diff --git a/blacklist-countries.sh b/blacklist-countries.sh index 3a3d20d..92dae0d 100644 --- a/blacklist-countries.sh +++ b/blacklist-countries.sh @@ -1,5 +1,6 @@ #!/bin/sh +NFT=/usr/sbin/nft ripedeny_file=/var/tmp/ripe_deny cd /var/tmp @@ -10,14 +11,10 @@ GET http://antispam00.evolix.org/spam/ripe.cidr.md5 > ripe.cidr.md5 GET http://antispam00.evolix.org/spam/ripe.cidr > ripe.cidr for i in CN KR RU; do - grep "^$i|" ripe.cidr >> $ripedeny_file - done -/sbin/iptables -F NEEDRESTRICT - for i in $(cat $ripedeny_file); do BLOCK=$(echo $i | cut -d"|" -f2) - /sbin/iptables -I NEEDRESTRICT -s $BLOCK -j DROP + $NFT add element inet minifirewall minifirewall_blocked_ips {$BLOCK} done