load-net

iptables_NEW-2

Jun 14th, 2021
515
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. #!/bin/sh
  2. ###http://blog.ls20.com/securing-your-asterisk-voip-server-with-iptables/
  3. ###Политика по-умолчанию
  4. /sbin/iptables -P INPUT DROP
  5. #/sbin/iptables -P INPUT ACCEPT
  6. #/sbin/iptables -P FORWARD DROP
  7. /sbin/iptables -P FORWARD ACCEPT
  8. /sbin/iptables -P OUTPUT ACCEPT
  9.  
  10.  
  11. ###Clear Rules
  12. iptables -F
  13. /sbin/iptables -F INPUT
  14. /sbin/iptables -F OUTPUT
  15. /sbin/iptables -F FORWARD
  16. /sbin/iptables -F FORWARD -t mangle
  17. /sbin/iptables -F POSTROUTING -t nat
  18. /sbin/iptables -F PREROUTING -t nat
  19. /sbin/iptables -F PREROUTING -t mangle
  20. /sbin/iptables -F OUTPUT -t nat
  21.  
  22. /sbin/iptables -N f2b-asterisk-udp
  23. /sbin/iptables -N f2b-SSH
  24. /sbin/iptables -N Country-Russia
  25. /sbin/iptables -N f2b-ASTERISK-security
  26. /sbin/iptables -N SIP-Operators
  27. /sbin/iptables -N SIP-Endpoints-Static
  28.  
  29.  
  30. /sbin/iptables -F f2b-asterisk-udp
  31. /sbin/iptables -F f2b-SSH
  32. /sbin/iptables -F Country-Russia
  33. /sbin/iptables -F f2b-ASTERISK-security
  34. /sbin/iptables -F SIP-Operators
  35. /sbin/iptables -F SIP-Endpoints-Static
  36.  
  37.  
  38. /sbin/iptables -A f2b-asterisk-udp -j RETURN
  39. /sbin/iptables -A f2b-SSH -j RETURN
  40. /sbin/iptables -A f2b-ASTERISK-security -j RETURN
  41. /sbin/iptables -A SIP-Operators -j RETURN
  42. /sbin/iptables -A SIP-Endpoints-Static -j RETURN
  43.  
  44. /sbin/iptables -A INPUT -p all -j SIP-Operators
  45. /sbin/iptables -A INPUT -p all -j SIP-Endpoints-Static
  46. /sbin/iptables -A INPUT -p all -j Country-Russia
  47. /sbin/iptables -A INPUT -p all -j f2b-ASTERISK-security
  48. /sbin/iptables -A INPUT -p all -j f2b-SSH
  49.  
  50. /etc/asterisk/IP_Russia.sh
  51. #############################################################################
  52. # drop INVALID connections
  53. ##############################################################################
  54. /sbin/iptables -A INPUT -m state --state INVALID -j DROP
  55. /sbin/iptables -A OUTPUT -m state --state INVALID -j DROP
  56. /sbin/iptables -A FORWARD -m state --state INVALID -j DROP
  57.  
  58. #/sbin/iptables -A INPUT -p icmp -m icmp --icmp-type 3 -j REJECT --reject-with icmp-host-prohibited
  59. /sbin/iptables -A INPUT -p icmp -m icmp --icmp-type 4 -j REJECT --reject-with icmp-host-prohibited
  60. /sbin/iptables -A INPUT -p icmp -m icmp --icmp-type 5 -j REJECT --reject-with icmp-host-prohibited
  61. /sbin/iptables -A INPUT -p icmp -m icmp --icmp-type 9 -j REJECT --reject-with icmp-host-prohibited
  62. /sbin/iptables -A INPUT -p icmp -m icmp --icmp-type 10 -j REJECT --reject-with icmp-host-prohibited
  63. /sbin/iptables -A INPUT -p icmp -m icmp --icmp-type 11 -j REJECT --reject-with icmp-host-prohibited
  64. /sbin/iptables -A INPUT -p icmp -m icmp --icmp-type 12 -j REJECT --reject-with icmp-host-prohibited
  65. /sbin/iptables -A INPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT
  66.  
  67. ####################################################################################################
  68. #                       Доступ по доверенным интерфейсам lo, eth0                                #
  69. ####################################################################################################
  70. /sbin/iptables -A INPUT -i lo -j ACCEPT
  71. /sbin/iptables -A OUTPUT -o lo -j ACCEPT
  72.  
