API tools faq
paste
load-net

iptables_NEW-2

load-net
Jun 14th, 2021 (edited)
758
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Bash 22.11 KB | None | 0 0
raw download clone embed print report
  1. #!/bin/sh
  2. ###http://blog.ls20.com/securing-your-asterisk-voip-server-with-iptables/
  3. ###Политика по-умолчанию
  4. ########  apt install iptables-persistent
  5. ########  service netfilter-persistent save
  6. ########  iptables -nvL --line-number
  7. ########  fail2ban-client set asterisk unbanip 10.20.70.100
  8. ########  cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local
  9.  
  10.  
  11.  
  12. /sbin/iptables -P INPUT DROP
  13. #/sbin/iptables -P INPUT ACCEPT
  14. #/sbin/iptables -P FORWARD DROP
  15. /sbin/iptables -P FORWARD ACCEPT
  16. /sbin/iptables -P OUTPUT ACCEPT
  17.  
  18.  
  19. ###Clear Rules
  20. iptables -F
  21. /sbin/iptables -F INPUT
  22. /sbin/iptables -F OUTPUT
  23. /sbin/iptables -F FORWARD
  24. /sbin/iptables -F FORWARD -t mangle
  25. /sbin/iptables -F POSTROUTING -t nat
  26. /sbin/iptables -F PREROUTING -t nat
  27. /sbin/iptables -F PREROUTING -t mangle
  28. /sbin/iptables -F OUTPUT -t nat
  29.  
  30. /sbin/iptables -N f2b-asterisk-udp
  31. /sbin/iptables -N f2b-SSH
  32. /sbin/iptables -N Country-Russia
  33. /sbin/iptables -N f2b-ASTERISK-security
  34. /sbin/iptables -N SIP-Operators
  35. /sbin/iptables -N SIP-Endpoints-Static
  36.  
  37.  
  38. /sbin/iptables -F f2b-asterisk-udp
  39. /sbin/iptables -F f2b-SSH
  40. /sbin/iptables -F Country-Russia
  41. /sbin/iptables -F f2b-ASTERISK-security
  42. /sbin/iptables -F SIP-Operators
  43. /sbin/iptables -F SIP-Endpoints-Static
  44.  
  45.  
  46. /sbin/iptables -A f2b-asterisk-udp -j RETURN
  47. /sbin/iptables -A f2b-SSH -j RETURN
  48. /sbin/iptables -A f2b-ASTERISK-security -j RETURN
  49. /sbin/iptables -A SIP-Operators -j RETURN
  50. /sbin/iptables -A SIP-Endpoints-Static -j RETURN
  51.  
  52. /sbin/iptables -A INPUT -p all -j SIP-Operators
  53. /sbin/iptables -A INPUT -p all -j SIP-Endpoints-Static
  54. /sbin/iptables -A INPUT -p all -j Country-Russia
  55. /sbin/iptables -A INPUT -p all -j f2b-ASTERISK-security
  56. /sbin/iptables -A INPUT -p all -j f2b-SSH
  57.  
  58. /etc/asterisk/IP_Russia.sh
  59. #############################################################################
  60. # drop INVALID connections
  61. ##############################################################################
  62. /sbin/iptables -A INPUT -m state --state INVALID -j DROP
  63. /sbin/iptables -A OUTPUT -m state --state INVALID -j DROP
  64. /sbin/iptables -A FORWARD -m state --state INVALID -j DROP
  65.  
  66. #/sbin/iptables -A INPUT -p icmp -m icmp --icmp-type 3 -j REJECT --reject-with icmp-host-prohibited
  67. /sbin/iptables -A INPUT -p icmp -m icmp --icmp-type 4 -j REJECT --reject-with icmp-host-prohibited
  68. /sbin/iptables -A INPUT -p icmp -m icmp --icmp-type 5 -j REJECT --reject-with icmp-host-prohibited
  69. /sbin/iptables -A INPUT -p icmp -m icmp --icmp-type 9 -j REJECT --reject-with icmp-host-prohibited
  70. /sbin/iptables -A INPUT -p icmp -m icmp --icmp-type 10 -j REJECT --reject-with icmp-host-prohibited
  71. /sbin/iptables -A INPUT -p icmp -m icmp --icmp-type 11 -j REJECT --reject-with icmp-host-prohibited
  72. /sbin/iptables -A INPUT -p icmp -m icmp --icmp-type 12 -j REJECT --reject-with icmp-host-prohibited
  73. /sbin/iptables -A INPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT
  74.  
