World: r3wp
[Linux] group for linux REBOL users
older newer | first last |
[unknown: 10] 31-Mar-2005 [46] | http://www.goosee.com/puppy/ |
Kaj 31-Mar-2005 [47] | Yes, that's a good one. An annoying thing, though, is that it doesn't seem capable of changing the refresh rate from a flicker |
Robert 4-Jun-2005 [48x3] | Ok, here is a thing I want to use /Core for, which IMO is useful to a lot of people: Locking out IPs after multiple failed sshd login attempts |
I'm not a Linux guru. There are some solutions using a tool named SWATCH but it's not that easy. | |
So what's needed: 1. We need a way to continually parse the SSHD log-file, something like tial 2. We extract the IP address and add it to some firewall, to block it for some time 3. We need to remove the IP from the firewall Anyone interested in such a project? | |
Volker 4-Jun-2005 [51x2] | Did you read here? same wording :) http://www.plug.org/pipermail/plug/2004-October/011457.html |
do we have skip on files now? | |
Robert 4-Jun-2005 [53x2] | Yes, I read this. swatch is working but getting everything tied together is as always with Unix akward. I just want a simple Rebol solution :-)) |
iptables: Is this a tool that I need to start or is it a system tool to alter internal things uses by the kernel anway? | |
Volker 4-Jun-2005 [55x4] | its in that thread: /etc/hosts.deny . juast add ips to block there. |
has a partner /etc/hosts.allow . IIRC .deny has priority. | |
http://www.linuxfibel.de/nettest.htm(german) | |
should then be lines like ALL: 123.234.345.456 but better wait for our real linux-pros. | |
Robert 4-Jun-2005 [59x2] | When is this file re-read? I mean if we append something, how to activate it. |
What happens if the same IP tries again? The request is blocked immediatly? Why might using a firewall or iptables be better? | |
Volker 4-Jun-2005 [61x2] | good questions. don't know. |
Hmm. maybe host.deny works only with inetd? http://www.tu-darmstadt.de/hrz/durchblick/db96-2/wrapper.html | |
Robert 4-Jun-2005 [63] | Hmm... strange I can add the same iptabels rule several times. Don't know what's this for? |
Volker 4-Jun-2005 [64x2] | can you dump current rules? is it stored three times, or only the last keept? |
seems iptables can be changed on the fly from the command line. i guess you can switch things on and of, or just change them to what they are. | |
Robert 4-Jun-2005 [66x2] | Yes, I dumped the rules and see the same IP several times. |
But, if filterting would work correct, it should be DROPed anyway. So, if I add a DROP rule for an IP address, I shouldn't get any more packets. | |
Ammon 4-Jun-2005 [68x2] | Robert, with IPTables the rules are parsed in order so if a rule will allow the packet before it gets to your deny rule then the packet is allowed. (IIUC) |
This is the behaviour that I saw when playing with IPTables... | |
Volker 5-Jun-2005 [70] | there is a tailor.r in my folder on developer. it polls the tail of a file and calls a callback which each new line. uses /skip on file. may be a base for a daemon |
Robert 5-Jun-2005 [71] | I further investigated all this. Yes, the tables are used by the kernel (if told to do so but what I see it's mostly so by default) and can be changed dynamically. |
Oldes 8-Jun-2005 [72x4] | Does anybody know hot to run rebol script as a background job? |
I can run the script starting rebol and in console using do %script.r | |
but using ./rebol -qs --script script.r > output.txt & is not working:( rebol stops ) | |
I added forever loop at the tail of the script so it's working now (as a server) but rebol stops when I exit the shell:( | |
Henrik 8-Jun-2005 [76] | background jobs are normally stopped in the shell they are run from, if that shell exits. I'm not sure what it takes to make a program run as a background job, though... |
Oldes 8-Jun-2005 [77x2] | I thoght it's the nohup command but it stops anyway |
I hope it's not rebol limitation | |
Volker 8-Jun-2005 [79] | How about running it from screen? |
Oldes 8-Jun-2005 [80x2] | I would like to start a server |
There is no screen | |
Volker 8-Jun-2005 [82x2] | starting screen as the server? |
have not tried running completely in background yet. | |
Henrik 8-Jun-2005 [84x3] | have you tried using a shebang line at the top of the script and run the script directly as an executable script, rather than through the rebol executable? |
(would make it slightly easier to manage) | |
http://www.jguru.com/faq/view.jsp?EID=472493<--- something about using SysV init here. putting the script in /etc/init.d would make it a daemon | |
Volker 8-Jun-2005 [87x3] | does this work? rebol -q \!scratch.r </dev/null >/dev/null 2>/dev/null & |
this little loop stays running when i close the xterm | |
forever[ write/append/lines %test.txt mold now wait 1 ] | |
Oldes 8-Jun-2005 [90] | it's running: http://195.122.214.59/~hmm/flash-chat.html |
Volker 8-Jun-2005 [91] | (oops, the "\!" is no special trick, only escaping. test-file is "!scratch.r"..) |
Oldes 8-Jun-2005 [92x4] | but now I tri to exit from shell... |
...and the server is down | |
:( | |
which shell you are using? | |
older newer | first last |