  73. ####################################################################################################
  74. #Входящий доступ по портам  21 (FTP), 22 (SSH), 80 (HTTP), 8080 (HTTP)
  75. ####################################################################################################
  76.  
  77. #SIP Providers
  78. /sbin/iptables -I SIP-Operators -s 195.239.174.100 -p udp --dport 5060 -j ACCEPT # mpbx.sip.beeline.ru (195.239.174.100)
  79. /sbin/iptables -I SIP-Operators -s 193.201.229.35 -p udp --dport 5060 -j ACCEPT # sbc.megafon.ru (193.201.229.35)
  80. /sbin/iptables -I SIP-Operators -s 80.75.130.83 -p udp --dport 5060 -j ACCEPT # login.mtt.ru (80.75.130.83)
  81. /sbin/iptables -I SIP-Operators -s 193.201.229.35 -p udp --dport 5060 -j ACCEPT # sbc.megafon.ru (193.201.229.35).
  82. /sbin/iptables -I SIP-Operators -s 77.51.247.44 -p udp --dport 5060 -j ACCEPT # 665489.15.rt.ru (77.51.247.44)
  83. /sbin/iptables -I SIP-Operators -s 188.234.136.49 -p udp --dport 5060 -j ACCEPT # voip.domru.ru (188.234.136.49)
  84. /sbin/iptables -I SIP-Operators -s 95.167.163.148 -p udp --dport 5060 -j ACCEPT # 021873.19.rt.ru (95.167.163.148)
  85. /sbin/iptables -I SIP-Operators -s 193.84.31.23 -p udp --dport 5060 -j ACCEPT # UTB
  86. /sbin/iptables -I SIP-Operators -s 212.53.40.40 -p udp --dport 5060 -j ACCEPT # sipnet.ru (212.53.40.40)
  87. /sbin/iptables -I SIP-Operators -s 188.186.156.140 -p udp --dport 5060 -j ACCEPT # vpbx491202069.domru.biz (188.186.156.140)
  88. /sbin/iptables -I SIP-Operators -s 109.107.176.27 -p udp --dport 5060 -j ACCEPT # Moscow TL (109.107.176.27)
  89. /sbin/iptables -I SIP-Operators -s 195.2.195.9 -p udp --dport 5060 -j ACCEPT # RCOM (195.2.195.9)
  90.  
  91. /sbin/iptables -I SIP-Operators -s 37.139.38.0/24  -p udp --dport 5060 -j ACCEPT        #zadarma
  92. /sbin/iptables -I SIP-Operators -s 185.45.152.128/28   -p udp --dport 5060 -j ACCEPT    #zadarma
  93. /sbin/iptables -I SIP-Operators -s 185.45.152.160/27  -p udp --dport 5060 -j ACCEPT     #zadarma
  94. /sbin/iptables -I SIP-Operators -s 178.0.0.0/8 -p tcp --dport 5060 -j ACCEPT # ELENABILAIN
  95.  
  96. #SIP Endpoints with Static IP
  97. /sbin/iptables -A INPUT -s 176.59.192.0/19   -p all -j ACCEPT #mobileTELE2
  98. /sbin/iptables -A INPUT -s 178.72.0.0/15   -p all -j ACCEPT #mobileTELE2
  99. /sbin/iptables -A INPUT -s 192.168.1.0/24  -p all -j ACCEPT #mobileTELE2
  100. /sbin/iptables -A INPUT -s 87.0.0.0/8  -p all -j ACCEPT #mobileTELE2
  101. /sbin/iptables -I INPUT -s 10.10.50.0/24 -p all -j ACCEPT #HOME_local
  102. /sbin/iptables -I INPUT -s 10.20.70.0/24 -p all -j ACCEPT #HOME_local
  103. /sbin/iptables -I INPUT -s 176.58.0.0/15 -p all -j ACCEPT #tele2
  104. ############ Адреса через тире дипазон если у вас ######################################
  105. /sbin/iptables -I INPUT -m iprange --src-range  109.105.164.0-109.105.167.255 -p all -j ACCEPT #HOME
  106.  
