ipaddress blacklist tools Programs) 1:name2ip version 1.0 (written in C) name2ip is a program that translates a network-hostname to the ipaddress. 2:mergblk version 0.1 (written in C) mergblk is a program that merges blacklists. (sort,check-duplication,cut-comment) 3:mk_black.lua version 0.1 (written in Lua) mk_black.lua is a lua script that abstracts black-ipaddresses from log_files. Requirement) A:Lua (version 5.2.x) B:Penlight (Lua Library) C:lfs (Lua Library luafilesystem) A)Penlight ex) sudo cp -r lua/pl /usr/local/share/lua/5.2/ B)lfs (LuaFileSystem) edit config make; sudo make install Install) tar xvf blacklisttools-1.0.tar.gz cd blacklisttools-1.0 make sudo make install
Usage) 1:name2ip name2ip network-hostname1 network-hostname2 ... name2ip www.kernel.org www.gnu.org 149.20.4.69 # www.kernel.org 208.118.235.148 # www.gnu.org name2ip -o outfile name1 name2 ... name2ip -i inputfile -o outfile -e errfile name2ip -o outfile -e errfile name1 name2 ... 2:mergblk mergblk -o Blacklist.txt Blacklists/Block-IPs.txt Blacklists/Blocklist1.txt 3:mk_black.lua mk_black.lua -m from -o blacklist.txt kernel_log1.log kernel_log2.log mk_black.lua -m from -n wrong_servers,invalid_servers -o black01.txt nfqd_1_2013_1011.log\ nfqd_1_2013_1012.log input file-format) 2013-10-12 16:57:07 DROP (wrong_servers) from=211.189.116.219 to=xx.xx.xx.xx Download License) GPL version 3 Release) 2013.11.11 version 1.0