KeyHelp Community

Code: Select all

1.2.3.4
2.1.2.1
1.3.4.5
usw.

Code: Select all

#!/bin/bash
export PATH="/bin:/usr/bin:/sbin:/usr/sbin"
sleep 1
iptables -F
iptables -X
iptables -t nat -F
iptables -t nat -X
iptables -t mangle -F
iptables -t mangle -X
iptables -P INPUT ACCEPT
iptables -P FORWARD ACCEPT
iptables -P OUTPUT ACCEPT
wget https://example.com/blacklist.txt
cat blacklist.txt | xargs -n1 iptables -I INPUT -j DROP -s
rm blacklist.txt
rm blacklist.txt.*

Code: Select all

#!/bin/bash

##############
#
# This script adds IP ranges/IPs to chain droplist
#
##############

# Author: GwenDragon 2014-07-17
# Licence: Free use

# droplist files must reside in /root/droplists
# or you should cd to other full path
cd /root/droplists || exit;

# check if rule droplist exists
/sbin/iptables -S droplist >/dev/null 2>/dev/null
if [ $? == 0 ]; # return code is 0 if rule exists
then
    /sbin/iptables -D INPUT -j droplist >/dev/null 2>/dev/null ; # remove reference to chain droplist from INPUT chain
    /sbin/iptables -F droplist ; # flush existing chain droplist
    /sbin/iptables -X droplist ; # delete chain droplist
fi

/sbin/iptables -N droplist ; # create new chain droplist
/sbin/iptables -I INPUT -j droplist ; # insert chain on top of INPUT chain

# get files in droplist directory
for COUNTRY in *.zone ;
do
    CNA=`basename $COUNTRY .zone | tr '[:lower:]' '[:upper:]'` ; # get country id (uppercase) from filename
    CN=`basename $COUNTRY .zone`; # create filename for zone file
    for LINE in `cat $CN.zone` ; # read netmasks/IPs from file
    do
##      /sbin/iptables -A droplist -s $LINE -j LOG --log-prefix "IPTables: droplist $CNA " ; # append log rule for netmask/IP
        /sbin/iptables -A droplist -s $LINE -j DROP ; # append dropping rule for netmask/IP
    done
done

/sbin/iptables -A droplist -j RETURN ; # append a return from chain to droplist chain

exit 0 ;