  107. ####################################################################################################
  108. # Asterisk SIP and ATS Asterisk
  109. ####################################################################################################
  110. #Фильтрация по именам сканеров
  111. /sbin/iptables -A INPUT -p udp --dport 5060 -m string --string "friendly-scanner" --algo bm -j DROP
  112. /sbin/iptables -A INPUT -p udp --dport 5060 -m string --string "sip-scan" --algo bm -j DROP
  113. /sbin/iptables -A INPUT -p udp --dport 5060 -m string --string "sundayddr" --algo bm -j DROP
  114. /sbin/iptables -A INPUT -p udp --dport 5060 -m string --string "iWar" --algo bm -j DROP
  115. /sbin/iptables -A INPUT -p udp --dport 5060 -m string --string "sipsak" --algo bm -j DROP
  116. /sbin/iptables -A INPUT -p udp --dport 5060 -m string --string "sipvicious" --algo bm -j DROP
  117. /sbin/iptables -A INPUT -p udp --dport 5060 -m string --string "sipcli" --algo bm -j DROP
  118. /sbin/iptables -A INPUT -p udp --dport 5060 -m string --string "VaxSIPUserAgent" --algo bm -j DROP
  119. #
  120.  
  121. #/sbin/iptables -A INPUT -i enp0s3  -p tcp -m tcp --dport 1701 -j ACCEPT
  122. /sbin/iptables -A INPUT -i enp0s3  -p udp -m udp --dport 5060 -j ACCEPT
  123. /sbin/iptables -A INPUT -i enp0s3  -p tcp -m tcp --dport 5060 -j ACCEPT
  124. /sbin/iptables -A INPUT -i enp0s3  -p udp -m udp --dport 10000:20000 -j ACCEPT
  125. #/sbin/iptables -A INPUT -i enp0s3  -p tcp -m tcp --dport 55666 -j ACCEPT
  126.  
  127. systemctl restart fail2ban
  128. /sbin/iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
  129. /sbin/iptables-save  > /etc/sysconfig/iptables
  130.  
  131.  
  132.  
  133.  
  134. #########################################################
  135.  
  136. #chmod 0740 /etc/asterisk/IP_Russia.sh
  137. #mcedit /etc/asterisk/IP_Russia.sh
  138.  
  139.  
  140. /sbin/iptables -A Country-Russia -p all -s 1.0.0.0/8 -j DROP
  141. /sbin/iptables -A Country-Russia -p all -s 2.0.0.0/8 -j DROP
  142. /sbin/iptables -A Country-Russia -p all -s 3.0.0.0/8 -j DROP
  143. /sbin/iptables -A Country-Russia -p all -s 4.0.0.0/8 -j DROP
  144. /sbin/iptables -A Country-Russia -p all -s 5.0.0.0/8 -j DROP
  145. /sbin/iptables -A Country-Russia -p all -s 6.0.0.0/8 -j DROP
  146. /sbin/iptables -A Country-Russia -p all -s 7.0.0.0/8 -j DROP
  147. /sbin/iptables -A Country-Russia -p all -s 9.0.0.0/8 -j DROP
  148. /sbin/iptables -A Country-Russia -p all -s 11.0.0.0/8 -j DROP
  149. /sbin/iptables -A Country-Russia -p all -s 12.0.0.0/8 -j DROP
  150. /sbin/iptables -A Country-Russia -p all -s 13.0.0.0/8 -j DROP
  151. /sbin/iptables -A Country-Russia -p all -s 14.0.0.0/8 -j DROP
  152. /sbin/iptables -A Country-Russia -p all -s 15.0.0.0/8 -j DROP
  153. /sbin/iptables -A Country-Russia -p all -s 16.0.0.0/8 -j DROP
  154. /sbin/iptables -A Country-Russia -p all -s 17.0.0.0/8 -j DROP
  155. /sbin/iptables -A Country-Russia -p all -s 18.0.0.0/8 -j DROP
  156. /sbin/iptables -A Country-Russia -p all -s 19.0.0.0/8 -j DROP
  157. /sbin/iptables -A Country-Russia -p all -s 20.0.0.0/8 -j DROP