  75. ####################################################################################################
  76. #                       Доступ по доверенным интерфейсам lo, eth0                                #
  77. ####################################################################################################
  78. /sbin/iptables -A INPUT -i lo -j ACCEPT
  79. /sbin/iptables -A OUTPUT -o lo -j ACCEPT
  80.  
  81. ####################################################################################################
  82. #Входящий доступ по портам  21 (FTP), 22 (SSH), 80 (HTTP), 8080 (HTTP)
  83. ####################################################################################################
  84.  
  85. #SIP Providers
  86. /sbin/iptables -I SIP-Operators -s 195.239.174.100 -p udp --dport 5060 -j ACCEPT # mpbx.sip.beeline.ru (195.239.174.100)
  87. /sbin/iptables -I SIP-Operators -s 193.201.229.35 -p udp --dport 5060 -j ACCEPT # sbc.megafon.ru (193.201.229.35)
  88. /sbin/iptables -I SIP-Operators -s 80.75.130.83 -p udp --dport 5060 -j ACCEPT # login.mtt.ru (80.75.130.83)
  89. /sbin/iptables -I SIP-Operators -s 193.201.229.35 -p udp --dport 5060 -j ACCEPT # sbc.megafon.ru (193.201.229.35).
  90. /sbin/iptables -I SIP-Operators -s 37.139.38.0/24  -p udp --dport 5060 -j ACCEPT        #zadarma
  91. /sbin/iptables -I SIP-Operators -s 185.45.152.128/28   -p udp --dport 5060 -j ACCEPT    #zadarma
  92. /sbin/iptables -I SIP-Operators -s 185.45.152.160/27  -p udp --dport 5060 -j ACCEPT     #zadarma
  93. /sbin/iptables -I SIP-Operators -s 178.0.0.0/8 -p tcp --dport 5060 -j ACCEPT # ELENABILAIN
  94.  
  95. #SIP Endpoints with Static IP
  96. /sbin/iptables -A INPUT -s 176.59.192.0/19   -p all -j ACCEPT #mobileTELE2
  97. /sbin/iptables -A INPUT -s 178.72.0.0/15   -p all -j ACCEPT #mobileTELE2
  98. /sbin/iptables -A INPUT -s 192.168.1.0/24  -p all -j ACCEPT #mobileTELE2
  99. /sbin/iptables -A INPUT -s 87.0.0.0/8  -p all -j ACCEPT #mobileTELE2
  100. /sbin/iptables -I INPUT -s 10.11.50.0/24 -p all -j ACCEPT #HOME_local
  101. /sbin/iptables -I INPUT -s 10.20.70.0/24 -p all -j ACCEPT #HOME_local
  102. /sbin/iptables -I INPUT -s 176.58.0.0/15 -p all -j ACCEPT #tele2
  103. ############ Адреса через тире дипазон если у вас ######################################
  104. /sbin/iptables -I INPUT -m iprange --src-range  109.105.164.0-109.105.167.255 -p all -j ACCEPT #HOME
  105.  
  106. ####################################################################################################
  107. # Asterisk SIP and ATS Asterisk
  108. ####################################################################################################
  109. #Фильтрация по именам сканеров
  110. /sbin/iptables -A INPUT -p udp --dport 5060 -m string --string "friendly-scanner" --algo bm -j DROP
  111. /sbin/iptables -A INPUT -p udp --dport 5060 -m string --string "sip-scan" --algo bm -j DROP
  112. /sbin/iptables -A INPUT -p udp --dport 5060 -m string --string "sundayddr" --algo bm -j DROP
  113. /sbin/iptables -A INPUT -p udp --dport 5060 -m string --string "iWar" --algo bm -j DROP
  114. /sbin/iptables -A INPUT -p udp --dport 5060 -m string --string "sipsak" --algo bm -j DROP
  115. /sbin/iptables -A INPUT -p udp --dport 5060 -m string --string "sipvicious" --algo bm -j DROP
  116. /sbin/iptables -A INPUT -p udp --dport 5060 -m string --string "sipcli" --algo bm -j DROP
  117. /sbin/iptables -A INPUT -p udp --dport 5060 -m string --string "VaxSIPUserAgent" --algo bm -j DROP
  118. #
  119.  
