diff --git a/set_ip_blacklist.sh b/set_ip_blacklist.sh index 2e4fdb3..6be1b64 100644 --- a/set_ip_blacklist.sh +++ b/set_ip_blacklist.sh @@ -8,8 +8,8 @@ set -x /sbin/ipset -q create ipsum hash:net /bin/bash -c 'for ip in $(/usr/bin/curl --compressed https://raw.githubusercontent.com/stamparm/ipsum/master/ipsum.txt 2>/dev/null | grep -v "#" | grep -v -E "\s[1-2]$" | cut -f 1); do /sbin/ipset add ipsum $ip; done' /sbin/iptables -I INPUT -m set --match-set ipsum src -j DROP -/sbin/iptables -A FORWARD -p tcp --dport 443 -m set --match-set ipsum dst -j DROP -/sbin/iptables -A FORWARD -p tcp --dport 80 -m set --match-set ipsum dst -j DROP +/sbin/iptables -A FORWARD -p tcp --dport 0:65535 -m set --match-set ipsum dst -j DROP +#/sbin/iptables -A FORWARD -p tcp --dport 80 -m set --match-set ipsum dst -j DROP rm firehol_level3.netset wget https://iplists.firehol.org/files/firehol_level3.netset @@ -18,8 +18,8 @@ my_file=$(cat firehol_level3.netset |grep -v "#") /sbin/ipset -q create fireh hash:net for row_data in $my_file; do /sbin/ipset add fireh ${row_data}; done /sbin/iptables -I INPUT -m set --match-set fireh src -j DROP -/sbin/iptables -A FORWARD -p tcp --dport 443 -m set --match-set fireh dst -j DROP -/sbin/iptables -A FORWARD -p tcp --dport 80 -m set --match-set fireh dst -j DROP +/sbin/iptables -A FORWARD -p tcp --dport 0:65535 -m set --match-set fireh dst -j DROP +#/sbin/iptables -A FORWARD -p tcp --dport 80 -m set --match-set fireh dst -j DROP /sbin/ipset -q flush blockde @@ -30,8 +30,8 @@ wget -O blocklist.de https://iplists.firehol.org/files/blocklist_de.ipset my_file=$(awk 'length($1) < 16 { print $1 }' blocklist.de) for row_data in $my_file; do /sbin/ipset add blockde ${row_data}; done /sbin/iptables -I INPUT -m set --match-set blockde src -j DROP -/sbin/iptables -A FORWARD -p tcp --dport 443 -m set --match-set blockde dst -j DROP -/sbin/iptables -A FORWARD -p tcp --dport 80 -m set --match-set blockde dst -j DROP +/sbin/iptables -A FORWARD -p tcp --dport 0:65535 -m set --match-set blockde dst -j DROP +#/sbin/iptables -A FORWARD -p tcp --dport 80 -m set --match-set blockde dst -j DROP /sbin/ipset -q flush blockde6 @@ -40,8 +40,8 @@ my_file=$(awk 'length($1) > 16 { print $1 }' blocklist.de) echo setting ipv6... for row_data in $my_file; do /sbin/ipset add blockde6 ${row_data}; done /sbin/ip6tables -I INPUT -m set --match-set blockde6 src -j DROP -/sbin/iptables -A FORWARD -p tcp --dport 443 -m set --match-set blockde6 dst -j DROP -/sbin/iptables -A FORWARD -p tcp --dport 80 -m set --match-set blockde6 dst -j DROP +/sbin/iptables -A FORWARD -p tcp --dport 0:65535 -m set --match-set blockde6 dst -j DROP +#/sbin/iptables -A FORWARD -p tcp --dport 80 -m set --match-set blockde6 dst -j DROP @@ -52,7 +52,7 @@ for row_data in $my_file; do /sbin/ipset add tornodes ${row_data}; done /sbin/ipset -q create tornodes hash:net for row_data in $my_file; do /sbin/ipset add tornodes ${row_data}; done /sbin/iptables -I INPUT -m set --match-set tornodes src -j DROP -/sbin/iptables -A FORWARD -p tcp --dport 443 -m set --match-set tornodes dst -j DROP -/sbin/iptables -A FORWARD -p tcp --dport 80 -m set --match-set tornodes dst -j DROP +/sbin/iptables -A FORWARD -p tcp --dport 0:65535 -m set --match-set tornodes dst -j DROP +#/sbin/iptables -A FORWARD -p tcp --dport 80 -m set --match-set tornodes dst -j DROP