Linux fedora shell script checker

Треб. Написать скрипт для fedora linux

Do Check netstat for syn_recv every (variable $period_of_time) 0.5 second

If IP with syn_recv exists more than (variable $ddos_time) ~ 1 second then execute /sbin/route add $IP reject

Done

Пример такой но чаще проверка на ддос

while true; do date; netstat -n -p | grep SYN_REC | awk '{print $5}' | awk -F: '{print $1}' | sort | uniq; netstat -n -p | grep SYN_REC | awk '{print $5}' | awk -F: '{print $1}' | sort | uniq > /tmp/ips.txt;for IP in `cat /tmp/ips.txt`; do /sbin/route add $IP reject; iptables -A INPUT -s $IP -j DROP; done; date; sleep 5; done;