Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/m0zgen/geo2drop
⚙️ Ban countries with firewalld and ipset
https://github.com/m0zgen/geo2drop
Last synced: 1 day ago
JSON representation
⚙️ Ban countries with firewalld and ipset
- Host: GitHub
- URL: https://github.com/m0zgen/geo2drop
- Owner: m0zgen
- Created: 2023-10-17T04:56:44.000Z (about 1 year ago)
- Default Branch: master
- Last Pushed: 2024-10-29T13:03:59.000Z (16 days ago)
- Last Synced: 2024-10-29T14:53:47.531Z (16 days ago)
- Language: Shell
- Size: 3.71 MB
- Stars: 2
- Watchers: 1
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Ban Countries
With installed firewalld drop zone and ipset, you can block countries with the following script.
Change the variable `COUNTRIES` to the country you want to block.
```bash
ZONES="br cn in"
```
## Features
- [x] Download defined zones from ipdeny.com
- [x] Download all zones from ipdeny.com with archive
- [x] Download zones to local folder
- [x] Setup ipsets from local downloaded zones
- [x] Setup ipset from downloaded archive
- [x] Delete ipset from firewalld
- [x] Setup ipset from local downloaded zones
- [x] Setup ipset from downloaded archive
- [x] Add zones from files located in repo (if ipdeny site not available)
- [x] Use alternative zones mirror (if ipdeny site not available)
## Usage
You can use the script with the following command:
```bash
./run.sh -sa
```
Or set custom `local.list` file and run:
```bash
./run.sh -ll -sa
```
Or just run:
```bash
./run.sh
```
You can just download zones to local catalog:
```bash
./run.sh -do
```
You can pass country code with `-c` option:
```bash
./run.sh -c "br"
```
Script will try to download `br` zone from ipdeny.com and setup ipset from local downloaded zones, if ipdeny site not available, script will setup ipset from repo located zones.
## Usage commands
You can use the script with the following command `./run.sh -h`:
```bash
Usage: ./run.sh [options]
Options:
-ln, --list-name Name of the ipset list (default: blcountries)
-mx, --maxelem Maximum number of elements in the ipset list (default: 131072)
-hx, --hashsize Hash size of the ipset list (default: 32768)
-am, --alternative-mirror Another IP source mirror (default: ipdeny.com)
-daz, --download-all-zones Download all country zones from ipdeny.com (all-zones.tar.gz)
-di, --delete-ipset Delete ipset from firewalld (default: blcountries)
-dl, --download-local Download zones to local folder
-sl, --setup-from-local Setup ipsets from local downloaded zones
-sa, --setup-from-archive Setup ipset from downloaded archive
-h, --help Show this message (help)
```
## AllZones from IpDeny
If [ipdeny.com](https://www.ipdeny.com/ipblocks/) restricted from your region, you can download regularly updated file from this repo.
Download example:
```bash
wget https://github.com/m0zgen/geo2drop/raw/data/all-zones.tar.gz
```