  158. /sbin/iptables -A Country-Russia -p all -s 21.0.0.0/8 -j DROP
  159. /sbin/iptables -A Country-Russia -p all -s 22.0.0.0/8 -j DROP
  160. /sbin/iptables -A Country-Russia -p all -s 23.0.0.0/8 -j DROP
  161. /sbin/iptables -A Country-Russia -p all -s 24.0.0.0/8 -j DROP
  162. /sbin/iptables -A Country-Russia -p all -s 25.0.0.0/8 -j DROP
  163. /sbin/iptables -A Country-Russia -p all -s 26.0.0.0/8 -j DROP
  164. /sbin/iptables -A Country-Russia -p all -s 27.0.0.0/8 -j DROP
  165. /sbin/iptables -A Country-Russia -p all -s 28.0.0.0/8 -j DROP
  166. /sbin/iptables -A Country-Russia -p all -s 29.0.0.0/8 -j DROP
  167. /sbin/iptables -A Country-Russia -p all -s 30.0.0.0/8 -j DROP
  168. /sbin/iptables -A Country-Russia -p all -s 31.0.0.0/8 -j DROP
  169. /sbin/iptables -A Country-Russia -p all -s 32.0.0.0/8 -j DROP
  170. /sbin/iptables -A Country-Russia -p all -s 33.0.0.0/8 -j DROP
  171. /sbin/iptables -A Country-Russia -p all -s 34.0.0.0/8 -j DROP
  172. /sbin/iptables -A Country-Russia -p all -s 35.0.0.0/8 -j DROP
  173. /sbin/iptables -A Country-Russia -p all -s 36.0.0.0/8 -j DROP
  174. /sbin/iptables -A Country-Russia -p all -s 38.0.0.0/8 -j DROP
  175. /sbin/iptables -A Country-Russia -p all -s 39.0.0.0/8 -j DROP
  176. /sbin/iptables -A Country-Russia -p all -s 40.0.0.0/8 -j DROP
  177. /sbin/iptables -A Country-Russia -p all -s 41.0.0.0/8 -j DROP
  178. /sbin/iptables -A Country-Russia -p all -s 42.0.0.0/8 -j DROP
  179. /sbin/iptables -A Country-Russia -p all -s 43.0.0.0/8 -j DROP
  180. /sbin/iptables -A Country-Russia -p all -s 44.0.0.0/8 -j DROP
  181. /sbin/iptables -A Country-Russia -p all -s 45.0.0.0/8 -j DROP
  182. /sbin/iptables -A Country-Russia -p all -s 46.0.0.0/8 -j DROP
  183. /sbin/iptables -A Country-Russia -p all -s 47.0.0.0/8 -j DROP
  184. /sbin/iptables -A Country-Russia -p all -s 48.0.0.0/8 -j DROP
  185. /sbin/iptables -A Country-Russia -p all -s 49.0.0.0/8 -j DROP
  186. /sbin/iptables -A Country-Russia -p all -s 50.0.0.0/8 -j DROP
  187. /sbin/iptables -A Country-Russia -p all -s 51.0.0.0/8 -j DROP
  188. /sbin/iptables -A Country-Russia -p all -s 52.0.0.0/8 -j DROP
  189. /sbin/iptables -A Country-Russia -p all -s 53.0.0.0/8 -j DROP
  190. /sbin/iptables -A Country-Russia -p all -s 54.0.0.0/8 -j DROP
  191. /sbin/iptables -A Country-Russia -p all -s 55.0.0.0/8 -j DROP
  192. /sbin/iptables -A Country-Russia -p all -s 56.0.0.0/8 -j DROP
  193. /sbin/iptables -A Country-Russia -p all -s 57.0.0.0/8 -j DROP
  194. /sbin/iptables -A Country-Russia -p all -s 58.0.0.0/8 -j DROP
  195. /sbin/iptables -A Country-Russia -p all -s 59.0.0.0/8 -j DROP
  196. /sbin/iptables -A Country-Russia -p all -s 60.0.0.0/8 -j DROP
  197. /sbin/iptables -A Country-Russia -p all -s 61.0.0.0/8 -j DROP
  198. /sbin/iptables -A Country-Russia -p all -s 62.0.0.0/8 -j DROP
  199. /sbin/iptables -A Country-Russia -p all -s 63.0.0.0/8 -j DROP
  200. /sbin/iptables -A Country-Russia -p all -s 64.0.0.0/8 -j DROP
  201. /sbin/iptables -A Country-Russia -p all -s 65.0.0.0/8 -j DROP
  202. /sbin/iptables -A Country-Russia -p all -s 66.0.0.0/8 -j DROP
  203. /sbin/iptables -A Country-Russia -p all -s 67.0.0.0/8 -j DROP
