Index  Up  <<  >>  


LockoutCommand

The name of a command (as you would enter it from the shell) that will lock out the host IP of an offending system. The IP address will be substituted for the first occurrence of the string %s.

This will be executed with the user ID that MiniVend runs under, so any commands that require root access will have to be wrapped with an SUID program.

On Linux, you might lock out a host with:

    ipfwadm -I -i deny -S %s

This would require root permissions, however, under normal circumstances. You can use sudo or another method to wrap and allow the command.

You can write a script which modifies an appropriate access control file, such as .htaccess for your CGI directory, to do another level of lockout. A simple command line containing perl -0777 -npi -e 's/deny/deny from %s\ndeny/' /home/me/cgi-bin/.htaccess would work as well (remember, the %s will become the IP address of the offending user).

    LockoutCommand   lockout %s


Index  Up  <<  >>