  120. #/sbin/iptables -A INPUT -i enp0s3  -p tcp -m tcp --dport 1701 -j ACCEPT
  121. /sbin/iptables -A INPUT -i enp0s3  -p udp -m udp --dport 5060 -j ACCEPT
  122. /sbin/iptables -A INPUT -i enp0s3  -p tcp -m tcp --dport 5060 -j ACCEPT
  123. /sbin/iptables -A INPUT -i enp0s3  -p udp -m udp --dport 10000:20000 -j ACCEPT
  124. #/sbin/iptables -A INPUT -i enp0s3  -p tcp -m tcp --dport 55666 -j ACCEPT
  125.  
  126. systemctl restart fail2ban
  127. /sbin/iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
  128. netfilter-persistent save
  129.  
  130. ### /sbin/iptables-save  > /etc/sysconfig/iptables
  131.  
  132.  
  133.  
  134.  
  135. #########################################################
  136. # touch /etc/asterisk/IP_Russia.sh
  137. # chmod 0740 /etc/asterisk/IP_Russia.sh
  138. # mcedit /etc/asterisk/IP_Russia.sh
  139.  
  140.  
  141. /sbin/iptables -A Country-Russia -p all -s 1.0.0.0/8 -j DROP
  142. /sbin/iptables -A Country-Russia -p all -s 2.0.0.0/8 -j DROP
  143. /sbin/iptables -A Country-Russia -p all -s 3.0.0.0/8 -j DROP
  144. /sbin/iptables -A Country-Russia -p all -s 4.0.0.0/8 -j DROP
  145. /sbin/iptables -A Country-Russia -p all -s 5.0.0.0/8 -j DROP
  146. /sbin/iptables -A Country-Russia -p all -s 6.0.0.0/8 -j DROP
  147. /sbin/iptables -A Country-Russia -p all -s 7.0.0.0/8 -j DROP
  148. /sbin/iptables -A Country-Russia -p all -s 9.0.0.0/8 -j DROP
  149. /sbin/iptables -A Country-Russia -p all -s 11.0.0.0/8 -j DROP
  150. /sbin/iptables -A Country-Russia -p all -s 12.0.0.0/8 -j DROP
  151. /sbin/iptables -A Country-Russia -p all -s 13.0.0.0/8 -j DROP
  152. /sbin/iptables -A Country-Russia -p all -s 14.0.0.0/8 -j DROP
  153. /sbin/iptables -A Country-Russia -p all -s 15.0.0.0/8 -j DROP
  154. /sbin/iptables -A Country-Russia -p all -s 16.0.0.0/8 -j DROP
  155. /sbin/iptables -A Country-Russia -p all -s 17.0.0.0/8 -j DROP
  156. /sbin/iptables -A Country-Russia -p all -s 18.0.0.0/8 -j DROP
  157. /sbin/iptables -A Country-Russia -p all -s 19.0.0.0/8 -j DROP
  158. /sbin/iptables -A Country-Russia -p all -s 20.0.0.0/8 -j DROP
  159. /sbin/iptables -A Country-Russia -p all -s 21.0.0.0/8 -j DROP
  160. /sbin/iptables -A Country-Russia -p all -s 22.0.0.0/8 -j DROP
  161. /sbin/iptables -A Country-Russia -p all -s 23.0.0.0/8 -j DROP
  162. /sbin/iptables -A Country-Russia -p all -s 24.0.0.0/8 -j DROP
  163. /sbin/iptables -A Country-Russia -p all -s 25.0.0.0/8 -j DROP
  164. /sbin/iptables -A Country-Russia -p all -s 26.0.0.0/8 -j DROP
  165. /sbin/iptables -A Country-Russia -p all -s 27.0.0.0/8 -j DROP
  166. /sbin/iptables -A Country-Russia -p all -s 28.0.0.0/8 -j DROP
  167. /sbin/iptables -A Country-Russia -p all -s 29.0.0.0/8 -j DROP
  168. /sbin/iptables -A Country-Russia -p all -s 30.0.0.0/8 -j DROP
  169. /sbin/iptables -A Country-Russia -p all -s 31.0.0.0/8 -j DROP
  170. /sbin/iptables -A Country-Russia -p all -s 32.0.0.0/8 -j DROP
  171. /sbin/iptables -A Country-Russia -p all -s 33.0.0.0/8 -j DROP