  204. /sbin/iptables -A Country-Russia -p all -s 68.0.0.0/8 -j DROP
  205. /sbin/iptables -A Country-Russia -p all -s 69.0.0.0/8 -j DROP
  206. /sbin/iptables -A Country-Russia -p all -s 70.0.0.0/8 -j DROP
  207. /sbin/iptables -A Country-Russia -p all -s 71.0.0.0/8 -j DROP
  208. /sbin/iptables -A Country-Russia -p all -s 72.0.0.0/8 -j DROP
  209. /sbin/iptables -A Country-Russia -p all -s 73.0.0.0/8 -j DROP
  210. /sbin/iptables -A Country-Russia -p all -s 74.0.0.0/8 -j DROP
  211. /sbin/iptables -A Country-Russia -p all -s 75.0.0.0/8 -j DROP
  212. /sbin/iptables -A Country-Russia -p all -s 76.0.0.0/8 -j DROP
  213. /sbin/iptables -A Country-Russia -p all -s 78.0.0.0/8 -j DROP
  214. /sbin/iptables -A Country-Russia -p all -s 79.0.0.0/8 -j DROP
  215. /sbin/iptables -A Country-Russia -p all -s 80.0.0.0/8 -j DROP
  216. /sbin/iptables -A Country-Russia -p all -s 81.0.0.0/8 -j DROP
  217. /sbin/iptables -A Country-Russia -p all -s 82.0.0.0/8 -j DROP
  218. /sbin/iptables -A Country-Russia -p all -s 84.0.0.0/8 -j DROP
  219. /sbin/iptables -A Country-Russia -p all -s 86.0.0.0/8 -j DROP
  220. /sbin/iptables -A Country-Russia -p all -s 88.0.0.0/8 -j DROP
  221. /sbin/iptables -A Country-Russia -p all -s 89.0.0.0/8 -j DROP
  222. /sbin/iptables -A Country-Russia -p all -s 90.0.0.0/8 -j DROP
  223. /sbin/iptables -A Country-Russia -p all -s 91.0.0.0/8 -j DROP
  224. /sbin/iptables -A Country-Russia -p all -s 92.0.0.0/8 -j DROP
  225. /sbin/iptables -A Country-Russia -p all -s 93.0.0.0/8 -j DROP
  226. /sbin/iptables -A Country-Russia -p all -s 94.0.0.0/8 -j DROP
  227. /sbin/iptables -A Country-Russia -p all -s 95.0.0.0/8 -j DROP
  228. /sbin/iptables -A Country-Russia -p all -s 96.0.0.0/8 -j DROP
  229. /sbin/iptables -A Country-Russia -p all -s 97.0.0.0/8 -j DROP
  230. /sbin/iptables -A Country-Russia -p all -s 98.0.0.0/8 -j DROP
  231. /sbin/iptables -A Country-Russia -p all -s 99.0.0.0/8 -j DROP
  232. /sbin/iptables -A Country-Russia -p all -s 100.0.0.0/8 -j DROP
  233. /sbin/iptables -A Country-Russia -p all -s 101.0.0.0/8 -j DROP
  234. /sbin/iptables -A Country-Russia -p all -s 102.0.0.0/8 -j DROP
  235. /sbin/iptables -A Country-Russia -p all -s 103.0.0.0/8 -j DROP
  236. /sbin/iptables -A Country-Russia -p all -s 104.0.0.0/8 -j DROP
  237. /sbin/iptables -A Country-Russia -p all -s 105.0.0.0/8 -j DROP
  238. /sbin/iptables -A Country-Russia -p all -s 106.0.0.0/8 -j DROP
  239. /sbin/iptables -A Country-Russia -p all -s 107.0.0.0/8 -j DROP
  240. /sbin/iptables -A Country-Russia -p all -s 108.0.0.0/8 -j DROP
  241. /sbin/iptables -A Country-Russia -p all -s 110.0.0.0/8 -j DROP
  242. /sbin/iptables -A Country-Russia -p all -s 111.0.0.0/8 -j DROP
  243. /sbin/iptables -A Country-Russia -p all -s 112.0.0.0/8 -j DROP
  244. /sbin/iptables -A Country-Russia -p all -s 113.0.0.0/8 -j DROP
  245. /sbin/iptables -A Country-Russia -p all -s 114.0.0.0/8 -j DROP
  246. /sbin/iptables -A Country-Russia -p all -s 115.0.0.0/8 -j DROP
  247. /sbin/iptables -A Country-Russia -p all -s 116.0.0.0/8 -j DROP
  248. /sbin/iptables -A Country-Russia -p all -s 117.0.0.0/8 -j DROP
  249. /sbin/iptables -A Country-Russia -p all -s 118.0.0.0/8 -j DROP
