use Perl

• Use smarter masks.... (Score:1)

  by Limbic Region (3985)

  other than /32

  I know you said you have hundreds of thousands, but the sample spamreport.txt only has a little over 20K. Even still, doing just a cursory glance you would be a lot better off not blocking individual IPs.

  #!/usr/bin/perl
  use strict;
  use warnings;
  
  my $spam = $ARGV[0] || 'spamreport.txt';
  open (SPAM, '<', $spam) or die "Unable to open $spam for reading : $!";
  
  print
  map { $_->[4] }
  sort { $a->[0] <=> $b->[0] || $a->[1] <=> $b->[1]
           
• clarification and thanks (Score:1)

  by scrottie (4167)

  Ah, yes, I should have been more careful with my numbers. And language. Hundreds of thousands of IPs have been banned but not by that script and thus not in that output; they were banned by another script that (guess what) hit ARIN and blocked the entire netblock. I don't want to do this too hastily (in other words, I don't wnat to do this automatically) so the automatic script is doing /32's. Since there is some interest in passing from someone (even if that interest is just stimulating a clarification), h
  • Re:clarification and thanks (Score:1)

    by scrottie (4167)

    Okay, the code tags didn't do what I wanted... let's try pre! #!/usr/bin/perl use bigint; my $count = 0; while(my $ip = ) { chomp $ip; my $mask; ($ip, $mask) = $ip =~ m{block in (?:proto tcp )?quick from ([0-9.]+)/([0-9]+) to any} or print "can't parse: $ip\n"; next unless $ip and $mask; my $numhosts = 1 And then... #!/usr/bin/perl use IO::Handle; use POSIX; # process all bans for the recently passed out (10 minutes ago) my $timestamp = strftime "%b %e %H:", localtime(time() - 600); #
    • Re:clarification and thanks (Score:2)

      by bart (450)

      Okay, the code tags didn't do what I wanted... let's try pre!

      Yuck! Don't people have a "preview" button any more? Or read the help text under the textarea, when entering their post?

      Try "<ecode>", it'll preserve your formatting.