  172. /sbin/iptables -A Country-Russia -p all -s 34.0.0.0/8 -j DROP
  173. /sbin/iptables -A Country-Russia -p all -s 35.0.0.0/8 -j DROP
  174. /sbin/iptables -A Country-Russia -p all -s 36.0.0.0/8 -j DROP
  175. /sbin/iptables -A Country-Russia -p all -s 38.0.0.0/8 -j DROP
  176. /sbin/iptables -A Country-Russia -p all -s 39.0.0.0/8 -j DROP
  177. /sbin/iptables -A Country-Russia -p all -s 40.0.0.0/8 -j DROP
  178. /sbin/iptables -A Country-Russia -p all -s 41.0.0.0/8 -j DROP
  179. /sbin/iptables -A Country-Russia -p all -s 42.0.0.0/8 -j DROP
  180. /sbin/iptables -A Country-Russia -p all -s 43.0.0.0/8 -j DROP
  181. /sbin/iptables -A Country-Russia -p all -s 44.0.0.0/8 -j DROP
  182. /sbin/iptables -A Country-Russia -p all -s 45.0.0.0/8 -j DROP
  183. /sbin/iptables -A Country-Russia -p all -s 46.0.0.0/8 -j DROP
  184. /sbin/iptables -A Country-Russia -p all -s 47.0.0.0/8 -j DROP
  185. /sbin/iptables -A Country-Russia -p all -s 48.0.0.0/8 -j DROP
  186. /sbin/iptables -A Country-Russia -p all -s 49.0.0.0/8 -j DROP
  187. /sbin/iptables -A Country-Russia -p all -s 50.0.0.0/8 -j DROP
  188. /sbin/iptables -A Country-Russia -p all -s 51.0.0.0/8 -j DROP
  189. /sbin/iptables -A Country-Russia -p all -s 52.0.0.0/8 -j DROP
  190. /sbin/iptables -A Country-Russia -p all -s 53.0.0.0/8 -j DROP
  191. /sbin/iptables -A Country-Russia -p all -s 54.0.0.0/8 -j DROP
  192. /sbin/iptables -A Country-Russia -p all -s 55.0.0.0/8 -j DROP
  193. /sbin/iptables -A Country-Russia -p all -s 56.0.0.0/8 -j DROP
  194. /sbin/iptables -A Country-Russia -p all -s 57.0.0.0/8 -j DROP
  195. /sbin/iptables -A Country-Russia -p all -s 58.0.0.0/8 -j DROP
  196. /sbin/iptables -A Country-Russia -p all -s 59.0.0.0/8 -j DROP
  197. /sbin/iptables -A Country-Russia -p all -s 60.0.0.0/8 -j DROP
  198. /sbin/iptables -A Country-Russia -p all -s 61.0.0.0/8 -j DROP
  199. /sbin/iptables -A Country-Russia -p all -s 62.0.0.0/8 -j DROP
  200. /sbin/iptables -A Country-Russia -p all -s 63.0.0.0/8 -j DROP
  201. /sbin/iptables -A Country-Russia -p all -s 64.0.0.0/8 -j DROP
  202. /sbin/iptables -A Country-Russia -p all -s 65.0.0.0/8 -j DROP
  203. /sbin/iptables -A Country-Russia -p all -s 66.0.0.0/8 -j DROP
  204. /sbin/iptables -A Country-Russia -p all -s 67.0.0.0/8 -j DROP
  205. /sbin/iptables -A Country-Russia -p all -s 68.0.0.0/8 -j DROP
  206. /sbin/iptables -A Country-Russia -p all -s 69.0.0.0/8 -j DROP
  207. /sbin/iptables -A Country-Russia -p all -s 70.0.0.0/8 -j DROP
  208. /sbin/iptables -A Country-Russia -p all -s 71.0.0.0/8 -j DROP
  209. /sbin/iptables -A Country-Russia -p all -s 72.0.0.0/8 -j DROP
  210. /sbin/iptables -A Country-Russia -p all -s 73.0.0.0/8 -j DROP
  211. /sbin/iptables -A Country-Russia -p all -s 74.0.0.0/8 -j DROP
  212. /sbin/iptables -A Country-Russia -p all -s 75.0.0.0/8 -j DROP
  213. /sbin/iptables -A Country-Russia -p all -s 76.0.0.0/8 -j DROP
  214. /sbin/iptables -A Country-Russia -p all -s 78.0.0.0/8 -j DROP
