249 lines
8.4 KiB
Bash
249 lines
8.4 KiB
Bash
#! /bin/bash
|
|
function bdsatib() {
|
|
{
|
|
ufw-blocklist -l "bdsatib https://www.binarydefense.com/banlist.txt"
|
|
if ! crontab -l | grep -q "bdsatib"; then
|
|
echo -e "$(crontab -u root -l)\n@daily /usr/local/bin/ufw-blocklists.sh -l "bdsatib https://www.binarydefense.com/banlist.txt"" | crontab -u root -
|
|
fi
|
|
}
|
|
}
|
|
|
|
function f2ball() {
|
|
{
|
|
ufw-blocklist -l "f2ball https://lists.blocklist.de/lists/all.txt"
|
|
if ! crontab -l | grep -q "f2ball"; then
|
|
echo -e "$(crontab -u root -l)\n*/35 * * * * /usr/local/bin/ufw-blocklists.sh -l "f2ball https://lists.blocklist.de/lists/all.txt"" | crontab -u root -
|
|
fi
|
|
}
|
|
}
|
|
|
|
function bfblocker() {
|
|
{
|
|
ufw-blocklist -l "bfblocker https://danger.rulez.sk/projects/bruteforceblocker/blist.php"
|
|
if ! crontab -l | grep -q "bfblocker"; then
|
|
echo -e "$(crontab -u root -l)\n@daily /usr/local/bin/ufw-blocklists.sh -l "bfblocker https://danger.rulez.sk/projects/bruteforceblocker/blist.php"" | crontab -u root -
|
|
fi
|
|
}
|
|
}
|
|
|
|
function cinsarmy() {
|
|
{
|
|
ufw-blocklist -l "cinsarmy http://cinsscore.com/list/ci-badguys.txt"
|
|
if ! crontab -l | grep -q "cinsarmy"; then
|
|
echo -e "$(crontab -u root -l)\n@daily /usr/local/bin/ufw-blocklists.sh -l "cinsarmy http://cinsscore.com/list/ci-badguys.txt"" | crontab -u root -
|
|
fi
|
|
}
|
|
}
|
|
|
|
function drop() {
|
|
{
|
|
if grep -q -E "IPV6=(yes|YES)" /etc/default/ufw; then
|
|
ufw-blocklist -l "drop https://www.spamhaus.org/drop/drop.txt" -l "dropv6 https://www.spamhaus.org/drop/dropv6.txt"
|
|
if ! crontab -l | grep -q "dropv6"; then
|
|
echo -e "$(crontab -u root -l)\n@daily /usr/local/bin/ufw-blocklists.sh -l "drop https://www.spamhaus.org/drop/drop.txt" -l "dropv6 https://www.spamhaus.org/drop/dropv6.txt"" | crontab -u root -
|
|
fi
|
|
else
|
|
ufw-blocklist -l "drop https://www.spamhaus.org/drop/drop.txt"
|
|
if ! crontab -l | grep -q "drop"; then
|
|
echo -e "$(crontab -u root -l)\n@daily /usr/local/bin/ufw-blocklists.sh -l "drop https://www.spamhaus.org/drop/drop.txt"" | crontab -u root -
|
|
fi
|
|
fi
|
|
}
|
|
}
|
|
|
|
function edrop() {
|
|
{
|
|
ufw-blocklist -l "edrop https://www.spamhaus.org/drop/edrop.txt"
|
|
if ! crontab -l | grep -q "edrop"; then
|
|
echo -e "$(crontab -u root -l)\n@daily /usr/local/bin/ufw-blocklists.sh -l "edrop https://www.spamhaus.org/drop/edrop.txt"" | crontab -u root -
|
|
fi
|
|
}
|
|
}
|
|
|
|
function feodoc2() {
|
|
{
|
|
ufw-blocklist -l "feodoc2 https://feodotracker.abuse.ch/downloads/ipblocklist_recommended.txt"
|
|
if ! crontab -l | grep -q "feodoc2"; then
|
|
echo -e "$(crontab -u root -l)\n@daily /usr/local/bin/ufw-blocklists.sh -l "feodoc2 https://feodotracker.abuse.ch/downloads/ipblocklist_recommended.txt"" | crontab -u root -
|
|
fi
|
|
}
|
|
}
|
|
|
|
function feodoioc() {
|
|
{
|
|
ufw-blocklist -l "feodoioc https://feodotracker.abuse.ch/downloads/ipblocklist.txt"
|
|
if ! crontab -l | grep -q "fedoioc"; then
|
|
echo -e "$(crontab -u root -l)\n@daily /usr/local/bin/ufw-blocklists.sh -l "feodoioc https://feodotracker.abuse.ch/downloads/ipblocklist.txt"" | crontab -u root -
|
|
fi
|
|
}
|
|
}
|
|
|
|
function firehol() {
|
|
{
|
|
ufw-blocklist -l "firehol https://iplists.firehol.org/files/firehol_level1.netset"
