https://github.com/uriel1998/ufw-iptables-archer

Simplifying (I hope) UFW and iptables, includes a utility to get blocklists and incorporate them.
https://github.com/uriel1998/ufw-iptables-archer

bash firewall shell ufw

Last synced: 6 months ago
JSON representation

Simplifying (I hope) UFW and iptables, includes a utility to get blocklists and incorporate them.

• Host: GitHub
• URL: https://github.com/uriel1998/ufw-iptables-archer
• Owner: uriel1998
• License: mit
• Created: 2014-11-16T16:58:17.000Z (almost 11 years ago)
• Default Branch: master
• Last Pushed: 2025-03-01T19:48:11.000Z (7 months ago)
• Last Synced: 2025-03-28T07:21:53.292Z (6 months ago)
• Topics: bash, firewall, shell, ufw
• Language: Shell
• Homepage:
• Size: 95.7 KB
• Stars: 10
• Watchers: 3
• Forks: 1
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
ufw-iptables-archer

===================

Simplifying (I hope) UFW and iptables for folks and serving as a reference for myself

Beware!  You're entering the ....

![danger zone!](https://raw.githubusercontent.com/uriel1998/ufw-iptables-archer/master/dangerzone.jpg)

Everything in /applications.d goes into /etc/ufw/applications.d. 

You'll need to change the owner to root. 

#ufw_setup.sh

I've provided two scripts so you can easily run one depending on your 

location; public or not public. Comment and uncomment as needed for what 

you want to expose to the LAN and interwebs. You will need to run this 

with superuser rights.

Edit the rules in the LAN area to reflect the subnet of your LAN, obvs.

You can use something like my [network control manager](https://github.com/uriel1998/networkcontrol-wicd-networkmanager)

 to configure which script is called.

#update_ipblock.sh

This is a script to automate the downloading, cleaning, and 

implementation of blocklists for IPTABLES to protect your computer or 

server from IPs associated with bad things like malware, child 

pornography, web exploits, and the like. I mean, if someone's gone to 

the bother to collect these blocklists, we might as well use them for 

legit purposes, right?

It can be used without my UFW script, but you'll want to uncomment the 

last two lines. You will need to run this with superuser rights.

 

Prerequisites: IPSET, which should be available for your distribution.