https://github.com/tomlobato/ipset_lists
ipset_lists fetches ip and network (black/white)lists and creates Linux ipset`s from it
https://github.com/tomlobato/ipset_lists
firewall ipset iptables linux ruby security
Last synced: 2 months ago
JSON representation
ipset_lists fetches ip and network (black/white)lists and creates Linux ipset`s from it
- Host: GitHub
- URL: https://github.com/tomlobato/ipset_lists
- Owner: tomlobato
- Created: 2018-03-30T00:19:14.000Z (over 8 years ago)
- Default Branch: master
- Last Pushed: 2018-04-02T21:08:09.000Z (over 8 years ago)
- Last Synced: 2025-04-08T22:46:28.668Z (about 1 year ago)
- Topics: firewall, ipset, iptables, linux, ruby, security
- Language: Ruby
- Homepage:
- Size: 13.7 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# ipset_lists
## Install
```bash
curl https://raw.githubusercontent.com/tomlobato/ipset_lists/master/ipset_lists > ipset_lists
chmod 755 ipset_lists
mv ipset_lists /usr/local/sbin/ipset_lists
```
## Usage
```bash
# ipset_lists country_br
Created ipset country_br (ipv4: 3028, ipv6: 5137)
# ipset_lists country_ru
Created ipset country_ru (ipv4: 7146, ipv6: 1555)
# ipset_lists aws
Created ipset aws (ipv4: 1110, ipv6: 408)
```
## iptables examples:
```bash
iptables -I INPUT -p tcp -m multiport --dport 80,443,53 -m set --match-set country_br src -j DROP
iptables -I INPUT -m set --match-set country_br src -j REJECT
```
## Lists supported
- Countries (```ipset_lists country_br```)
- AWS (```ipset_lists aws```)
On the way...
- CDNs (Cloudfare, MaxCDN, CloudFront...)
- Tor exit nodes
- all_good (sum of the good guys: pingdom, cdn\`s...)
- all_bad (sum of the evil incarnation on the earth)
- bots
- MaxMind GeoIP Anonymous Proxies
- Firehol blocklist
## TODO
- Add more sources
- Turn into a gem
- Instrumentation: analize iptables performance (w and w/o ipset\`s)