ipaddress blacklist tools
Programs)
1:name2ip version 1.0 (written in C)
name2ip is a program that translates a network-hostname to the ipaddress.
2:mergblk version 0.1 (written in C)
mergblk is a program that merges blacklists.
(sort,check-duplication,cut-comment)
3:mk_black.lua version 0.1 (written in Lua)
mk_black.lua is a lua script that abstracts black-ipaddresses from log_files.
Requirement)
A:Lua (version 5.2.x)
B:Penlight (Lua Library)
C:lfs (Lua Library luafilesystem)
A)Penlight
ex)
sudo cp -r lua/pl /usr/local/share/lua/5.2/
B)lfs (LuaFileSystem)
edit config
make; sudo make install
Install)
tar xvf blacklisttools-1.0.tar.gz
cd blacklisttools-1.0
make
sudo make install
Usage)
1:name2ip
name2ip network-hostname1 network-hostname2 ...
name2ip www.kernel.org www.gnu.org
149.20.4.69 # www.kernel.org
208.118.235.148 # www.gnu.org
name2ip -o outfile name1 name2 ...
name2ip -i inputfile -o outfile -e errfile
name2ip -o outfile -e errfile name1 name2 ...
2:mergblk
mergblk -o Blacklist.txt Blacklists/Block-IPs.txt Blacklists/Blocklist1.txt
3:mk_black.lua
mk_black.lua -m from -o blacklist.txt kernel_log1.log kernel_log2.log
mk_black.lua -m from -n wrong_servers,invalid_servers -o black01.txt nfqd_1_2013_1011.log\
nfqd_1_2013_1012.log
input file-format)
2013-10-12 16:57:07 DROP (wrong_servers) from=211.189.116.219 to=xx.xx.xx.xx
Download
License)
GPL version 3
Release)
2013.11.11 version 1.0