add iptables blacklist

roles/deploy-web/files/blacklist.sh

@@ -6,6 +6,9 @@ BLACKLIST=/etc/sentinel/blacklist
 chain_count=$(iptables -L BLACKLIST | wc -l)
 if [ ${chain_count} -eq 0 ]; then
 	iptables -N BLACKLIST
+	iptables -A INPUT -p tcp -m tcp --dport 80 -j BLACKLIST
+	iptables -A INPUT -p tcp -m tcp --dport 443 -j BLACKLIST
+
 fi
 if [ ! -f ${BLACKLIST} ]; then
 	touch ${BLACKLIST}
@@ -49,5 +52,4 @@ do
 		cat ${BLACKLIST} >> ${MAIL}
 		cat ${MAIL} |mail -s "Blacklist IP ${i}" valczebackup@gmail.com
 	fi
-	#rm $directory_host/*
 done