123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960 |
- #!/bin/bash
- BADGUYS_FILE=""
- CHAIN_NAME="CINSARMY_IPS"
- FIREWALL="/sbin/iptables"
- ETH=""
- echo "Clearing firewall."
- $FIREWALL -P INPUT ACCEPT
- $FIREWALL -P FORWARD ACCEPT
- $FIREWALL -P OUTPUT ACCEPT
- $FIREWALL -t nat -F
- $FIREWALL -t mangle -F
- $FIREWALL -F
- $FIREWALL -X
- echo "Restoring firewall from iptables.rules."
- /sbin/iptables-restore < /etc/iptables.rules
- echo "Restoring fail2ban rules."
- sudo systemctl restart fail2ban
- echo "Downloading cinsarmy IP list..."
- wget -c https://cinsscore.com/list/ci-badguys.txt -O $BADGUYS_FILE
- echo "Making sure it downloaded."
- if [[ ! -f "$BADGUYS_FILE" ]]; then
- echo "File not found: $BADGUYS_FILE"
- exit 1
- fi
- echo "Processing the list..."
- if $FIREWALL -L $CHAIN_NAME -n &> /dev/null; then
- echo "Chain $CHAIN_NAME already exists."
- $FIREWALL -F $CHAIN_NAME
- else
- echo "Creating chain $CHAIN_NAME."
- $FIREWALL -N $CHAIN_NAME
- fi
- while IFS= read -r ip; do
-
- if [[ -n "$ip" ]]; then
-
- $FIREWALL -A $CHAIN_NAME -i $ETH -s "$ip" -j DROP
-
- fi
- done < "$BADGUYS_FILE"
- $FIREWALL -A FORWARD -j $CHAIN_NAME
- rm $BADGUYS_FILE
- echo "Bad guys list has been processed, and deleted."
|