paramah/ossec-blacklist
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

load URLs from a config file

Browse Source
This commit is contained in:
Pawel Krawczyk 2015-07-12 10:33:54 +01:00
parent f3443ae787
commit 9d483af7bb
1 changed files with 28 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

38
blacklist.sh
View File

@ -4,20 +4,38 @@
# Pawel Krawczyk 2014-2015 # Pawel Krawczyk 2014-2015
# documentation https://github.com/kravietz/blacklist-scripts # documentation https://github.com/kravietz/blacklist-scripts
# Emerging Threats lists offensive IPs such as botnet command servers # try to load config file
urls="http://rules.emergingthreats.net/fwrules/emerging-Block-IPs.txt" # it should contain one blacklist URL per line
# URLs for further blocklists are appeneded below using the typical config_file="/etc/ip-blacklist.conf"
# shell syntax: "$urls new_url" if [ -f "${config_file}" ]; then
exec <"${config_file}"
read line
while [ "$line" ]; do
if ! echo "$line" | egrep -q '(^#|^$)'; then
urls="${urls} $line"
fi
read line
done
else
# if no config file is available, load default set of blacklists
# Blocklist.de collects reports from fail2ban probes, listing password brute-forces, scanners and other offenders # Emerging Threats lists offensive IPs such as botnet command servers
urls="$urls https://www.blocklist.de/downloads/export-ips_all.txt" urls="http://rules.emergingthreats.net/fwrules/emerging-Block-IPs.txt"
# badips.com, from score 2 up # URLs for further blocklists are appeneded below using the typical
urls="$urls http://www.badips.com/get/list/ssh/2" # shell syntax: "$urls new_url"
# Blocklist.de collects reports from fail2ban probes, listing password brute-forces, scanners and other offenders
urls="$urls https://www.blocklist.de/downloads/export-ips_all.txt"
# badips.com, from score 2 up
urls="$urls http://www.badips.com/get/list/ssh/2"
# iblocklist.com is also supported
# urls="$urls http://list.iblocklist.com/?list=srzondksmjuwsvmgdbhi&fileformat=p2p&archiveformat=gz&username=USERNAMEx$&pin=PIN"
fi
# iblocklist.com is also supported
# urls="$urls http://list.iblocklist.com/?list=srzondksmjuwsvmgdbhi&fileformat=p2p&archiveformat=gz&username=USERNAMEx$&pin=PIN"
# This is how it will look like on the server # This is how it will look like on the server