wrapper to force fail2bans for dodgy CONNECT froms that are more than 100 times - not sure I use this anymore
This commit is contained in:
5
ban-mail-abusers
Executable file
5
ban-mail-abusers
Executable file
@@ -0,0 +1,5 @@
|
||||
#!/bin/bash
|
||||
|
||||
for i in `docker logs mail | grep "CONNECT from" | awk -F'[' '{print $3}' | cut -f1 -d']' | sort | uniq -c | sort -n | awk '{ if ( $1 > 100) print $2 }'`; do
|
||||
echo docker exec -it mail fail2ban ban $i;
|
||||
done
|
||||
Reference in New Issue
Block a user