半自动化多站点屏蔽恶意用户的IP（脚本）

前瞻：
用于多站点操作，基于ansible批量化操作
前提需要安装ansible且在nginx.conf中添加如下参数
include /usr/local/nginx/conf/denyIP;
在conf下创建denyIP，将屏蔽ip写入denyIP即可屏蔽
touch denyIP
因为使用的ansible所以每个zhandian(1-6)实际上在ansible/hosts中都是包含了多个站点的

#!/bin/bashread -p "请输入需要屏蔽的IP: " forbidipcat << EOF----------------------------------------|***************站点列表***************|----------------------------------------`echo -e "\033[35m 1)zhandian-1\033[0m"``echo -e "\033[35m 2)zhandian-2\033[0m"``echo -e "\033[35m 3)zhandian-3\033[0m"``echo -e "\033[35m 4)zhandian-4\033[0m"`    `echo -e "\033[35m 5)zhandian-5\033[0m"``echo -e "\033[35m 6)zhandian-6\033[0m"`EOFread -p "请输入需要执行的站点编号:" cmdcase $cmd in1)        sudo /usr/bin/ansible zhandian-1 -m shell -a "sudo sed -i  '\$a\deny ${forbidip};'  /usr/local/nginx/conf/denyIP" && sudo ansible zhandian-1 -m shell -a "sudo systemctl restart nginx";;2)        sudo /usr/bin/ansible zhandian-2 -m shell -a "sudo sed -i  '\$a\deny ${forbidip};'  /usr/local/nginx/conf/denyIP" && sudo ansible zhandian-2 -m shell -a "sudo systemctl restart nginx";;3)        sudo /usr/bin/ansible zhandian-3 -m shell -a "sudo sed -i  '\$a\deny ${forbidip};'  /usr/local/nginx/conf/denyIP" && sudo ansible zhandian-3 -m shell -a "sudo systemctl restart nginx";;4)        sudo /usr/bin/ansible zhandian-4 -m shell -a "sudo sed -i  '\$a\deny ${forbidip};'  /usr/local/nginx/conf/denyIP" && sudo ansible zhandian-4 -m shell -a "sudo systemctl restart nginx";;5)        sudo /usr/bin/ansible zhandian-5 -m shell -a "sudo sed -i  '\$a\deny ${forbidip};'  /usr/local/nginx/conf/denyIP" && sudo ansible zhandian-5 -m shell -a "sudo systemctl restart nginx";;6)        sudo /usr/bin/ansible zhandian-6 -m shell -a "sudo sed -i  '\$a\deny ${forbidip};'  /usr/local/nginx/conf/denyIP" && sudo ansible zhandian-6 -m shell -a "sudo systemctl restart nginx";;*)        echo "errpr:please in input (1,2,3,4,5,6)";;esac

©著作权归作者所有：来自51CTO博客作者李佳良的原创作品，如需转载，请注明出处，否则将追究法律责任

好知识，才能预见未来

赞赏

0人进行了赞赏支持

好知识，才能预见未来

更多相关文章

随机推荐