  215. /sbin/iptables -A Country-Russia -p all -s 79.0.0.0/8 -j DROP
  216. /sbin/iptables -A Country-Russia -p all -s 80.0.0.0/8 -j DROP
  217. /sbin/iptables -A Country-Russia -p all -s 81.0.0.0/8 -j DROP
  218. /sbin/iptables -A Country-Russia -p all -s 82.0.0.0/8 -j DROP
  219. /sbin/iptables -A Country-Russia -p all -s 84.0.0.0/8 -j DROP
  220. /sbin/iptables -A Country-Russia -p all -s 86.0.0.0/8 -j DROP
  221. /sbin/iptables -A Country-Russia -p all -s 88.0.0.0/8 -j DROP
  222. /sbin/iptables -A Country-Russia -p all -s 89.0.0.0/8 -j DROP
  223. /sbin/iptables -A Country-Russia -p all -s 90.0.0.0/8 -j DROP
  224. /sbin/iptables -A Country-Russia -p all -s 91.0.0.0/8 -j DROP
  225. /sbin/iptables -A Country-Russia -p all -s 92.0.0.0/8 -j DROP
  226. /sbin/iptables -A Country-Russia -p all -s 93.0.0.0/8 -j DROP
  227. /sbin/iptables -A Country-Russia -p all -s 94.0.0.0/8 -j DROP
  228. /sbin/iptables -A Country-Russia -p all -s 95.0.0.0/8 -j DROP
  229. /sbin/iptables -A Country-Russia -p all -s 96.0.0.0/8 -j DROP
  230. /sbin/iptables -A Country-Russia -p all -s 97.0.0.0/8 -j DROP
  231. /sbin/iptables -A Country-Russia -p all -s 98.0.0.0/8 -j DROP
  232. /sbin/iptables -A Country-Russia -p all -s 99.0.0.0/8 -j DROP
  233. /sbin/iptables -A Country-Russia -p all -s 100.0.0.0/8 -j DROP
  234. /sbin/iptables -A Country-Russia -p all -s 101.0.0.0/8 -j DROP
  235. /sbin/iptables -A Country-Russia -p all -s 102.0.0.0/8 -j DROP
  236. /sbin/iptables -A Country-Russia -p all -s 103.0.0.0/8 -j DROP
  237. /sbin/iptables -A Country-Russia -p all -s 104.0.0.0/8 -j DROP
  238. /sbin/iptables -A Country-Russia -p all -s 105.0.0.0/8 -j DROP
  239. /sbin/iptables -A Country-Russia -p all -s 106.0.0.0/8 -j DROP
  240. /sbin/iptables -A Country-Russia -p all -s 107.0.0.0/8 -j DROP
  241. /sbin/iptables -A Country-Russia -p all -s 108.0.0.0/8 -j DROP
  242. /sbin/iptables -A Country-Russia -p all -s 110.0.0.0/8 -j DROP
  243. /sbin/iptables -A Country-Russia -p all -s 111.0.0.0/8 -j DROP
  244. /sbin/iptables -A Country-Russia -p all -s 112.0.0.0/8 -j DROP
  245. /sbin/iptables -A Country-Russia -p all -s 113.0.0.0/8 -j DROP
  246. /sbin/iptables -A Country-Russia -p all -s 114.0.0.0/8 -j DROP
  247. /sbin/iptables -A Country-Russia -p all -s 115.0.0.0/8 -j DROP
  248. /sbin/iptables -A Country-Russia -p all -s 116.0.0.0/8 -j DROP
  249. /sbin/iptables -A Country-Russia -p all -s 117.0.0.0/8 -j DROP
  250. /sbin/iptables -A Country-Russia -p all -s 118.0.0.0/8 -j DROP
  251. /sbin/iptables -A Country-Russia -p all -s 119.0.0.0/8 -j DROP
  252. /sbin/iptables -A Country-Russia -p all -s 120.0.0.0/8 -j DROP
  253. /sbin/iptables -A Country-Russia -p all -s 121.0.0.0/8 -j DROP
  254. /sbin/iptables -A Country-Russia -p all -s 122.0.0.0/8 -j DROP
  255. /sbin/iptables -A Country-Russia -p all -s 123.0.0.0/8 -j DROP
  256. /sbin/iptables -A Country-Russia -p all -s 124.0.0.0/8 -j DROP
  257. /sbin/iptables -A Country-Russia -p all -s 125.0.0.0/8 -j DROP
