diff --git a/setup/init-iptables-blocklist.sh b/setup/init-iptables-blocklist.sh index cc1f786..2f6730a 100644 --- a/setup/init-iptables-blocklist.sh +++ b/setup/init-iptables-blocklist.sh @@ -1 +1,23 @@ -#!/bin/bash \ No newline at end of file +#!/bin/bash + +############################################################### +### +### blocklist konfig +### +############################################################### + +echo '#!/bin/bash +iptables -D INPUT -j blocklist.de +iptables -F blocklist.de +iptables -X blocklist.de +iptables -N blocklist.de + +for IP in `curl -s -k http://blocklist.de/downloads/export-ips_all.txt | grep -v ":"`; +do + iptables -A blocklist.de -s $IP/32 -j DROP +done +iptables -A blocklist.de -j RETURN +iptables -I INPUT -j blocklist.de +' > /usr/local/bin/iptables_blocklist +chmod +x /usr/local/bin/iptables_blocklist +ln -s /usr/local/bin/iptables_blocklist /etc/cron.daily/iptables_blocklist \ No newline at end of file