859
edits
Changes
Jump to navigation
Jump to search
Line 139:
Line 139: − + + − + − + − + − foreach my $host ( split( ',', $DenyHosts ) ) {+ − $OUT .= "\n";+ − $OUT .= " # Simple IP block for riff raff\n\n";+ − if ( $logging eq 'enabled' ) {+ − $OUT .= " /sbin/iptables -A INPUT -s $host -j denylog\n";+ − }+ − else {+ − $OUT .= " /sbin/iptables -A INPUT -s $host -j DROP\n";+ + + + + + + + + +
→Automated method
{
{
use esmith::ConfigDB;
use esmith::ConfigDB;
my $db = esmith::ConfigDB->open_ro || die 'Could not open configuration database';
my $db = esmith::ConfigDB->open_ro
|| die 'Could not open configuration database';
# Completely block any riff raff
# Completely block any riff raff
if ( ( my $status = $db->get_prop( 'ipblock', 'status' ) ) eq 'enabled' ) {
if ( ( my $status = $db->get_prop( 'ipblock', 'status' ) ) eq 'enabled' )
my $DenyHosts = $db->get_prop( 'ipblock', 'DenyHosts' ) || '';
{
my $logging = $db->get_prop( 'ipblock', 'logging' ) || 'disabled';
my $DenyHosts = $db->get_prop( 'ipblock', 'DenyHosts' ) || <nowiki>''</nowiki>'';
if ( $DenyHosts ne <nowiki>''</nowiki> ) {
my $logging = $db->get_prop( 'ipblock', 'logging' ) || 'disabled';
foreach my $host ( split( ',', $DenyHosts ) ) {
$OUT .= "\n";
$OUT .= "# Simple ipblock for riff raff\n\n";
if ( $logging eq 'enabled' ) {
$OUT .= "/sbin/iptables -A INPUT -s $host -j denylog\n";
}
else {
$OUT .= "/sbin/iptables -A INPUT -s $host -j DROP\n";
}
}
}
$OUT .= "\n";
$OUT .= "\n";
}
}
else {
$OUT .= "# ipblock no DenyHosts set\n";
}
}
else {
$OUT .= "# ipblock disabled\n";
}
}
}
}