rm russia.txt curl https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/ip2location_country/ip2location_country_ru.netset >russia.txt my_file=$(cat russia.txt |grep -v "#") /sbin/ipset -q flush russia /sbin/ipset -q create russia hash:net for row_data in $my_file; do /sbin/ipset add russia ${row_data}; done ##/sbin/iptables -A DOCKER-USER -i eth0 -m set --match-set russia src -j DROP ##/sbin/iptables -I INPUT -m set --match-set russia src -j DROP ##/sbin/iptables -A FORWARD -p tcp --dport 443 -m set --match-set russia dst -j DROP ##/sbin/iptables -A FORWARD -p tcp --dport 80 -m set --match-set russia dst -j DROP