#!/bin/bash
FACEBOOK_ALLOW="192.168.2.10"
iptables -N FACEBOOK

iptables -I FORWARD -m tcp -p tcp -m iprange --dst-range 66.220.144.0-66.220.159.255 --dport 443 -j FACEBOOK
iptables -I FORWARD -m tcp -p tcp -m iprange --dst-range 69.63.176.0-69.63.191.255 --dport 443 -j FACEBOOK
iptables -I FORWARD -m tcp -p tcp -m iprange --dst-range 204.15.20.0-204.15.23.255 --dport 443 -j FACEBOOK
iptables -I FORWARD -m tcp -p tcp -m iprange --dst-range 66.220.144.0-66.220.159.255 --dport 80 -j FACEBOOK
iptables -I FORWARD -m tcp -p tcp -m iprange --dst-range 69.63.176.0-69.63.191.255 --dport 80 -j FACEBOOK
iptables -I FORWARD -m tcp -p tcp -m iprange --dst-range 204.15.20.0-204.15.23.255 --dport 80 -j FACEBOOK

#Un rango nuevo que no estaba antes
iptables -A FORWARD -m tcp -p tcp -m iprange --dst-range 69.171.224.0-69.171.255.255 --dport 80 -j FACEBOOK
iptables -A FORWARD -m tcp -p tcp -m iprange --dst-range 69.171.224.0-69.171.255.255 --dport 443 -j FACEBOOK

iptables -A FORWARD -m tcp -p tcp -m iprange --dst-range 69.208.0.0-69.233.255.255 --dport 80 -j FACEBOOK
iptables -A FORWARD -m tcp -p tcp -m iprange --dst-range 69.208.0.0-69.223.255.255 --dport 443 -j FACEBOOK

iptables -A FORWARD -m tcp -p tcp -m iprange --dst-range 72.32.231.8 --dport 80 -j FACEBOOK

iptables -A FORWARD -d 69.208.0.0/12 -j FACEBOOK
iptables -A FORWARD -d 65.201.208.24/29 -j FACEBOOK
iptables -A FORWARD -d 65.204.104.128/28 -j FACEBOOK
iptables -A FORWARD -d 66.93.78.176/29 -j FACEBOOK
iptables -A FORWARD -d 66.92.180.48/28 -j FACEBOOK
iptables -A FORWARD -d 67.200.105.48/30 -j FACEBOOK
iptables -A FORWARD -d 69.63.176.0/20 -j FACEBOOK
#este ya esta arriba pero por si las moscas :)
iptables -A FORWARD -d 69.171.224.0/19 -j FACEBOOK
iptables -A FORWARD -d 74.119.76.0/22 -j FACEBOOK
iptables -A FORWARD -d 204.15.20.0/22 -j FACEBOOK
iptables -A FORWARD -d 204.15.20.0/22 -j FACEBOOK
iptables -A FORWARD -d 66.220.144.0/20 -j FACEBOOK
iptables -A FORWARD -d 173.252.64.0/18 -j FACEBOOK
# otros mas para facebook - ELIMINAR SI BLOKEA
iptables -I FORWARD -p tcp -m iprange --dst-range 66.220.144.0-66.220.159.255 --dport 443 -j DROP
iptables -I FORWARD -p tcp -m iprange --dst-range 69.63.176.0-69.63.191.255 --dport 443 -j DROP
iptables -I FORWARD -p tcp -m iprange --dst-range 204.15.20.0-204.15.23.255 --dport 443 -j DROP