判断IP连接数前五，并自动加入防火墙

#!/bin/bash
#Author Template
#Time -- :
file=$
log_file=/tmp/tmp.log

JudgeExt(){
    if expr "$1" : ".*\.log" &> /dev/null;then
        :
    else
        echo "Usage: $0 xxx.log"
        exit
    fi
}

IpCount(){

    grep "ESTABLISHED" $ | gawk -F "[ :]+" '{++S[$(NF-3)]} END {for (key in S) print S[key],key}' | sort -rn -k1 | head - > $log_file

}

ipt(){
    local ip=$
    if [ `iptabls -L -n | grep "$ip" | wc -l` -lt  ];then
        iptabls -I INPUT -s $ip -j DROP
        echo "$line  is dorpped" >> /tmp/drop_list_$(date +%F).log
    fi

}

main(){

    JudgeExt $file
    while true
    do
        IpCount $file
        while read line
        do
            ip=`echo $line | gawk '{print $2}'`
            count=`echo $line | gawk '{print $1}'`
            if [ $count -gt  ];then
                ipt $ip
            fi
        done < $log_file
        sleep 

    done
}
main