  250. /sbin/iptables -A Country-Russia -p all -s 119.0.0.0/8 -j DROP
  251. /sbin/iptables -A Country-Russia -p all -s 120.0.0.0/8 -j DROP
  252. /sbin/iptables -A Country-Russia -p all -s 121.0.0.0/8 -j DROP
  253. /sbin/iptables -A Country-Russia -p all -s 122.0.0.0/8 -j DROP
  254. /sbin/iptables -A Country-Russia -p all -s 123.0.0.0/8 -j DROP
  255. /sbin/iptables -A Country-Russia -p all -s 124.0.0.0/8 -j DROP
  256. /sbin/iptables -A Country-Russia -p all -s 125.0.0.0/8 -j DROP
  257. /sbin/iptables -A Country-Russia -p all -s 126.0.0.0/8 -j DROP
  258. /sbin/iptables -A Country-Russia -p all -s 127.0.0.0/8 -j DROP
  259. /sbin/iptables -A Country-Russia -p all -s 128.0.0.0/8 -j DROP
  260. /sbin/iptables -A Country-Russia -p all -s 129.0.0.0/8 -j DROP
  261. /sbin/iptables -A Country-Russia -p all -s 130.0.0.0/8 -j DROP
  262. /sbin/iptables -A Country-Russia -p all -s 131.0.0.0/8 -j DROP
  263. /sbin/iptables -A Country-Russia -p all -s 132.0.0.0/8 -j DROP
  264. /sbin/iptables -A Country-Russia -p all -s 133.0.0.0/8 -j DROP
  265. /sbin/iptables -A Country-Russia -p all -s 134.0.0.0/8 -j DROP
  266. /sbin/iptables -A Country-Russia -p all -s 135.0.0.0/8 -j DROP
  267. /sbin/iptables -A Country-Russia -p all -s 136.0.0.0/8 -j DROP
  268. /sbin/iptables -A Country-Russia -p all -s 137.0.0.0/8 -j DROP
  269. /sbin/iptables -A Country-Russia -p all -s 138.0.0.0/8 -j DROP
  270. /sbin/iptables -A Country-Russia -p all -s 139.0.0.0/8 -j DROP
  271. /sbin/iptables -A Country-Russia -p all -s 140.0.0.0/8 -j DROP
  272. /sbin/iptables -A Country-Russia -p all -s 141.0.0.0/8 -j DROP
  273. /sbin/iptables -A Country-Russia -p all -s 142.0.0.0/8 -j DROP
  274. /sbin/iptables -A Country-Russia -p all -s 143.0.0.0/8 -j DROP
  275. /sbin/iptables -A Country-Russia -p all -s 144.0.0.0/8 -j DROP
  276. /sbin/iptables -A Country-Russia -p all -s 145.0.0.0/8 -j DROP
  277. /sbin/iptables -A Country-Russia -p all -s 146.0.0.0/8 -j DROP
  278. /sbin/iptables -A Country-Russia -p all -s 147.0.0.0/8 -j DROP
  279. /sbin/iptables -A Country-Russia -p all -s 148.0.0.0/8 -j DROP
  280. /sbin/iptables -A Country-Russia -p all -s 149.0.0.0/8 -j DROP
  281. /sbin/iptables -A Country-Russia -p all -s 150.0.0.0/8 -j DROP
  282. /sbin/iptables -A Country-Russia -p all -s 151.0.0.0/8 -j DROP
  283. /sbin/iptables -A Country-Russia -p all -s 152.0.0.0/8 -j DROP
  284. /sbin/iptables -A Country-Russia -p all -s 153.0.0.0/8 -j DROP
  285. /sbin/iptables -A Country-Russia -p all -s 154.0.0.0/8 -j DROP
  286. /sbin/iptables -A Country-Russia -p all -s 155.0.0.0/8 -j DROP
  287. /sbin/iptables -A Country-Russia -p all -s 156.0.0.0/8 -j DROP
  288. /sbin/iptables -A Country-Russia -p all -s 157.0.0.0/8 -j DROP
  289. /sbin/iptables -A Country-Russia -p all -s 158.0.0.0/8 -j DROP
  290. /sbin/iptables -A Country-Russia -p all -s 159.0.0.0/8 -j DROP
  291. /sbin/iptables -A Country-Russia -p all -s 160.0.0.0/8 -j DROP
  292. /sbin/iptables -A Country-Russia -p all -s 161.0.0.0/8 -j DROP
  293. /sbin/iptables -A Country-Russia -p all -s 162.0.0.0/8 -j DROP
  294. /sbin/iptables -A Country-Russia -p all -s 163.0.0.0/8 -j DROP
