Skip to content

Instantly share code, notes, and snippets.

View Temikus's full-sized avatar

Artem Yakimenko Temikus

View GitHub Profile
@Temikus
Temikus / ssh-iptables
Created January 29, 2013 07:19
This iptables snippet opens port 22 globally for up to 8 unique connections on that port within the same 3-minute window per source IP, whereupon that source IP is blocked for 10 minutes. Successful or 'tripped' connections are logged. All done purely in-firewall (uses ipset)
ipset -exist create blackhole hash:ip timeout 600
-A INPUT -m set --match-set blackhole src -j DROP
-A INPUT -p tcp -m tcp --dport 22 -j SSH-ALL
-A SSH-ALL -p tcp -m recent --set --name SSH --rsource
-A SSH-ALL -p tcp -m recent --update --seconds 180 --hitcount 8 --name SSH --rsource -j SSH-BLOCKED
-A SSH-ALL -p tcp -j ULOG --ulog-nlgroup 1 --log-prefix "Accepted-ssh Event: "
-A SSH-ALL -p tcp -j ACCEPT
-A SSH-BLOCKED -p tcp -j ULOG --ulog-nlgroup 1 --log-prefix "Blocked-ssh Event: "
-A SSH-BLOCKED -p tcp -j SET --add-set blackhole src
@Temikus
Temikus / wireshark_font_fix.sh
Created February 23, 2013 12:26
Fixes Wireshark font and icon sizes in X11 on MacOSX Taken from: http://blog.tp.org/jay/archives/2010/05/wireshark-macos.html
#!/bin/bash
sed -i -e 's/gtk-font-name=\"Lucida Grande 12\"/gtk-font-name=\"Lucida Grande 9\"/g' /Applications/Wireshark.app/Contents/Resources/themes/Clearlooks-Quicksilver-OSX/gtk-2.0/pre_gtkrc
sed -i -e 's/gtk-icon-sizes = \"gtk-menu=16,16:gtk-dialog=48,48:gtk-dnd=32,32:gtk-button=20,20:gtk-large-toolbar=24,24:gtk-small-toolbar=16,16:inkscape-decoration=12,12\"/gtk-icon-sizes = \"gtk-menu=16,16:gtk-dialog=24,24:gtk-dnd=32,32:gtk-button=20,20:gtk-large-toolbar=16,16:gtk-small-toolbar=10,10:inkscape-decoration=6,6\"/g' /Applications/Wireshark.app/Contents/Resources/themes/Clearlooks-Quicksilver-OSX/gtk-2.0/pre_gtkrc
@Temikus
Temikus / exchange_req.ps1
Created February 28, 2013 14:41
Prepare Windows Server 2008 R2 for Exchange installation
Add-WindowsFeature NET-Framework,RSAT-ADDS,Web-Server,Web-Basic-Auth,Web-Windows-Auth,Web-Metabase,Web-Net-Ext,Web-Lgcy-Mgmt-Console,WAS-Process-Model,RSAT-Web-Server,Web-ISAPI-Ext,Web-Digest-Auth,Web-Dyn-Compression,NET-HTTP-Activation,RPC-Over-HTTP-Proxy -Restart
(*
Generate and deploy Octopress site from Launchbar
Author: Collin Donnell
Website: http://collindonnell.com
Date: 01/07/2013
*)
-- Set to the location on disk of your site
set octopressLocation to ((path to home folder as text) & "Code:blog:") as alias
git log --graph --pretty=format:'%Cred%h%Creset -%C(yellow)%d%Creset %s %Cgreen(%cr) %C(bold blue)<%an>%Creset' --abbrev-commit --date=relative
$ rvm --trace osx-ssl-certs update all
+ [[ -n '' ]]
+ set -o errtrace
+ export 'PS4=+ $(date "+%s.%N") ${BASH_SOURCE##${rvm_path:-}} : ${FUNCNAME[0]:+${FUNCNAME[0]}()} ${LINENO} > '
+ PS4='+ $(date "+%s.%N") ${BASH_SOURCE##${rvm_path:-}} : ${FUNCNAME[0]:+${FUNCNAME[0]}()} ${LINENO} > '
+ 1368109216.N /scripts/cli : __rvm_parse_args() 709 > [[ -z '' ]]
+ 1368109216.N /scripts/cli : __rvm_parse_args() 709 > [[ -n '' ]]
+ 1368109216.N /scripts/cli : __rvm_parse_args() 712 > [[ error == '' ]]
+ 1368109216.N /scripts/cli : __rvm_parse_args() 712 > [[ 0 -eq 1 ]]
+ 1368109216.N /scripts/cli : __rvm_parse_args() 712 > [[ -n '' ]]
@Temikus
Temikus / dhcp_pretty.sh
Created May 11, 2013 14:51
Awk script to make the dhcp.leases more readable
awk ' { out = ""} \
{ $1=="lease"||$1=="client-hostname" ? out=" " $2 : out=out } \
{ $1=="binding"||$1=="hardware" ? out= " " $3: out=out } \
{ $1=="ends"? out=" " $3 " " $4: out=out } \
{ $1=="}"? out="\n": out=out } \
{ printf out," " }' dhcpd.leases \
| grep active \
| sed -e s/'[{};" ]'/\ /g \
| awk '{ printf "%-15s %-17s %-10s %-5s\n", $1, $5, $2, $3 }'
@Temikus
Temikus / gist:5895078
Created June 30, 2013 13:04
Check Apple MDM certificate validity.
openssl s_client -connect gateway.push.apple.com:2195 -cert mdm_push_cert.pem
#! /bin/bash
#Retrieve the list of devices, an IPA file was built for by parsing the embedded.mobileprovision.
[[ -n "$1" ]] || { echo "Usage: ./check_devs.sh sample.ipa"; exit 0 ; }
LANG=C
IPAFILE=$1
TMPDIR=tmp$$.tmp
mkdir $TMPDIR
unzip -qq $IPAFILE -d $TMPDIR
@Temikus
Temikus / rogue
Last active August 30, 2021 13:46
rogue.awk - Find files that are not accounted for in RPMdb. Usage: awk -f rogue.awk
#!/bin/awk -f
#
# rogue.awk - Find files that are not accounted for
#
# awk -f rogue.awk
#
# Rogue is called from a cron job on an hourly basis.
# It parses files in the filesystem and checks to see
# that they belong to an rpm. Then it prints the
# output of rpm -Va to verify those files that do