Update blacklist-countries.sh script to be used with nftables
This commit is contained in:
parent
1b19f7084b
commit
6bc1b75cd2
|
@ -1,5 +1,6 @@
|
|||
#!/bin/sh
|
||||
|
||||
NFT=/usr/sbin/nft
|
||||
ripedeny_file=/var/tmp/ripe_deny
|
||||
|
||||
cd /var/tmp
|
||||
|
@ -10,14 +11,10 @@ GET http://antispam00.evolix.org/spam/ripe.cidr.md5 > ripe.cidr.md5
|
|||
GET http://antispam00.evolix.org/spam/ripe.cidr > ripe.cidr
|
||||
|
||||
for i in CN KR RU; do
|
||||
|
||||
grep "^$i|" ripe.cidr >> $ripedeny_file
|
||||
|
||||
done
|
||||
|
||||
/sbin/iptables -F NEEDRESTRICT
|
||||
|
||||
for i in $(cat $ripedeny_file); do
|
||||
BLOCK=$(echo $i | cut -d"|" -f2)
|
||||
/sbin/iptables -I NEEDRESTRICT -s $BLOCK -j DROP
|
||||
$NFT add element inet minifirewall minifirewall_blocked_ips {$BLOCK}
|
||||
done
|
||||
|
|
Loading…
Reference in New Issue