  258. /sbin/iptables -A Country-Russia -p all -s 126.0.0.0/8 -j DROP
  259. /sbin/iptables -A Country-Russia -p all -s 127.0.0.0/8 -j DROP
  260. /sbin/iptables -A Country-Russia -p all -s 128.0.0.0/8 -j DROP
  261. /sbin/iptables -A Country-Russia -p all -s 129.0.0.0/8 -j DROP
  262. /sbin/iptables -A Country-Russia -p all -s 130.0.0.0/8 -j DROP
  263. /sbin/iptables -A Country-Russia -p all -s 131.0.0.0/8 -j DROP
  264. /sbin/iptables -A Country-Russia -p all -s 132.0.0.0/8 -j DROP
  265. /sbin/iptables -A Country-Russia -p all -s 133.0.0.0/8 -j DROP
  266. /sbin/iptables -A Country-Russia -p all -s 134.0.0.0/8 -j DROP
  267. /sbin/iptables -A Country-Russia -p all -s 135.0.0.0/8 -j DROP
  268. /sbin/iptables -A Country-Russia -p all -s 136.0.0.0/8 -j DROP
  269. /sbin/iptables -A Country-Russia -p all -s 137.0.0.0/8 -j DROP
  270. /sbin/iptables -A Country-Russia -p all -s 138.0.0.0/8 -j DROP
  271. /sbin/iptables -A Country-Russia -p all -s 139.0.0.0/8 -j DROP
  272. /sbin/iptables -A Country-Russia -p all -s 140.0.0.0/8 -j DROP
  273. /sbin/iptables -A Country-Russia -p all -s 141.0.0.0/8 -j DROP
  274. /sbin/iptables -A Country-Russia -p all -s 142.0.0.0/8 -j DROP
  275. /sbin/iptables -A Country-Russia -p all -s 143.0.0.0/8 -j DROP
  276. /sbin/iptables -A Country-Russia -p all -s 144.0.0.0/8 -j DROP
  277. /sbin/iptables -A Country-Russia -p all -s 145.0.0.0/8 -j DROP
  278. /sbin/iptables -A Country-Russia -p all -s 146.0.0.0/8 -j DROP
  279. /sbin/iptables -A Country-Russia -p all -s 147.0.0.0/8 -j DROP
  280. /sbin/iptables -A Country-Russia -p all -s 148.0.0.0/8 -j DROP
  281. /sbin/iptables -A Country-Russia -p all -s 149.0.0.0/8 -j DROP
  282. /sbin/iptables -A Country-Russia -p all -s 150.0.0.0/8 -j DROP
  283. /sbin/iptables -A Country-Russia -p all -s 151.0.0.0/8 -j DROP
  284. /sbin/iptables -A Country-Russia -p all -s 152.0.0.0/8 -j DROP
  285. /sbin/iptables -A Country-Russia -p all -s 153.0.0.0/8 -j DROP
  286. /sbin/iptables -A Country-Russia -p all -s 154.0.0.0/8 -j DROP
  287. /sbin/iptables -A Country-Russia -p all -s 155.0.0.0/8 -j DROP
  288. /sbin/iptables -A Country-Russia -p all -s 156.0.0.0/8 -j DROP
  289. /sbin/iptables -A Country-Russia -p all -s 157.0.0.0/8 -j DROP
  290. /sbin/iptables -A Country-Russia -p all -s 158.0.0.0/8 -j DROP
  291. /sbin/iptables -A Country-Russia -p all -s 159.0.0.0/8 -j DROP
  292. /sbin/iptables -A Country-Russia -p all -s 160.0.0.0/8 -j DROP
  293. /sbin/iptables -A Country-Russia -p all -s 161.0.0.0/8 -j DROP
  294. /sbin/iptables -A Country-Russia -p all -s 162.0.0.0/8 -j DROP
  295. /sbin/iptables -A Country-Russia -p all -s 163.0.0.0/8 -j DROP
  296. /sbin/iptables -A Country-Russia -p all -s 164.0.0.0/8 -j DROP
  297. /sbin/iptables -A Country-Russia -p all -s 165.0.0.0/8 -j DROP
  298. /sbin/iptables -A Country-Russia -p all -s 166.0.0.0/8 -j DROP
  299. /sbin/iptables -A Country-Russia -p all -s 167.0.0.0/8 -j DROP
  300. /sbin/iptables -A Country-Russia -p all -s 168.0.0.0/8 -j DROP
