So, I wrote a nice little one liner for one of our customers that wanted to blanket ban Russia (even though I said it wasn’t a good idea, or marginally effective to stop attacks). Might help with spam or other stuff though, and anyway, the customer is always ‘wrong’, it’s up to us to make sure that they do it wrongly right. ;-D<\/p>\n
\r\ncurl http:\/\/www.ipdeny.com\/ipblocks\/data\/countries\/ru.zone -o russia_ips_all.txt; cat russia_ips_all.txt | xargs -i echo \/sbin\/iptables -I INPUT -s {} -j DROP\r\n<\/pre>\nHere is how I achieved it above. This bans all the IP’s from russia. But, if you aren’t very equal opportunities :(, you can ban all kinds of countries:<\/p>\n
http:\/\/www.ipdeny.com\/ipblocks\/<\/a><\/p>\nJust take a look at this, and change the url, as such. It doesn’t matter what the variables say (even if they say russia, just change the url directly after curl). For instance<\/p>\n
\r\nhttp:\/\/www.ipdeny.com\/ipblocks\/data\/countries\/pl.zone -o ips_all.txt; cat ips_all.txt | xargs -i echo \/sbin\/iptables -I INPUT -s {} -j DROP\r\n<\/pre>\nI was really quite happy with this little oneliner. \ud83d\ude00<\/p>\n
Cheers &
\nBest wishes,
\nAdam<\/p>\n","protected":false},"excerpt":{"rendered":"
So, I wrote a nice little one liner for one of our customers that wanted to blanket ban Russia (even though I said it wasn’t a good idea, or marginally effective to stop attacks). Might help with spam or other … Continue reading