Shell Programming and Scripting

Greetings,

I'm new to scripting and need a little help. I have a NAS server and want to make a script that bans IP if they fail login several times.

The problem is that I dont know how to compare the IP's in the file. If they exist more than 3 times do ....

#!/bin/sh
set -x

X=4
rm /home/banip/output
touch /home/banip/output.1

grep "Invalid user root" /var/log/messages|cut -c 68-79 > /home/banip/output.1

#If the same entry is gathered in the file more than x times

A=`cat /home/banip/ban_this_ip|wc -l`
echo $A
if [ "$A" -ge "$X" ]
then
cat $ theIP >> /etc/config/ipsec_deny.conf
else

echo "Nothing to worry about"

fi

#########################################
#Output.1 now contains:

218.22.9.118
218.22.9.118
218.22.9.118

So if the above scenario where the same IP exists more 3 times (is unique) then insert this ip into /etc/config/ipsec_deny.conf

Something like this perhaps? (untested)

Code:

grep "Invalid user root" /var/log/messages|cut -c 68-79 | sort | uniq -c | awk '$1 > 3 { print $2 }' >> /etc/config/ipsec_deny.conf

I'd guess you'd want to make it a bit fancier though, to check whether the IP already exists, etc.

Hi Annihilannic,

I messed around yesterday and got this:

#!/bin/sh
set -x
B=1:
rm /home/banip/output.1
touch /home/banip/output.1

grep "Invalid user root" /var/log/messages|cut -c 68-79 > /home/banip/output.1

#If same entry is there more than 3 times

tmp1="`head -n 1 /home/banip/output.1`"
tmp2="`sed -n 2p /home/banip/output.1`"
tmp3="`sed -n 3p /home/banip/output.1`"

if [ $tmp1 == $tmp2 ] && [ $tmp1 == $tmp3 ]
then

A="`cat output.1| head -n 1`"

echo "$B""$A" >> /etc/config/ipsec_deny.conf
echo "$A is not banned"

I know its ugly and by far bulletproof - I will try to use your line and mess around. Always nice with inspiration

Thanks for your time much appreciated!