Programming :: Iptables Script With For Condition?
Apr 28, 2010i have a question regarding the use of a statement, like following, in a iptables script.
Code:
BLOCKMAC="/root/mac.blocked"
MACS=$(grep -Ev "^#" $BLOCKMAC)
[code]...
i have a question regarding the use of a statement, like following, in a iptables script.
Code:
BLOCKMAC="/root/mac.blocked"
MACS=$(grep -Ev "^#" $BLOCKMAC)
[code]...
I just started with Pthreads and don't really know much about it. I want to suspend pthreads but apparently, there is no such function as pthread_suspend. but I don't understand why we need both mutex and condition to suspend and resume a pthread. Is it possible to suspend and resume it without using conditions?
View 1 Replies View RelatedI have a file records as follows:
Jane pepe@pepe.biz
john@pepe.net John
Joe joe@willxyz.org
How can I get that always first field be given name and second one be the mail address?
I've tried
Code:
awk '$1 ~ /@/ { a=$1 ; $1=$2; $2=a; print }' file
But that doesn't worked
i have a host file called myhosts.txt as follow:
Quote:
10.20.3.9 host1
10.20.3.10 host2
10.20.3.11 host3
[code]...
In my script, i am using NSLOOKUP to get the ip address of a host that just rebooted and connected to my network (this part has been done).But now i want to check the myhosts.txt file if the host has the same or different IP address, if is different then myhosts.txt file must be updated with the new IP.i am using the following AWk command:
Quote:
awk '/host4/{$1=val}{print}' val=10.0.3.4 /tmp/myhosts.txt
it prints on screen fine and i see the host4's ip address gets replaced but the actual file does not get updated with the new IP. I might need to use gsub?
Let say I would like to check /etc/profile whether defined umask 022
umaskcheck=$(What to defined here?)
if [ What to define here? ]
then
[code]....
need to modify some scripts to repeat the commands in them until a variable returns a proper value. I need it to add some redundancy to some scripts i use to upload files to a remote server.This is an example of a portion of those scripts:
Code:
################## site UPLOAD ##################
site_login=$(curl -c $site_cookie -L -F user=$site_user -F pass=$site_password -F
[code]....
I'm trying to implement an assert function similar to:[url]
However, I'm having trouble with file existence testing when the file name has a space in it.
I have distilled the problem down to the following:
This code works as expected, printing 'yes' if '~/test file' exists, and no if not.
Code:
However, this code gives an error.
Code:
The error:
Code:
Which tells me that it is splitting ["~/test file"] into ["~/test] and [file"]. Why? Is there a way around this?
Note that if you simply use a file path without a space, both cases work perfectly. Is this a BASH bug possibly? I just can't understand why the first would work, but the second wouldn't.
I have a csv file like, having HDR segment and multiple LIN01 segment in each line:like
Here i want to split file in two, one having LIN01 segment which have LR at end, and one which have LF at end in LIN01 segment.
Is it possible to created awk or shell script for this?
I am trying to program iptable rules for implementing a 1:1 NAT which does the following:
1. Forward all traffic from all ports on a public ip to a private ip
2. Forward traffic from a range of ports (x-->y) on a public ip, to a private ip
I did some google searches for the same, and came up with the following.
iptables -A FORWARD -t filter -o eth0 -m state
state NEW,ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -t filter -i eth0 -m state
state ESTABLISHED,RELATED -j ACCEPT
I have tried to google it around and couldn't find any good solution for it. What I want is to hook up to the kernel network hooks and for example investigate all of the packets (maybe keep some in the buffer and drop in the kernel so I could send them out lets say 10 minutes later) but from a C / C++ program perspective / level. I know it can be done via iptables but isn't there a way to do it from a program ?? I have found a library called ipq but apparently doesn't work with kernel 2.6.x anymore.
View 10 Replies View Relatedi want to execute iptables command via php. i can run simple command as echo 'iptables -h'; but i can't run ipables -L and i create excutable file (firewall.sh). i can run it on console but not done on php.
View 7 Replies View RelatedI need to write an else-if condition in a makefile, and though the format is posted on several websites, nothing seem to be working, andI get an error everytime. Could anybody please write a small example with an else-if conditional in a maekefile?
View 1 Replies View RelatedI've worked with iptables in shell, but now I need to write an iptables command with perl. here is my code that I've tried but it didn't work :
Code:
#!/usr/bin/perl
print "Content-type: text/html
[code]...
When I used windows, I used to perform following operations on regular basis:
1) disk cleanup
2) disk defragmentation
3) virus/spyware/malware check
4) deleting temp files left by deleted files
5) and many more.......
Does Linux system needs that to be done too? What should be done to maintain Linux in fast & furious condition....as it is now.....
Is there some way to filter output of command by OR condition in Linux? There is filtering by AND condition with grep in way like:
ls -l | grep "^a" | grep "z$"
That says: list all files that beggins with "a" AND ends with "z" (so there is shorter way to write this: grep "^a.*z$", but it is not matter). Is there some way to perform test by OR condition? For example: files that starts exactly with "xen" OR files that ends exactly with ".rpm". But exactly, not something like:
grep "[xen]{0,3}.*[.rpm]{0,4}"
I have the following folder structure:
parent
- folder1
- main1.x
- main1.y
[Code].....
