paramah/ossec-blacklist
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

mute warning messages when set already exists

Browse Source
This commit is contained in:
Pawel Krawczyk
2014-12-30 16:08:32 +00:00
parent 2b119b9b22
commit e974b64c5a
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
blacklist.sh
View File

@@ -79,7 +79,7 @@ for url in $urls; do
echo "destroy ${tmp_set_name}" >>"${new_set_file}" # remove old set echo "destroy ${tmp_set_name}" >>"${new_set_file}" # remove old set
# actually execute the set update # actually execute the set update
ipset restore < "${new_set_file}" ipset -! -q restore < "${new_set_file}"
iptables -A ${blocklist_chain_name} -m set --match-set "${set_name}" src,dst -m limit --limit 10/minute -j LOG --log-prefix "BLOCK ${set_name} " iptables -A ${blocklist_chain_name} -m set --match-set "${set_name}" src,dst -m limit --limit 10/minute -j LOG --log-prefix "BLOCK ${set_name} "
iptables -A ${blocklist_chain_name} -m set --match-set "${set_name}" src,dst -j DROP iptables -A ${blocklist_chain_name} -m set --match-set "${set_name}" src,dst -j DROP