  295. /sbin/iptables -A Country-Russia -p all -s 164.0.0.0/8 -j DROP
  296. /sbin/iptables -A Country-Russia -p all -s 165.0.0.0/8 -j DROP
  297. /sbin/iptables -A Country-Russia -p all -s 166.0.0.0/8 -j DROP
  298. /sbin/iptables -A Country-Russia -p all -s 167.0.0.0/8 -j DROP
  299. /sbin/iptables -A Country-Russia -p all -s 168.0.0.0/8 -j DROP
  300. /sbin/iptables -A Country-Russia -p all -s 169.0.0.0/8 -j DROP
  301. /sbin/iptables -A Country-Russia -p all -s 170.0.0.0/8 -j DROP
  302. /sbin/iptables -A Country-Russia -p all -s 171.0.0.0/8 -j DROP
  303. /sbin/iptables -A Country-Russia -p all -s 172.0.0.0/8 -j DROP
  304. /sbin/iptables -A Country-Russia -p all -s 173.0.0.0/8 -j DROP
  305. /sbin/iptables -A Country-Russia -p all -s 174.0.0.0/8 -j DROP
  306. /sbin/iptables -A Country-Russia -p all -s 175.0.0.0/8 -j DROP
  307. /sbin/iptables -A Country-Russia -p all -s 176.0.0.0/8 -j DROP
  308. /sbin/iptables -A Country-Russia -p all -s 177.0.0.0/8 -j DROP
  309. /sbin/iptables -A Country-Russia -p all -s 178.0.0.0/8 -j DROP
  310. /sbin/iptables -A Country-Russia -p all -s 179.0.0.0/8 -j DROP
  311. /sbin/iptables -A Country-Russia -p all -s 180.0.0.0/8 -j DROP
  312. /sbin/iptables -A Country-Russia -p all -s 181.0.0.0/8 -j DROP
  313. /sbin/iptables -A Country-Russia -p all -s 182.0.0.0/8 -j DROP
  314. /sbin/iptables -A Country-Russia -p all -s 183.0.0.0/8 -j DROP
  315. /sbin/iptables -A Country-Russia -p all -s 184.0.0.0/8 -j DROP
  316. /sbin/iptables -A Country-Russia -p all -s 186.0.0.0/8 -j DROP
  317. /sbin/iptables -A Country-Russia -p all -s 187.0.0.0/8 -j DROP
  318. /sbin/iptables -A Country-Russia -p all -s 188.0.0.0/8 -j DROP
  319. /sbin/iptables -A Country-Russia -p all -s 189.0.0.0/8 -j DROP
  320. /sbin/iptables -A Country-Russia -p all -s 190.0.0.0/8 -j DROP
  321. /sbin/iptables -A Country-Russia -p all -s 191.0.0.0/8 -j DROP
  322. /sbin/iptables -A Country-Russia -p all -s 192.0.0.0/8 -j DROP
  323. /sbin/iptables -A Country-Russia -p all -s 193.0.0.0/8 -j DROP
  324. /sbin/iptables -A Country-Russia -p all -s 194.0.0.0/8 -j DROP
  325. /sbin/iptables -A Country-Russia -p all -s 196.0.0.0/8 -j DROP
  326. /sbin/iptables -A Country-Russia -p all -s 197.0.0.0/8 -j DROP
  327. /sbin/iptables -A Country-Russia -p all -s 198.0.0.0/8 -j DROP
  328. /sbin/iptables -A Country-Russia -p all -s 199.0.0.0/8 -j DROP
  329. /sbin/iptables -A Country-Russia -p all -s 200.0.0.0/8 -j DROP
  330. /sbin/iptables -A Country-Russia -p all -s 201.0.0.0/8 -j DROP
  331. /sbin/iptables -A Country-Russia -p all -s 202.0.0.0/8 -j DROP
  332. /sbin/iptables -A Country-Russia -p all -s 203.0.0.0/8 -j DROP
  333. /sbin/iptables -A Country-Russia -p all -s 204.0.0.0/8 -j DROP
  334. /sbin/iptables -A Country-Russia -p all -s 205.0.0.0/8 -j DROP
  335. /sbin/iptables -A Country-Russia -p all -s 206.0.0.0/8 -j DROP
  336. /sbin/iptables -A Country-Russia -p all -s 207.0.0.0/8 -j DROP
  337. /sbin/iptables -A Country-Russia -p all -s 208.0.0.0/8 -j DROP
  338. /sbin/iptables -A Country-Russia -p all -s 209.0.0.0/8 -j DROP
  339. /sbin/iptables -A Country-Russia -p all -s 210.0.0.0/8 -j DROP
