以下为shell脚本内容
将脚本添加到crontab计划中,定时检查iptables状态,当异常关闭时重新开启
#!/bin/bash
#Check iptables service status
#by: Becan
#iptables规则中任意1个IP地址
IPADDR=111.111.111.111
#判断当iptables正常开启时规则某IP出现次数,如果iptables服务关闭或规则清除会显示为0
port=`/sbin/iptables -vL|grep $IPADDR|awk '{split($NF,a,":");print a[2]}'|wc -l`
if [[ $port -ge 1 ]];then
echo "iptabes service running..."
else
/etc/init.d/iptables start
sleep 5
port=`/sbin/iptables -vL|grep $IPADDR|awk '{split($NF,a,":");print a[2]}'|wc -l`
if [[ $port -ge 1 ]];then
echo "iptables service running..."
else
/etc/init.d/iptables restart
fi
fi