  301. /sbin/iptables -A Country-Russia -p all -s 169.0.0.0/8 -j DROP
  302. /sbin/iptables -A Country-Russia -p all -s 170.0.0.0/8 -j DROP
  303. /sbin/iptables -A Country-Russia -p all -s 171.0.0.0/8 -j DROP
  304. /sbin/iptables -A Country-Russia -p all -s 172.0.0.0/8 -j DROP
  305. /sbin/iptables -A Country-Russia -p all -s 173.0.0.0/8 -j DROP
  306. /sbin/iptables -A Country-Russia -p all -s 174.0.0.0/8 -j DROP
  307. /sbin/iptables -A Country-Russia -p all -s 175.0.0.0/8 -j DROP
  308. /sbin/iptables -A Country-Russia -p all -s 176.0.0.0/8 -j DROP
  309. /sbin/iptables -A Country-Russia -p all -s 177.0.0.0/8 -j DROP
  310. /sbin/iptables -A Country-Russia -p all -s 178.0.0.0/8 -j DROP
  311. /sbin/iptables -A Country-Russia -p all -s 179.0.0.0/8 -j DROP
  312. /sbin/iptables -A Country-Russia -p all -s 180.0.0.0/8 -j DROP
  313. /sbin/iptables -A Country-Russia -p all -s 181.0.0.0/8 -j DROP
  314. /sbin/iptables -A Country-Russia -p all -s 182.0.0.0/8 -j DROP
  315. /sbin/iptables -A Country-Russia -p all -s 183.0.0.0/8 -j DROP
  316. /sbin/iptables -A Country-Russia -p all -s 184.0.0.0/8 -j DROP
  317. /sbin/iptables -A Country-Russia -p all -s 186.0.0.0/8 -j DROP
  318. /sbin/iptables -A Country-Russia -p all -s 187.0.0.0/8 -j DROP
  319. /sbin/iptables -A Country-Russia -p all -s 188.0.0.0/8 -j DROP
  320. /sbin/iptables -A Country-Russia -p all -s 189.0.0.0/8 -j DROP
  321. /sbin/iptables -A Country-Russia -p all -s 190.0.0.0/8 -j DROP
  322. /sbin/iptables -A Country-Russia -p all -s 191.0.0.0/8 -j DROP
  323. /sbin/iptables -A Country-Russia -p all -s 192.0.0.0/8 -j DROP
  324. /sbin/iptables -A Country-Russia -p all -s 193.0.0.0/8 -j DROP
  325. /sbin/iptables -A Country-Russia -p all -s 194.0.0.0/8 -j DROP
  326. /sbin/iptables -A Country-Russia -p all -s 196.0.0.0/8 -j DROP
  327. /sbin/iptables -A Country-Russia -p all -s 197.0.0.0/8 -j DROP
  328. /sbin/iptables -A Country-Russia -p all -s 198.0.0.0/8 -j DROP
  329. /sbin/iptables -A Country-Russia -p all -s 199.0.0.0/8 -j DROP
  330. /sbin/iptables -A Country-Russia -p all -s 200.0.0.0/8 -j DROP
  331. /sbin/iptables -A Country-Russia -p all -s 201.0.0.0/8 -j DROP
  332. /sbin/iptables -A Country-Russia -p all -s 202.0.0.0/8 -j DROP
  333. /sbin/iptables -A Country-Russia -p all -s 203.0.0.0/8 -j DROP
  334. /sbin/iptables -A Country-Russia -p all -s 204.0.0.0/8 -j DROP
  335. /sbin/iptables -A Country-Russia -p all -s 205.0.0.0/8 -j DROP
  336. /sbin/iptables -A Country-Russia -p all -s 206.0.0.0/8 -j DROP
  337. /sbin/iptables -A Country-Russia -p all -s 207.0.0.0/8 -j DROP
  338. /sbin/iptables -A Country-Russia -p all -s 208.0.0.0/8 -j DROP
  339. /sbin/iptables -A Country-Russia -p all -s 209.0.0.0/8 -j DROP
  340. /sbin/iptables -A Country-Russia -p all -s 210.0.0.0/8 -j DROP
  341. /sbin/iptables -A Country-Russia -p all -s 211.0.0.0/8 -j DROP
  342. /sbin/iptables -A Country-Russia -p all -s 212.0.0.0/8 -j DROP
  343. /sbin/iptables -A Country-Russia -p all -s 213.0.0.0/8 -j DROP
