diff --git a/blockchina.sh b/blockchina.sh new file mode 100644 index 0000000..bd2e2e7 --- /dev/null +++ b/blockchina.sh @@ -0,0 +1,10 @@ +rm china.txt +curl https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/ip2location_country/ip2location_country_cn.netset >china.txt +my_file=$(cat china.txt |grep -v "#") +/sbin/ipset -q flush china +/sbin/ipset -q create china hash:net +for row_data in $my_file; do /sbin/ipset add china ${row_data}; done +##/sbin/iptables -A DOCKER-USER -i eth0 -m set --match-set china src -j DROP +##/sbin/iptables -I INPUT -m set --match-set china src -j DROP +##/sbin/iptables -A FORWARD -p tcp --dport 443 -m set --match-set china dst -j DROP +##/sbin/iptables -A FORWARD -p tcp --dport 80 -m set --match-set china dst -j DROP