  340. /sbin/iptables -A Country-Russia -p all -s 211.0.0.0/8 -j DROP
  341. /sbin/iptables -A Country-Russia -p all -s 212.0.0.0/8 -j DROP
  342. /sbin/iptables -A Country-Russia -p all -s 213.0.0.0/8 -j DROP
  343. /sbin/iptables -A Country-Russia -p all -s 214.0.0.0/8 -j DROP
  344. /sbin/iptables -A Country-Russia -p all -s 215.0.0.0/8 -j DROP
  345. /sbin/iptables -A Country-Russia -p all -s 216.0.0.0/8 -j DROP
  346. /sbin/iptables -A Country-Russia -p all -s 217.0.0.0/8 -j DROP
  347. /sbin/iptables -A Country-Russia -p all -s 218.0.0.0/8 -j DROP
  348. /sbin/iptables -A Country-Russia -p all -s 219.0.0.0/8 -j DROP
  349. /sbin/iptables -A Country-Russia -p all -s 220.0.0.0/8 -j DROP
  350. /sbin/iptables -A Country-Russia -p all -s 221.0.0.0/8 -j DROP
  351. /sbin/iptables -A Country-Russia -p all -s 222.0.0.0/8 -j DROP
  352. /sbin/iptables -A Country-Russia -p all -s 223.0.0.0/8 -j DROP
  353. /sbin/iptables -A Country-Russia -p all -s 224.0.0.0/8 -j DROP
  354. /sbin/iptables -A Country-Russia -p all -s 225.0.0.0/8 -j DROP
  355. /sbin/iptables -A Country-Russia -p all -s 226.0.0.0/8 -j DROP
  356. /sbin/iptables -A Country-Russia -p all -s 227.0.0.0/8 -j DROP
  357. /sbin/iptables -A Country-Russia -p all -s 228.0.0.0/8 -j DROP
  358. /sbin/iptables -A Country-Russia -p all -s 229.0.0.0/8 -j DROP
  359. /sbin/iptables -A Country-Russia -p all -s 230.0.0.0/8 -j DROP
  360. /sbin/iptables -A Country-Russia -p all -s 231.0.0.0/8 -j DROP
  361. /sbin/iptables -A Country-Russia -p all -s 232.0.0.0/8 -j DROP
  362. /sbin/iptables -A Country-Russia -p all -s 233.0.0.0/8 -j DROP
  363. /sbin/iptables -A Country-Russia -p all -s 234.0.0.0/8 -j DROP
  364. /sbin/iptables -A Country-Russia -p all -s 235.0.0.0/8 -j DROP
  365. /sbin/iptables -A Country-Russia -p all -s 236.0.0.0/8 -j DROP
  366. /sbin/iptables -A Country-Russia -p all -s 237.0.0.0/8 -j DROP
  367. /sbin/iptables -A Country-Russia -p all -s 238.0.0.0/8 -j DROP
  368. /sbin/iptables -A Country-Russia -p all -s 239.0.0.0/8 -j DROP
  369. /sbin/iptables -A Country-Russia -p all -s 240.0.0.0/8 -j DROP
  370. /sbin/iptables -A Country-Russia -p all -s 241.0.0.0/8 -j DROP
  371. /sbin/iptables -A Country-Russia -p all -s 242.0.0.0/8 -j DROP
  372. /sbin/iptables -A Country-Russia -p all -s 243.0.0.0/8 -j DROP
  373. /sbin/iptables -A Country-Russia -p all -s 244.0.0.0/8 -j DROP
  374. /sbin/iptables -A Country-Russia -p all -s 245.0.0.0/8 -j DROP
  375. /sbin/iptables -A Country-Russia -p all -s 246.0.0.0/8 -j DROP
  376. /sbin/iptables -A Country-Russia -p all -s 247.0.0.0/8 -j DROP
  377. /sbin/iptables -A Country-Russia -p all -s 248.0.0.0/8 -j DROP
  378. /sbin/iptables -A Country-Russia -p all -s 249.0.0.0/8 -j DROP
  379. /sbin/iptables -A Country-Russia -p all -s 250.0.0.0/8 -j DROP
  380. /sbin/iptables -A Country-Russia -p all -s 251.0.0.0/8 -j DROP
  381. /sbin/iptables -A Country-Russia -p all -s 252.0.0.0/8 -j DROP
  382. /sbin/iptables -A Country-Russia -p all -s 253.0.0.0/8 -j DROP
  383. /sbin/iptables -A Country-Russia -p all -s 254.0.0.0/8 -j DROP
  384. /sbin/iptables -A Country-Russia -p all -s 255.0.0.0/8 -j DROP
  385.  
RAW Paste Data