The name of a command (as you would enter it from the shell) that will lock out the host IP of an offending system. The IP address will be substituted for the first occurrence of the string %s.
This will be executed with the user ID that MiniVend runs under, so any commands that require root access will have to be wrapped with an SUID program.
On Linux, you might lock out a host with:
ipfwadm -I -i deny -S %s
This would require root permissions, however, under normal circumstances.
You can use sudo
or another method to wrap and allow the command.
You can write a script which modifies an appropriate access control file, such as .htaccess for your
CGI directory, to do another level of lockout.
A simple command line containing
perl -0777 -npi -e 's/deny/deny from %s\ndeny/' /home/me/cgi-bin/.htaccess
would work as well (remember, the %s
will become the
IP address of the offending user).
LockoutCommand lockout %s