([0-9]*.[0-9]*.[0-9]*.[0-9]*\)\(--\S*\)/\1\n/g'`
/bin/rm -r $IPTMPFILE
CHK_IP=`/bin/echo $DROP_IP | /bin/sed 's/[0-9]*\.[0-9]*\.[0-9]*\.[0-9]*/OK/g'`
if [ $CHK_IP = OK ];
then
WORK_IP=`/bin/cat $IPWRKFILE`
if [ $DROP_IP != $WORK_IP ];
then
/sbin/iptables -A INPUT -s $DROP_IP -j DROP
/bin/echo -e $TIME $HOSTNAME ipselect_http[$$]: The access of IP:$DROP_IP was denied with iptables >> $IPLOGFILE
/bin/echo /sbin/iptables -D INPUT -s $DROP_IP -j DROP | /usr/bin/at now + $CANCELTIME > /dev/null
else
/bin/echo -e $TIME $HOSTNAME ipselect_http[$$]: The access of IP:$DROP_IP was denied with iptables SKIP! >> $IPLOGFILE
fi
/bin/echo $DROP_IP > $IPWRKFILE
else
/bin/echo -e $TIME $HOSTNAME ipselect_http[$$]: The access of IP:$DROP_IP was denied with iptables NG! >> $IPLOGFILE
fi
(そしてswatchの設定)
場所は/etc/swatchで.swatchrcのﾌｧｲﾙ名で作成
watchfor = /Yeti\/1.0/
exec `/etc/swatch/ipselect.sh \'$_\>

---

前[P.3/5]次