squidefender

Squidefender is a powerful Perl script that is designed to parse squid log files in their native formats in order to detect potential attacks. This software is capable of sending a complaint email to the ISP of the attacking entity, and can even execute external commands that can take additional actions based on the detected attack. For example, you can use Squidefender to automatically adapt your firewall to thwart an attack.

One of the strengths of Squidefender is its flexible configuration options, which allow you to easily add new attacks to be scanned for. Additionally, this software offers the ability to use different message templates based on the attack found. This feature can help you to better categorize and respond to different types of attacks.

In order to make upgrading Squidefender easier, this software requires its own directory. Specifically, this helps you to keep message templates in a single place, and makes it simpler to install updates by allowing you to replace individual modules with new and improved versions.

To install Squidefender, simply download the squidefender.tar.gz archive and ensure that both the Mail::Sender and Net::DNS modules are installed via CPAN. After this, extract the archive to the location of your choice, edit the squidefender.conf file to suit your needs (you can use the included basic file as a starting point), and then create a timestamp file using the included "make timestamp" command. Finally, add Squidefender to your crontab file and you're all set!

This recent release of Squidefender includes several new enhancements and bug fixes, including a lockfile to prevent multiple versions from running at once, the ability to automatically unblock hosts after a specified period of time, and the implementation of rate control to limit the number of complaints sent to an ISP regarding the same IP address.