利用ip_conntrack表实现封ip的shell脚本,并有简单的web发布

ReadyGo!技术成就梦想网络搜索 efish 2008-2-24 2:50:23

#!/bin/bash
#
#---------------------------------------------------------------------------------------
#Scripname:killip,baseonip_conntrack,writebywwy.
#---------------------------------------------------------------------------------------

cpu=`sar-u11|awk"{print$7}"|tail-1`
#
while;do
echo"sheisrunning,sorry"
exit1
done
if;then
modprobeip_conntrack
fi

####################################
##----------------------functions-----------------------------##
####################################

functionmake_clr{
whilereadclr33;do
cat/tmp/tmp111.txt|grep$clr33>>/tmp/tmp33-3-clr.txt
done</tmp/tmp33-3.txt
whilereadclr22;do
cat/tmp/tmp111.txt|grep$clr22>>/tmp/tmp33-2-clr.txt
done</tmp/tmp33-2.txt
whilereadclr11;do
cat/tmp/tmp111.txt|grep$clr11>>/tmp/tmp33-1-clr.txt
done</tmp/tmp33-1.txt
}
functionclr_conns{
S_IP=$1
D_IP=$2
S_PORT=$3
D_PORT=$4
hping2$D_IP-R-s$S_PORT-p$D_PORT-a$S_IP-k-c1>/dev/null2>/dev/null&
}
functionkill(){
SLEEP_TIME=$1
CLR_LIST=$2
BLACK_LIST=$3
whilereadblackip;do
iptables-IFORWARD2-ieth0-s$blackip/32-jDROP
done<$BLACK_LIST
sleep$SLEEP_TIME
#-----------------------------------#
whilereadclr3;do
clr_conns$clr3
done<$CLR_LIST
#-----------------------------------#
sleep1
whilereadreblackip;do
iptables-DFORWARD-ieth0-s$reblackip/32-jDROP
done<$BLACK_LIST

}
#####################################
##---------------Tomakea"blacklist"----------------------##
#####################################

echo>/tmp/tmp11.txt
echo>/tmp/tmp111.txt
echo>/tmp/ip_conntrack.tmp
echo>/tmp/tmp33-3-clr.txt
echo>/tmp/tmp33-2-clr.txt
echo>/tmp/tmp33-1-clr.txt
echo>/tmp/tmp22-3.txt
echo>/tmp/tmp22-2.txt
echo>/tmp/tmp22-1.txt
echo>/tmp/tmp33-3.txt
echo>/tmp/tmp33-2.txt
echo>/tmp/tmp33-1.txt
if;then
mkdir/var/www/html/wwy/
mkdir/var/www/html/wwy/all
mkdir/var/www/html/wwy/drop
5B
touch/var/www/html/wwy/index.html
fi
#----------------------------------------------------------------------------#
echo-e"cp/proc/net/ip_conntrack/tmp/ip_conntrack.tmp......\c"
cp/proc/net/ip_conntrack/tmp/ip_conntrack.tmp
echo-e"done!\n"
sleep1
#----------------------------------------------------------------------------#
wc=`cat/tmp/ip_conntrack.tmp|grepESTABLISHED|awk-F="{print$2,$3,$4,$5}"|grep^172.|sort|awk"{print$1,$3,$5,$7}"|tee/tmp/tmp111.txt|awk"{print$1}"|uniq-c|tee/tmp/tmp11.txt|wc-l`
date=`date" m/dH:M"`
cpu2=`sar-u11|awk"{print$7}"|tail-1`
date2=`date" H"`
#----------------------------------------------------------------------------#
sleep1
#----------------------------------------------------------------------------#
#if&&
if
then
#------------------------------
awk"{$1}{if($1>30&&$1<50)print$2}"/tmp/tmp11.txt>/tmp/tmp22-1.txt
awk"{$1}{if($1>=50&&$1<100)print$2}"/tmp/tmp11.txt>/tmp/tmp22-2.txt
awk"{$1}{if($1>=100)print$2}"/tmp/tmp11.txt>/tmp/tmp22-3.txt
cut-c1-15/tmp/tmp22-1.txt>/tmp/tmp33-1.txt
cut-c1-15/tmp/tmp22-2.txt>/tmp/tmp33-2.txt
cut-c1-15/tmp/tmp22-3.txt>/tmp/tmp33-3.txt
wcblackip1=`cat/tmp/tmp33-1.txt|wc-l`
wcblackip2=`cat/tmp/tmp33-2.txt|wc-l`
wcblackip3=`cat/tmp/tmp33-3.txt|wc-l`

