From 8b2c637df2b83b72febd2489ac142cb6efb64a40 Mon Sep 17 00:00:00 2001 From: fossilfranv Date: Wed, 3 May 2023 16:01:48 -0700 Subject: [PATCH] Add 'blockrussia.sh' --- blockrussia.sh | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 blockrussia.sh diff --git a/blockrussia.sh b/blockrussia.sh new file mode 100644 index 0000000..4da3db0 --- /dev/null +++ b/blockrussia.sh @@ -0,0 +1,10 @@ +rm russia.txt +curl https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/ip2location_country/ip2location_country_ru.netset >russia.txt +my_file=$(cat russia.txt |grep -v "#") +/sbin/ipset -q flush russia +/sbin/ipset -q create russia hash:net +for row_data in $my_file; do /sbin/ipset add russia ${row_data}; done +##/sbin/iptables -A DOCKER-USER -i eth0 -m set --match-set russia src -j DROP +##/sbin/iptables -I INPUT -m set --match-set russia src -j DROP +##/sbin/iptables -A FORWARD -p tcp --dport 443 -m set --match-set russia dst -j DROP +##/sbin/iptables -A FORWARD -p tcp --dport 80 -m set --match-set russia dst -j DROP