  344. /sbin/iptables -A Country-Russia -p all -s 214.0.0.0/8 -j DROP
  345. /sbin/iptables -A Country-Russia -p all -s 215.0.0.0/8 -j DROP
  346. /sbin/iptables -A Country-Russia -p all -s 216.0.0.0/8 -j DROP
  347. /sbin/iptables -A Country-Russia -p all -s 217.0.0.0/8 -j DROP
  348. /sbin/iptables -A Country-Russia -p all -s 218.0.0.0/8 -j DROP
  349. /sbin/iptables -A Country-Russia -p all -s 219.0.0.0/8 -j DROP
  350. /sbin/iptables -A Country-Russia -p all -s 220.0.0.0/8 -j DROP
  351. /sbin/iptables -A Country-Russia -p all -s 221.0.0.0/8 -j DROP
  352. /sbin/iptables -A Country-Russia -p all -s 222.0.0.0/8 -j DROP
  353. /sbin/iptables -A Country-Russia -p all -s 223.0.0.0/8 -j DROP
  354. /sbin/iptables -A Country-Russia -p all -s 224.0.0.0/8 -j DROP
  355. /sbin/iptables -A Country-Russia -p all -s 225.0.0.0/8 -j DROP
  356. /sbin/iptables -A Country-Russia -p all -s 226.0.0.0/8 -j DROP
  357. /sbin/iptables -A Country-Russia -p all -s 227.0.0.0/8 -j DROP
  358. /sbin/iptables -A Country-Russia -p all -s 228.0.0.0/8 -j DROP
  359. /sbin/iptables -A Country-Russia -p all -s 229.0.0.0/8 -j DROP
  360. /sbin/iptables -A Country-Russia -p all -s 230.0.0.0/8 -j DROP
  361. /sbin/iptables -A Country-Russia -p all -s 231.0.0.0/8 -j DROP
  362. /sbin/iptables -A Country-Russia -p all -s 232.0.0.0/8 -j DROP
  363. /sbin/iptables -A Country-Russia -p all -s 233.0.0.0/8 -j DROP
  364. /sbin/iptables -A Country-Russia -p all -s 234.0.0.0/8 -j DROP
  365. /sbin/iptables -A Country-Russia -p all -s 235.0.0.0/8 -j DROP
  366. /sbin/iptables -A Country-Russia -p all -s 236.0.0.0/8 -j DROP
  367. /sbin/iptables -A Country-Russia -p all -s 237.0.0.0/8 -j DROP
  368. /sbin/iptables -A Country-Russia -p all -s 238.0.0.0/8 -j DROP
  369. /sbin/iptables -A Country-Russia -p all -s 239.0.0.0/8 -j DROP
  370. /sbin/iptables -A Country-Russia -p all -s 240.0.0.0/8 -j DROP
  371. /sbin/iptables -A Country-Russia -p all -s 241.0.0.0/8 -j DROP
  372. /sbin/iptables -A Country-Russia -p all -s 242.0.0.0/8 -j DROP
  373. /sbin/iptables -A Country-Russia -p all -s 243.0.0.0/8 -j DROP
  374. /sbin/iptables -A Country-Russia -p all -s 244.0.0.0/8 -j DROP
  375. /sbin/iptables -A Country-Russia -p all -s 245.0.0.0/8 -j DROP
  376. /sbin/iptables -A Country-Russia -p all -s 246.0.0.0/8 -j DROP
  377. /sbin/iptables -A Country-Russia -p all -s 247.0.0.0/8 -j DROP
  378. /sbin/iptables -A Country-Russia -p all -s 248.0.0.0/8 -j DROP
  379. /sbin/iptables -A Country-Russia -p all -s 249.0.0.0/8 -j DROP
  380. /sbin/iptables -A Country-Russia -p all -s 250.0.0.0/8 -j DROP
  381. /sbin/iptables -A Country-Russia -p all -s 251.0.0.0/8 -j DROP
  382. /sbin/iptables -A Country-Russia -p all -s 252.0.0.0/8 -j DROP
  383. /sbin/iptables -A Country-Russia -p all -s 253.0.0.0/8 -j DROP
  384. /sbin/iptables -A Country-Russia -p all -s 254.0.0.0/8 -j DROP
  385. /sbin/iptables -A Country-Russia -p all -s 255.0.0.0/8 -j DROP
  386.  
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!