Add script for blacklist countries with RIPE LIR informations

This commit is contained in:
Gregory Colpart 2009-08-13 01:01:59 +02:00
parent c3a66eb333
commit 7ff2fd64c4
1 changed files with 23 additions and 0 deletions

23
blacklist-countries.sh Normal file
View File

@ -0,0 +1,23 @@
#!/bin/sh
ripedeny_file=/var/tmp/ripe_deny
cd /var/tmp
rm -f $ripedeny_file
GET http://zidane.evolix.net/spam/ripe.cidr.md5 > ripe.cidr.md5
GET http://zidane.evolix.net/spam/ripe.cidr > ripe.cidr
for i in CN KR RU; do
grep "^$i|" ripe.cidr >> $ripedeny_file
done
/sbin/iptables -F NEEDRESTRICT
for i in $(cat $ripedeny_file); do
BLOCK=$(echo $i | cut -d"|" -f2)
/sbin/iptables -I NEEDRESTRICT -s $BLOCK -j DROP
done