######################################
##----------------Tomakeaindex.html-----------------------##
######################################

echo"IfthetotalIPs>2500<fontcolor=\"#ff0000\">(total$wcat$date)ANDif:">/var/www/html/wwy/drop/index.html
echo"youconnect\">100\",youipwillbekilledin30min.">>/var/www/html/wwy/drop/index.html
echo"youconnect\"50-100\",youipwillbekilledin15min.">>/var/www/html/wwy/drop/index.html
echo"youconnect\"30-50\",youipwillbekilledin10min.">>/var/www/html/wwy/drop/index.html
echo"<hrcolor=\"#ff8000\">">>/var/www/html/wwy/drop/index.html
echo"<fontcolor=\"#ff0000\">TheseIPs(total$wcblackip3 $wcblackip2 $wcblackip1)werekilled,at<fontsize=5>$date<ahref=../all>(look-upallIPs)</a>">>/var/www/html/wwy/drop/index.html
awk"{$1}{if($1>=100)print$1,$2}"/tmp/tmp11.txt|sort-nr|awk"{print"""<fontcolor=\"#ff0000\">"$1"""\t",""$2"""\t""kill30min"""}">>/var/www/html/wwy/drop/index.html
awk"{$1}{if($1>=50&&$1<100)print$1,$2}"/tmp/tmp11.txt|sort-nr|awk"{print""$1"\t",""$2"""\t""kill15min"""}">>/var/www/html/wwy/drop/index.html
awk"{$1}{if($1>30&&$1<50)print$1,$2}"/tmp/tmp11.txt|sort-nr|awk"{print""$1"\t",""$2"""\t""kill10min"""}">>/var/www/html/wwy/drop/index.html
echo"Youcan\"ctrl F\"tofindyourip"sconnects.(total$wcIPsat$date)">/var/www/html/wwy/all/index.html
echo"<ahref=../drop><--back</a>">>/var/www/html/wwy/all/index.html
cat/tmp/tmp11.txt|sort-nr|awk"{print""$1"\t",$2"\t"""}">>/var/www/html/wwy/all/index.html

#####################################
##-----------------UseiptablestoDROP---------------------##
#####################################

make_clr
if;then
kill30m/tmp/tmp33-3-clr.txt/tmp/tmp33-3.txt&
sleep1s
fi
if;then
kill15m/tmp/tmp33-2-clr.txt/tmp/tmp33-2.txt&
sleep1s
fi
if;then
kill10m/tmp/tmp33-1-clr.txt/tmp/tmp33-1.txt&
sleep1s
fi

#-------------------------------
elif&&
then
whilereadclrall;do
clr_conns$clrall
done</tmp/tmp111.txt
echo"clrat$date">>/tmp/killip/tmp.

责任编辑: efish 参与评论查找更多：

相关文章

HowtoCreatingandBootingaNewKernelWithautoconfig HowtoCreatingandBootingaNewKernelWithautoconfig

批量添加用户批量添加用户

shell技巧 shell技巧

两个很详细的shell实例两个很详细的shell实例

从2.4到2.6内核发展中的改进从2.4到2.6内核发展中的改进

快速编辑Shell命令行快速编辑Shell命令行

如何在.cshrc中判断是否在loginshell中？如何在.cshrc中判断是否在loginshell中？

在Bourneshellscript里要怎么找出最后一个参数？在Bourneshellscript里要怎么找出最后一个参数？

如何让setuid的shellscript可以使用？如何让setuid的shellscript可以使用？

shell要如何分类呢？ shell要如何分类呢？

2秒记住本站域名

玩过泡泡龙吗？Readygo?Go! 再加上.Com.Cn的后缀，那就是大名小顶的ReadyGo.com.cn

利用ip_conntrack表实现封ip的shell脚本,并有简单的web发布

2秒记住本站域名

分类导航