Monday, June 16, 2025

mail.blacklist.sh

~/bin# cat mail.blacklist.sh 
#
#   Blacklist mail spammers
#
FILE="/var/log/maillog"
FILENEW="/tmp/mail.blacklist.new"
FILERUN="/tmp/mail.blacklist.run"
FILETMP1="/tmp/mail.blacklist.tmp"
FILETMP2="/tmp/mail.blacklist.tmp2"

DEVNULL="/dev/null"
DATE=`/usr/bin/date +"%m.%d.%y.%H.%M - "`

AWK="/usr/bin/awk"
CAT="/usr/bin/cat"
CHMOD="/usr/bin/chmod"
DIFF="/usr/bin/diff --suppress-common-lines"
ECHO="/usr/bin/echo"
GREP="/usr/bin/grep"
RM="/usr/bin/rm"
SED="/usr/bin/sed"
SORT="/usr/bin/sort"
UNIQ="/usr/bin/uniq"
WC="/usr/bin/wc -l"

$GREP "lost input channel" $FILE | $AWK 'BEGIN{FS="["} {print $3}' | $AWK 'BEGIN{FS="]"} {print "ip route add blackhole " $1}' > $FILENEW
$CAT $FILERUN | $SORT | $UNIQ > $FILETMP1
$CAT $FILENEW | $SORT | $UNIQ > $FILETMP2
$CAT $FILETMP1 $FILETMP2 | $SORT | $UNIQ > $FILERUN
$CHMOD 755 $FILERUN
$FILERUN &> $DEVNULL
$ECHO -n $DATE; $WC $FILERUN

mail.blacklist.sh

~/bin# cat ssh.blacklist.sh
#
# Blacklist SSH Rogues
#
FILE=”/var/log/iptables.log”
FILENEW=”/tmp/ssh.blacklist.new”
FILERUN=”/tmp/ssh.blacklist.run”
FILETMP1=”/tmp/ssh.blacklist.tmp”
FILETMP2=”/tmp/ssh.blacklist.tmp2”

DEVNULL=”/dev/null”
DATE=`/usr/bin/date +”%m.%d.%y.%H.%M - “`

AWK=”/usr/bin/awk”
CAT=”/usr/bin/cat”
CHMOD=”/usr/bin/chmod”
ECHO=”/usr/bin/echo”
GREP=”/usr/bin/grep”
RM=”/usr/bin/rm”
SORT=”/usr/bin/sort”
UNIQ=”/usr/bin/uniq”
WC=”/usr/bin/wc -l”

$CAT $FILE | $GREP -v died | $GREP -v Invalid | $GREP SSH | $AWK -F”=” ‘{print $5}’ | $AWK ‘{print “ip route add blackhole ” $1}’ > $FILENEW
$CAT $FILERUN | $SORT | $UNIQ > $FILETMP1
$CAT $FILENEW | $SORT | $UNIQ > $FILETMP2
$CAT $FILETMP1 $FILETMP2 | $SORT | $UNIQ > $FILERUN
$CHMOD 755 $FILERUN
$FILERUN &> $DEVNULL
$ECHO -n $DATE; $WC $FILERUN
[/quote]