eXeC64 · April 23, 2015 14:50
diff --git a/block-countries.sh b/block-countries.sh
 #!/bin/bash
 set -e

 chain_name="filter_countries"
 blacklist="af bd cn hk"
 
 #-------------------------------------------------------------------------------

 #Clear out the rules
 iptables -F $chain_name

 #Fetch a fresh list of ips blocks to block
 addresses=""
 for c in $blacklist
 do
  uri="http://www.ipdeny.com/ipblocks/data/aggregated/$c-aggregated.zone"
  new_addresses=$(grep -v "^#|^$" <(wget -O - $uri))
  addresses=$(echo -e "$addresses\n$new_addresses")
 done

 #Sort and filter them
 addresses=$(echo "$addresses" | sort -g | uniq)

 for ipblock in $addresses
 do
  echo "blocking $ipblock"
  iptables -A $chain_name -s $ipblock -j DROP
 done

 exit 0
	#!/bin/bash
	set -e

	chain_name="filter_countries"
	blacklist="af bd cn hk"

	#-------------------------------------------------------------------------------

	#Clear out the rules
	iptables -F $chain_name

	#Fetch a fresh list of ips blocks to block
	addresses=""
	for c in $blacklist
	do
	uri="http://www.ipdeny.com/ipblocks/data/aggregated/$c-aggregated.zone"
	new_addresses=$(grep -v "^#\|^$" <(wget -O - $uri))
	addresses=$(echo -e "$addresses\n$new_addresses")
	done

	#Sort and filter them
	addresses=$(echo "$addresses" \| sort -g \| uniq)

	for ipblock in $addresses
	do
	echo "blocking $ipblock"
	iptables -A $chain_name -s $ipblock -j DROP
	done

	exit 0