servers="apache2 postfix dovecot vsftpd ssh bind9 squid dictd inetd memcached mysql webmin postgresql pptpd slapd"
sleep=${1:-10}
max_connections=${2:-50}
export echo_or_do=echo
if [ "$DOIT" = REAL ]; then
	echo_or_do=verbose
	echo "warning: running $DOIT with max_connections = $max_connections"
	echo '^C within 5 sec to stop!'
	sleep 3
else
	echo "warning: running in test mode"
fi
while true; do
	attacks=`ip_attacks "$max_connections"`
	if [ -n "$attacks" ]; then
		echo "$attacks" |
		datelog |
		if [ "$DOIT" = REAL ]; then
			tee -a /root/ip_attacks.log
		else
			echo "`</dev/stdin`"
		fi |
		kut 3 |
		xargs $echo_or_do ip_block 2>&1 | datelog
		for A in $servers; do
			( ( $echo_or_do /etc/init.d/$A stop ; sleep 1; $echo_or_do /etc/init.d/$A start; ) >/dev/null 2>&1 ; echo -n "$A "; ) &
		done
		wait
		echo
		echo "recovered after attack" | datelog
	fi
	sleep $sleep
done