}[0-9]{0,2}\.[1-9]{1,1}[0-9]{0,2}\.[1-9]{1,1}[0-9]{0,2}\.[1-9]{1,1}[0-9]{0,2}", sys.argv[1])
+#print m
+os.system('echo %s > /proc/net/ipt_recent/BLOCK' % m[0])

diff --git a/config/syslog-ng/syslog-ng.conf b/config/syslog-ng/syslog-ng.conf
index e3cca3d3f7a9cac6c8f757f58b7b5cbc6275d8df..a151cfd466ef7518298807d05b743386e2f61a45 100644 (file)
--- a/config/syslog-ng/syslog-ng.conf
+++ b/config/syslog-ng/syslog-ng.conf
@@ -30,7 +30,7 @@ destination messages { file("/var/log/messages"); };
 destination console { usertty("root"); };
 destination console_all { file("/dev/tty12"); };
 
-destination ids {program("/usr/local/sbin/blocker.pl"); );
+destination ids {program("/usr/sbin/blocker.py"); );
 
 #destination loghost { tcp("10.0.0.1" port(514)); };
 
@@ -82,4 +82,4 @@ log { source(src); destination(console_all); };
 #log { source(src); destination(all); };
 
 log { source(src); filter(f_ids); destination(ids); };
-log { source(src); filter(f_ssh); destination(ids); };
\ No newline at end of file
+log { source(src); filter(f_ssh); destination(ids); };

diff --git a/lfs/syslog-ng b/lfs/syslog-ng
index 31e24c600073add08076e9b1a648da0e86cdfd85..3f23a785aaab23951d344478893ee1d3de6fe87a 100644 (file)
--- a/lfs/syslog-ng
+++ b/lfs/syslog-ng
@@ -92,8 +92,8 @@ $(OBJECT): $(objects)
        -mkdir -pv /etc/$(PKG_NAME)
        cp -vf $(DIR_CONF)/$(PKG_NAME)/$(PKG_NAME).conf \
                /etc/$(PKG_NAME)/$(PKG_NAME).conf
-       cp -vf $(DIR_CONF)/$(PKG_NAME)/blocker.pl \
-               /usr/local/sbin/blocker.pl
+       cp -vf $(DIR_CONF)/$(PKG_NAME)/blocker.py \
+               /usr/sbin/blocker.py
 
        @rm -rf $(DIR_APP)
        @$(POSTBUILD)