From 1f6932ad2c69266f6e1a1bbc22ae9dc6d673ef3c Mon Sep 17 00:00:00 2001 From: Momo Date: Tue, 9 Aug 2011 03:21:58 +0200 Subject: initial commit --- filebitch/COPYING | 14 ++++++++++++++ filebitch/README | 12 ++++++++++++ filebitch/connect_narf.pl | 15 +++++++++++++++ 3 files changed, 41 insertions(+) create mode 100644 filebitch/COPYING create mode 100644 filebitch/README create mode 100644 filebitch/connect_narf.pl (limited to 'filebitch') diff --git a/filebitch/COPYING b/filebitch/COPYING new file mode 100644 index 00000000..65d1a2e9 --- /dev/null +++ b/filebitch/COPYING @@ -0,0 +1,14 @@ + DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE + Version 2, December 2004 + + Copyright (C) 2004 Sam Hocevar + + Everyone is permitted to copy and distribute verbatim or modified + copies of this license document, and changing it is allowed as long + as the name is changed. + + DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE + TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION + + 0. You just DO WHAT THE FUCK YOU WANT TO. + diff --git a/filebitch/README b/filebitch/README new file mode 100644 index 00000000..177bb374 --- /dev/null +++ b/filebitch/README @@ -0,0 +1,12 @@ +The connec_sh script morses the IP + "connected" when a user connects to filebitchs proftpd server. +It will hopefully drive someone crazy. + +To make it run you need to add some lines to your proftpd config. +I decided not to let Krebs do this as I didn't want to break your FTP Server (I know FTP is broken by default). +The 5 necessary lines are: +ExtendedLog /var/log/proftpd/ftp_auth.log AUTH auth + + ExecEngine on + ExecOnConnect "/krebs/filebitch/connect_narf.pl" + + diff --git a/filebitch/connect_narf.pl b/filebitch/connect_narf.pl new file mode 100644 index 00000000..87a521ed --- /dev/null +++ b/filebitch/connect_narf.pl @@ -0,0 +1,15 @@ +#!/usr/bin/perl +#Please add the following to your proftpd config file +#ExtendedLog /var/log/proftpd/ftp_auth.log AUTH auth +#and +# +# ExecEngine on +# ExecOnConnect "/krebs/filebitch/connect_narf.pl" +# + +$ip = system("tail -n 1 /var/log/proftpd/ftp_auth.log"); +#I'm very sorry for this regex, but i only wanted it to get _real_ IPv4 Adresses of the log file, not any kind of timestamp bullshit +$ip =~ s/\b(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\b//g; +#getting some guys sitting next to the Server pissed :) +system("morse -l 42 -f 2000 $ip"); +system("morse -l 42 -f 3000 connected"); -- cgit v1.2.3