11 lines
623 B
Bash
11 lines
623 B
Bash
rm china.txt
|
|
curl https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/ip2location_country/ip2location_country_cn.netset >china.txt
|
|
my_file=$(cat china.txt |grep -v "#")
|
|
/sbin/ipset -q flush china
|
|
/sbin/ipset -q create china hash:net
|
|
for row_data in $my_file; do /sbin/ipset add china ${row_data}; done
|
|
##/sbin/iptables -A DOCKER-USER -i eth0 -m set --match-set china src -j DROP
|
|
##/sbin/iptables -I INPUT -m set --match-set china src -j DROP
|
|
##/sbin/iptables -A FORWARD -p tcp --dport 443 -m set --match-set china dst -j DROP
|
|
##/sbin/iptables -A FORWARD -p tcp --dport 80 -m set --match-set china dst -j DROP
|