RE: hosts.deny

["Ed Street" <blacknet@simplyaquatics.com>]

[-- Attachment #1: Type: text/plain, Size: 1012 bytes --]

Hello,

Sure attached is the hosts.trashcan file I am currenly testing.
Basically it uses the netfilter time patch.  You edit the file to
include the ip/hostmask the start_time, stop_time and days to deny.  The
only down side to this is the date wraping (i.e. deny time going past
midnight) and you have to rerun the script after any change to the
files.

Ed

-----Original Message-----
From: netfilter-admin@lists.samba.org
[mailto:netfilter-admin@lists.samba.org] On Behalf Of Antony Stone
Sent: Sunday, July 07, 2002 7:39 PM
To: netfilter@lists.samba.org
Subject: Re: hosts.deny

On Monday 08 July 2002 12:33 am, Ed Street wrote:

> Hello,
>
> I've taken the hosts.deny file a bit further and wrote a
hosts.trashcan
> and a hosts.dnat.
>
> The hosts.trashcan uses the time patch, it will reject any ip/netmask
> from start_time to end_time on days.
>
> The hosts.dnat file will setup a dnat rule, it's format is
> Sport	ip	dport	protocol

Can you give some more details on how these work please ?

 

Antony.

[-- Attachment #2: hosts.trashcan --]
[-- Type: application/octet-stream, Size: 2358 bytes --]

# ------------------------------------------------------------
#			hosts.trashcan
# this is the trashcan file used for iptables to deny from
#
# ------------------------------------------------------------

#
# you should restart /etc/init.d/rc.firewall.iptables when making *ANY*
# changes to this file!
#
# Currently there is NO need to restart the script on a timed basis.
#
# Timed restarts will be added with ip accounting for daily stats.
#
#
#	start_time and end_time is HH:MM
#	days is Mon,Tue,Wed,Thu,Fri,Sat,Sun
#	if these 3 fields are NA then put an X but do NOT leave it blank!
#
#  **********NOTE**********
#
#	if stoptime is *AFTER* midnight then create 2 rules.
#	rule 1) start_time	23:59
#	rule 2) 00:00		stop_time
#
#	This is a bug in the time patch and is being worked on by the
#	developer in the next release
#
#  **********NOTE**********
#
# example formats
# host/mask	start_time	end_time	days
# www.google.com x x x
# 10.0.0.1/24 x x x

#TEST BLOCK
#192.168.1.200	17:00	23:59   Mon,Tue,Wed,Thu,Fri,Sat,Sun
#192.168.1.200	00:00	08:00	Mon,Tue,Wed,Thu,Fri,Sat,Sun


# ------------------------------------------------------------
#			p0rn spam locations
# ------------------------------------------------------------

#<ip/netmask>    <start_time>    <stop_time>     <days>
217.56.69.170 x x x

#mail1.famk.com x x x
64.38.209.73/24 x x x
youvegotpornmail.com x x x

211.250.155.163/24 x x x
#sexymailers.com/24 x x x
64.119.200.138/24 x x x
210.102.176.5/24 x x x
193.230.98.160/24 x x x
61.141.213.83/24 x x x
21.119.57.33/24 x x x
210.21.102.67 x x x

webport-cl6-cache3.ilford.mdip.bt.net x x x
213.120.56.41 x x x


# ------------------------------------------------------------
#			spam crap
# ------------------------------------------------------------

#<ip/netmask>	<start_time>	<stop_time>	<days>
doubleclick.net/24 x x x
216.255.192.1/24 x x x

#annoying junk from lop
www.lop.com/16 x x x

www.x10.com/24 x x x
www.entercasino.com/24 x x x
media.fastclick.net/24 x x x
www.casino-on-net.com/24 x x x

#korea
210.95.109.130/16 x x x

# ------------------------------------------------------------
#			misc user defined
# ------------------------------------------------------------

#<ip/netmask>    <start_time>    <stop_time>     <days>