This works well - Thank you!
I actually had to add a second cut to get it to work on our server:
grep "GET /default.ida" /var/log/httpd/access_lo* |cut -f1 -d' '|cut -f2 -d':'|sort|uniq >codered.init
Question:
I'm new to this stuff. Just slowly figuring out the scripting, but I don't know too much about these IP Chains. How do you now re-allow someone 2 weeks later? Are you doing this automatically through the cron job?
Re: Apache CodeRed Countermeasures
This works well - Thank you!
I actually had to add a second cut to get it to work on our server:
grep "GET /default.ida" /var/log/httpd/access_lo* |cut -f1 -d' '|cut -f2 -d':'|sort|uniq >codered.init
Question:
I'm new to this stuff. Just slowly figuring out the scripting, but I don't know too much about these IP Chains. How do you now re-allow someone 2 weeks later? Are you doing this automatically through the cron job?