minifirewall/blacklist-countries.sh

#!/bin/sh

ripedeny_file=/var/tmp/ripe_deny

cd /var/tmp

rm -f $ripedeny_file

GET http://antispam00.evolix.org/spam/ripe.cidr.md5 > ripe.cidr.md5
GET http://antispam00.evolix.org/spam/ripe.cidr > ripe.cidr

for i in CN KR RU; do

    grep "^$i|" ripe.cidr >> $ripedeny_file

done

/sbin/iptables -F NEEDRESTRICT

for i in $(cat $ripedeny_file); do
    BLOCK=$(echo $i | cut -d"|" -f2)
    /sbin/iptables -I NEEDRESTRICT -s $BLOCK -j DROP
done