how to run script on mac to check for worm

The shell script can be automated using a crontab entry and run once every night, or manually from the command line if you prefer.I'm not sure if this is just on my system, but you have to run the shell script as root, so use the sudo command to do this (e.g.Make sure you set the rights of the file you've created using chmod (e.g.The shell script I've written (wrmblk) should be installed in any directory that is included in your path environment variable (e.g.Ipfw add deny all from $host to any >/dev/null If (! fgrep $host /var/tmp/worms.blocked >/dev/null) then

Ipfw list | grep 'deny ip from *.*.*.* to any' |Īwk '' | sort | uniq > /var/tmp/worms.blockedĮcho Gathering new POTENTIAL worm hosts from the access log and blocking themĮgrep -i '(cmd.exe|root.exe|default.ida|_vti_bin)' /var/log/httpd/access_log |

# Note: Apache must be configured with HostnameLookups OffĮcho -Įcho Constructing list of CURRENTLY blocked host IP Addresses # Macintosh OS X 10.2 Apache web server, using the IPFW utility. # Block sites, which have originated Nimda and CodeRed queries, from Here's the code to the wrmblk script make sure you read the notes at the end: #!/bin/sh I decided to write a command line script to locate any hosts that are flooding my system with Nimda and CodeRed worm requests and add them to the 'denyâ€? list using the Macintosh OS X 10.2 IPFW utility, rather than relying on third party shareware GUI wrappers which do pretty much the same thing.

How to run script on mac to check for worm