[Nlnog] VIRBL update
Paul Wouters
paul at xtdnet.nl
Mon Jan 10 15:08:17 UTC 2005
On Mon, 10 Jan 2005, Alex Bik wrote:
[VIRBL]
> Laat me maar ff weten wat jullie er van vinden.
Zolang de filenamen van de viri voor de sendmail access list maar < 1024 chars
blijven :)
ik gebruik dus:
#!/bin/sh
cd /etc/mail
wget http://virbl.bit.nl/virbl.dnsbl.bit.nl -O virbl-new.txt > /dev/null 2> /dev/null
cat virbl-new.txt | grep 'TXT' |grep -v virbl.dnsbl.bit.nl | sed 's/^\([0-9]*\)\.\([0-9]*\)\.\([0-9]*\)\.\([0-9]*\).*IN.*TXT ./\4.\3.\2.\1 "550 Infected IP refused: /'> virbl.txt
cat virbl.txt access-base popauth >> access.virb
mv access.virb access
makemap -r hash access < access
Paul
--
"At best it is a theory, at worst a fantasy" -- Michael Crichton
More information about the NLNOG
mailing list