Skip to content

Instantly share code, notes, and snippets.

@marzn
marzn / create-fail2ban-samba.conf-antiransomware.sh
Created October 27, 2017 11:44
Create filterlist for fail2ban / samba / ransomware
#!/bin/sh
wget https://fsrm.experiant.ca/api/v1/combined
sed 's/^.*"filters":\["//g; s/"\]}$//g; s/","/\n/g; s/ /\\ /g; s/\./\\./g; s/\#/\\#/g; s/\+/\\+/g; s/\-/\\-/g; s/\;/\\;/g; s/\~/\\~/g; s/\!/\\!/g; s/\$/\\$/g; s/\@/\\@/g; s/\[/\\[/g; s/\]/\\]/g; s/\*/\.*/g;' combined > samba.conf
sed -i 's/^\.\*//; s/^/ smbd.*\\:\\ IP=<HOST>\\|.*/; s/$/\$/;' samba.conf
CONTENT=`cat samba.conf`
echo -e "[Definition]\nfailregex =${CONTENT}\n\nignoreregex = \n" > samba.conf