From 1f6932ad2c69266f6e1a1bbc22ae9dc6d673ef3c Mon Sep 17 00:00:00 2001 From: Momo Date: Tue, 9 Aug 2011 03:21:58 +0200 Subject: initial commit --- filebitch/connect_narf.pl | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 filebitch/connect_narf.pl (limited to 'filebitch/connect_narf.pl') diff --git a/filebitch/connect_narf.pl b/filebitch/connect_narf.pl new file mode 100644 index 00000000..87a521ed --- /dev/null +++ b/filebitch/connect_narf.pl @@ -0,0 +1,15 @@ +#!/usr/bin/perl +#Please add the following to your proftpd config file +#ExtendedLog /var/log/proftpd/ftp_auth.log AUTH auth +#and +# +# ExecEngine on +# ExecOnConnect "/krebs/filebitch/connect_narf.pl" +# + +$ip = system("tail -n 1 /var/log/proftpd/ftp_auth.log"); +#I'm very sorry for this regex, but i only wanted it to get _real_ IPv4 Adresses of the log file, not any kind of timestamp bullshit +$ip =~ s/\b(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\b//g; +#getting some guys sitting next to the Server pissed :) +system("morse -l 42 -f 2000 $ip"); +system("morse -l 42 -f 3000 connected"); -- cgit v1.2.3