yanistyle/iptables-rugov-block
1
0
Fork 0
mirror of https://github.com/freemedia-tech/iptables-rugov-block.git synced 2026-01-25 04:16:37 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix: use ip6tables for ipv6 rules resolves #1

Browse Source
This commit is contained in:
FreeMedia.Tech
2024-04-24 12:07:30 +02:00
parent bb7a8e59aa
commit 284b338935
1 changed files with 17 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
updater.sh
View File

@@ -36,19 +36,31 @@ done < "$NEW_IP_FILE"
added=0 added=0
removed=0 removed=0
for addr in "${new_addresses[@]}"; do for addr in "${new_addresses[@]}"; do
if ! sudo iptables -t raw -C PREROUTING -s "$addr" -j DROP &>/dev/null; then if [[ $(echo "$addr" | grep -c ":") -ge 1 ]]; then
FMT_IPCMD="ip6tables"
else
FMT_IPCMD="iptables"
fi
if ! sudo "$FMT_IPCMD" -n -t raw -C PREROUTING -s "$addr" -j DROP &>/dev/null; then
if [[ "$FMT_LOGS" ]]; then if [[ "$FMT_LOGS" ]]; then
iptables -t raw -A PREROUTING -s "$addr" -j LOG --log-prefix "Blocked RUGOV IP attempt: " "$FMT_IPCMD" -t raw -A PREROUTING -s "$addr" -j LOG --log-prefix "Blocked RUGOV IP attempt: "
fi fi
iptables -t raw -A PREROUTING -s "$addr" -j DROP "$FMT_IPCMD" -t raw -A PREROUTING -s "$addr" -j DROP
((added++)) || true ((added++)) || true
fi fi
done done
for addr in "${old_addresses[@]}"; do for addr in "${old_addresses[@]}"; do
if [[ $(echo "$addr" | grep -c ":") -ge 1 ]]; then
FMT_IPCMD="ip6tables"
else
FMT_IPCMD="iptables"
fi
if ! grep -q "$addr" "$NEW_IP_FILE"; then if ! grep -q "$addr" "$NEW_IP_FILE"; then
iptables -t raw -D PREROUTING -s "$addr" -j LOG --log-prefix "Blocked RUGOV IP attempt: " || true "$FMT_IPCMD" -t raw -D PREROUTING -s "$addr" -j LOG --log-prefix "Blocked RUGOV IP attempt: " || true
iptables -t raw -D PREROUTING -s "$addr" -j DROP "$FMT_IPCMD" -t raw -D PREROUTING -s "$addr" -j DROP
((removed++)) || true ((removed++)) || true
fi fi
done done