hucn2000 发表于 2011-8-12 13:19:03

阻止暴力POP猜密码思路

版本:9.51
POP猜密码出错,会生成windoes应用程序日志 521
取日志IP进行IP策略阻止

wxhsh 发表于 2011-8-12 13:27:57

这个MD自带动态屏蔽的.....

hucn2000 发表于 2011-8-12 13:46:26

版本 9.51
我看很多人都用老版本啊
包括我自己

建个计划任务 执行
粗略的
@echo off
eventquery /L application /R 1 /V /FI "ID EQ 521" >a.txt
for /f "tokens=3 delims=****" %%a in (a.txt) do echo.%%a >b.txt
for /f "tokens=1 delims= " %%a in (b.txt) do echo.netsh ipsec static delete filter filterlist=BlockIP dstaddr=me dstport=0 srcaddr=%%a srcport=0 protocol=any mirrored=yes srcmask=255.255.255.255 dstmask=255.255.255.255 >BlockIP.bat
for /f "tokens=1 delims= " %%a in (b.txt) do echo.netsh ipsec static add filter filterlist=BlockIP dstaddr=me dstport=0 srcaddr=%%a srcport=0 protocol=any mirrored=yes srcmask=255.255.255.255 dstmask=255.255.255.255 >>BlockIP.bat
echo.del a.txt >>BlockIP.bat
echo.del b.txt >>BlockIP.bat
echo.del BlockIP.bat >>BlockIP.bat
BlockIP.bat
页: [1]
查看完整版本: 阻止暴力POP猜密码思路