Rudi
13.02.14, 04:43
Es gab auf Heise mal einen entsprechenden Artikel. Hier das Script:
#!/bin/sh
#
# dnsbl-check-standalone.sh
#
# By Damon Tajeddini (dta)
# # 10.03.2009
#
MAIL_RCPT="rudi@meine-domain.de"
DNSBLlist=`grep -v ^# < b.barracudacentral.org
cbl.abuseat.org
dnsbl.ahbl.org
ircbl.ahbl.org
virbl.dnsbl.bit.nl
blackholes.five-ten-sg.com
dnsbl.inps.de
ix.dnsbl.manitu.net
no-more-funn.moensted.dk
combined.njabl.org
dnsbl.njabl.org
dnsbl.sorbs.net
bl.spamcannibal.org
bl.spamcop.net
sbl.spamhaus.org
xbl.spamhaus.org
pbl.spamhaus.org
dnsbl-1.uceprotect.net
!`
# reverse IP address bytes
convertIP()
{
set `IFS=".";echo $1`
echo $4.$3.$2.$1
}
usage()
{
echo "Usage: $0 [-H host|-p]"
echo " -H IP address to check"
echo " -p Print list of DNSBLs"
}
# Checks the IP with list of DNSBL servers
check()
{
for i in $DNSBLlist
do
if dig $ip_arpa.$i +short | grep -q "^127.0.0."
then
mail -s "** Service Alert: $ip found on $i **" $MAIL_RCPT < *** DNSBL WARNING ***
Service: $progname
Checker-Host: `hostname`
Date/Time: `date`
Additional Info: DNSBL-Alarm: Folgende $ip ist gelistet bei $i
!
echo "IP Listed in $i"
fi
done
} # check
case $1 in
-H)
if [ -z "$2" ]; then
echo "ip address missing"
fi
ip=$2
ip_arpa=`convertIP $ip`
check;;
-p)
for i in $DNSBLlist
do
echo $i
done
;;
--help)
usage
;;
*)
if [ -z "$1" ]; then
usage
fi
echo "unknown command: $1"
;;
esac