Am 08.03.2012 18:19, schrieb Andrew Beverley:
On Thu, 2012-03-08 at 13:45 +0100, tobi wrote:
As mentioned in subject I want to run an external script upon matching
of a certain rule.
I'm not aware of any way to do that. What exactly do you want to
achieve? It may be that there is another way of doing what you want.
Andy
okay more details about my intention: I got a script that checks some
logs and acts upon violation by adding IPs to a sperate chain via
iptables -A OFFENDERS -s IP -j DROP. So such IPs get blocked. Now I
thought about how could I find out if IPs from OFFENDERS come again. So
I put another chain to iptables (before the OFFENDERS), put the IPs from
OFFENDERS and set the log target for each rule. But then I need a script
that reads the logs and searches for IPs from OFFENDERS. Too complex for
me :-)
So I thought it should somehow be possible to achieve that quite easy IF
I could add a script to be executed when a rule (that now goes to log
target) matches. Thats were I stand now :-)
All I "need" would be a way to excute a simple mailx command with the
offending IP and send a mail to myself
Thanks for any input and ideas
tobi
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