So, how can I achieve this?
How can I have ELSE condition in procmailrc I mean if the mail was from X and Subject has Y OR .... DO something ELSE DO SOMETHING ELSE. I do not want to use two different conditions for each state I want use just one condition and its ELSE because putting too recipes in procmailrc make it too slow .
View 2 Replies View RelatedFor some reason, mport support has been removed from iptables 1.3.8 (was there in 1.3.7). However, multiport support is there. Does anyone here know why and what's the difference between the two in terms of operation? I have written firewall rules using mport. Can it directly be replaced 1:1 with multiport?
View 1 Replies View RelatedI am writing a simple shell script where it checks the condition using if condition.
Code:
if [ $name == "JOHN" ] then admin='YES'; fi
if I use like this I am getting below error
[code]....
First of all, This is my first post in the forums, so - Hello all, nice to meet you. This is my first time with Ubuntu, and so, ran into a lot of problems. This problem is in installing counter strike. I know that there are a lot of guides and FAQ's online that give you lots of help on that, but I ran into an unique problem.
I installed the non-steam version of Counter Strike ( using wine ofcourse ). It created a shortcut in my desktop and I launch the counter strike game. I enter my cd key and then I select a profile, select a map, select the bots and then, it starts loading. After that, it stops half way and then it quits.
I have two dhcp server (dhcp3) in the same network, this network is a link layer network so every host is seen as directly connected. The two servers have debian lenny and there are near 13 AP mikrotik to give connection to the XO laptops (from the project one laptop per child). This is for two public schools (each one with one server) that are connected via a p2p connection and each one provides internet for the school and outdoor too. The servers are also file servers, proxy, etc.
Each time a laptop asks for an IP, it sends a broadcast message and this petition gets to both servers, now a days the first server that reply is the one the laptop associate with. What I want to do is, knowing the bandwith use of the ADSL, the clients connected to the server, and the cost to the AP that the laptop associate with, decide wich is the best server to be connected to. What I want to achive is to balance the load and to decide the optimum connection, because now it could happen that one server is very loaded and the other is free. I tried to run dhcp with inetd and use tcp wrappers to invoke a script to check a condition before responding and, in case to be the best server, reply to the laptop, but i couldn't get the dhcp server to respond when I run it with inetd. here is my inetd.conf
bootps dgram udp wait root /usr/sbin/tcpd dhcpd3
I'm trying to use a global variable to apply a condition within a script.
The idea is to use this variable set to e.g. 1 or 2 to run a different part of the script accordingly. I can set the global variable with e.g.
Code:
export WL0=1
run my part of script, increment it by 1 with e.g.
Code:
WL0=$((WL0+1))
but if I re-run the script my WL0 is still set to 1!
I've also tried to add an
export $WL0 at the very end of my script (after the math) but this doesn't change the global variable apparently.
How to filter condition based on full hostname? ie. allow inbound packets to port 25 if the packet comes from [URl]..
View 1 Replies View RelatedUnder high UDP traffic condition, we find we cannot receive UDP packet (can be captured by tcpdump) from socket neither use bare "recvfrom" nor "select recvfrom " pair. Is there any similar problem reported from user?
Any tunning or socket establish option can help?
Or is there any improvement available from the latest version?
our using linux version is CentOS 5.5
ethernet driver version is Intel (R) Gigbait Ethernet Network Driver version - 1.3.16-k2
NFS share is up. it's set to r/w. This is Ubuntu 10.10 NFS4 i believe. exports file looks like this;
/data/feeder 10.10.10.1/255.255.255.0(rw,async,no_root_squash,no_subtree_c heck)
on the client,
/etc/fstab looks like this;
10.10.10.1:/data/feeder /opt/feeder nfs rw 0 0
when I ls -la into /opt/feeder I see all the persmissions as:
4294967294:4294967294 instead of root:root
I want to ssh and check for a file, I hve came up with following, and its not working,
Is this possible or do I have to do this in a another way.
I am unable to restore my iptables from iptables-save after upgrading Fedora. I cannot get iptables-restore to work, and I have resorted to entering rules manually using the GUI.
View 2 Replies View RelatedI am facing a strange problem witht my iptables as there are some firewall entries stored somewhere which is displaying the below firewall entries even after flushing the iptables & when I restart the iptables service then the firewall entries are again shown in my iptables as shown below,
[root@myhome ~]# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
[code]....
I recently installed a new Ubuntu PC that runs iptables and PSAD. I had the same script on another Ubuntu PC, but when I copied the script onto the new PC, I got this error. I don't remember where I found the tutorial for this, all I know is that this is the script (Edited for my usage):
Code:
#!/bin/bash
# Script to check important ports on remote webserver
# Copyright (c) 2009 blogama.org
# This script is licensed under GNU GPL version 2.0 or above
[code]....
Safe.txt contains:
Code:
127.0.0.1
192.168.1.8
192.168.1.1
98.200.58.73
192.168.0.1
And the error message generated is:
Code:
root@NETWORK-SERVER:/var/ddosprotect# ./ipblock.sh
' not found.4.4: host/network `127.0.0.1
Try `iptables -h' or 'iptables --help' for more information.
' not found.4.4: host/network `192.168.1.8
[code]....
IPtables creates an error during startup as well as when I try to restart it: Here's the output of:
[Code]....