[Nlnog] VIRBL update

Paul Wouters paul at xtdnet.nl
Mon Jan 10 15:08:17 UTC 2005


On Mon, 10 Jan 2005, Alex Bik wrote:

[VIRBL]

> Laat me maar ff weten wat jullie er van vinden.

Zolang de filenamen van de viri voor de sendmail access list maar < 1024 chars
blijven :)

ik gebruik dus:

#!/bin/sh

cd /etc/mail
wget http://virbl.bit.nl/virbl.dnsbl.bit.nl -O virbl-new.txt > /dev/null 2> /dev/null
cat virbl-new.txt | grep 'TXT' |grep -v virbl.dnsbl.bit.nl | sed 's/^\([0-9]*\)\.\([0-9]*\)\.\([0-9]*\)\.\([0-9]*\).*IN.*TXT    ./\4.\3.\2.\1 "550 Infected IP refused: /'> virbl.txt
cat virbl.txt access-base popauth >> access.virb
mv access.virb access
makemap -r hash access < access


Paul
-- 

"At best it is a theory, at worst a fantasy" -- Michael Crichton





More information about the NLNOG mailing list