rm russia.txt
curl https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/ip2location_country/ip2location_country_ru.netset >russia.txt
my_file=$(cat russia.txt |grep -v "#")
/sbin/ipset -q flush russia
/sbin/ipset -q create russia hash:net
for row_data in $my_file; do /sbin/ipset add russia ${row_data}; done
/sbin/iptables -I INPUT -m set --match-set russia src -j DROP
/sbin/iptables -A FORWARD -p tcp --dport 0:65535 -m set --match-set russia dst -j DROP
#/sbin/iptables -A FORWARD -p tcp --dport 80 -m set --match-set russia dst -j DROP