sshblack for OS X

Download sshblack for OS X – MD5 hash: a1dbb789d29c0a2d9ef852b7b2d29004

From the original author’s site:

The sshblack script is a real-time security tool for secure shell (ssh). It monitors *nix log files for suspicious activity and reacts appropriately to aggressive attackers by adding them to a “blacklist” created using various firewalling tools — such as iptables — available in most modern versions of Unix and Linux. The blacklist is simply a list of source IP addresses that are prohibited from making ssh connections to the protected host. Once a predetermined amount of time has passed, the offending IP address is removed from the blacklist.

As the script was written for ipchains I have modified it to work with the ipfw2 implementation included in OS X. I have also replaced the logging functionality so that it now sends messages to the syslog daemon instead of writing directly to a log file.

Installation:

1. Extract the archive and place sshblack.pl, list.pl and unlist.pl in /opt/local/bin/
2. Place org.pettingers.sshblack.plist in /Library/LaunchDaemons/
3. Edit sshblack.pl, list.pl and unlist.pl to match your desired configuration per the instructions here. Read below for a list of variables that I have added to support new functionality.
4. As root open a terminal and type chmod 755 /opt/local/bin/sshblack.pl /opt/local/bin/list.pl /opt/local/bin/unlist.pl
5. If you would like to log the output from sshblack you will need to add a line to /etc/syslog.conf similar to this:
   local7.* /var/log/sshblack.log
6. Reboot your system.

New Variables:

$IPFWEXEC

The path to the ipfw executable. Should be /sbin/ipfw

$WRITECONFIG

Set this to 1 if you want your ipfw rules configuration file to be modified, allowing blocks to be restored upon reboot. Default: 0

$IPFWCONFIG

The path to your ipfw configuration file. Default: /etc/ipfw.conf

$RULESTART

The ipfw rule number to start from. Default: 1

$RULEINCREMENT

Number to increment additional rules by. Default: 1

$RULESET

Ruleset number for ipfw rules. Default 20

---

Categorical Links Page Plugin

Download version 1.5

This plugin will allow you to create a page with all of your links, plus descriptions (and images if defined), separated by category. It does not display categories that do not have any links in them. All elements have class descriptors to allow you to style them as you see fit. To use Categorical Links Page simply create a new page and type <!--catlinkspage--> in the body; the plugin will do the rest!

Categorical Links Page is based on the Links Page plugin by Owen Winkler. Many thanks to him for creating the original.