|
|
if ! crontab -l | grep -q "firehol"; then
|
|
echo -e "$(crontab -u root -l)\n@daily /usr/local/bin/ufw-blocklists.sh -l "firehol https://iplists.firehol.org/files/firehol_level1.netset"" | crontab -u root -
|
|
fi
|
|
}
|
|
}
|
|
|
|
function greensnow() {
|
|
{
|
|
ufw-blocklist -l "greensnow https://blocklist.greensnow.co/greensnow.txt"
|
|
if ! crontab -l | grep -q "bdsatib"; then
|
|
echo -e "$(crontab -u root -l)\n@daily /usr/local/bin/ufw-blocklists.sh -l "greensnow https://blocklist.greensnow.co/greensnow.txt"" | crontab -u root -
|
|
fi
|
|
}
|
|
}
|
|
|
|
function ipsum() {
|
|
{
|
|
ufw-blocklist -l "ipsum https://raw.githubusercontent.com/stamparm/ipsum/master/levels/2.txt"
|
|
if ! crontab -l | grep -q "ipsum"; then
|
|
echo -e "$(crontab -u root -l)\n@daily /usr/local/bin/ufw-blocklists.sh -l "ipsum https://raw.githubusercontent.com/stamparm/ipsum/master/levels/2.txt"" | crontab -u root -
|
|
fi
|
|
}
|
|
}
|
|
|
|
function maxmind(){
|
|
{
|
|
ufw-blocklist -l "maxmind https://www.maxmind.com/en/anonymous_proxies"
|
|
if ! crontab -l | grep -q "maxmind"; then
|
|
echo -e "$(crontab -u root -l)\n@daily /usr/local/bin/ufw-blocklists.sh -l "maxmind https://www.maxmind.com/en/anonymous_proxies"" | crontab -u root -
|
|
fi
|
|
}
|
|
}
|
|
|
|
function blocklist_menu() {
|
|
{
|
|
clear
|
|
echo "Please select which blocklist from the list below"
|
|
printf "\n"
|
|
echo "1 - Binary Defense Systems Artillery Threat Intelligence Banlist"
|
|
echo "2 - Blocklist.de Fail2Ban Reporting (all)"
|
|
echo "3 - BruteForceBlocker"
|
|
echo "4 - CINS Army List"
|
|
echo "5 - FEODO Tracker: Botnet C2 - (Recommended)"
|
|
echo "6 - FEODO Tracker: Botnet C2 IoC - (Recommended)"
|
|
echo "7 - FireHOL IP List Level 1"
|
|
echo "8 - MaxMind"
|
|
echo "9 - GreenSnow"
|
|
echo "10 - IPsum - (Recommended)"
|
|
echo "11 - Spamhaus Don't Route Or Peer List (DROP)"
|
|
echo "12 - Spamhaus Extended DROP List (EDROP):"
|
|
echo "B - Go Back"
|
|
echo "X - Exit"
|
|
|
|
read -rn 1 user_input
|
|
if [[ "$user_input" == '1' ]]; then
|
|
bdsatib
|
|
blocklist_menu
|
|
elif [[ "$user_input" == '2' ]]; then
|
|
f2ball
|
|
blocklist_menu
|
|
elif [[ "$user_input" == '3' ]]; then
|
|
bfblocker
|
|
blocklist_menu
|
|
elif [[ "$user_input" == '4' ]]; then
|
|
cins
|
|
blocklist_menu
|
|
elif [[ "$user_input" == '5' ]]; then
|
|
feodoc2
|
|
blocklist_menu
|
|
elif [[ "$user_input" == '6' ]]; then
|
|
feodoioc
|
|
blocklist_menu
|
|
elif [[ "$user_input" == '7' ]]; then
|
|
firehol
|
|
blocklist_menu
|
|
elif [[ "$user_input" == '8' ]]; then
|
|
maxmind
|
|
blocklist_menu
|
|
elif [[ "$user_input" == '9' ]]; then
|
|
greensnow
|
|
blocklist_menu
|
|
elif [[ "$user_input" == '10' ]]; then
|
|
ipsum
|
|
blocklist_menu
|
|
elif [[ "$user_input" == '11' ]]; then
|
|
drop
|
|
blocklist_menu
|
|
elif [[ "$user_input" == '12' ]]; then
|
|
edrop
|
|
blocklist_menu
|
|
elif [[ "$user_input" == xX ]]; then
|
|
exit 0
|
|
elif [[ "$user_input" == bB ]]; then
|
|
Main_Menu
|
|
fi
|
|
}
|
|
}
|
|
|
|
function ipv6_install() {
|
|
{
|
|
# Check that ufw has IPv6 enabled
|
|
if ! grep -q -E "IPV6=(yes|YES)" /etc/default/ufw; then
|
|
echo "ERROR: IPv6 rules requested but UFW is not configured to use IPv6. Set IPV6=yes in /etc/default/ufw and rerun this script."
|
|
Main_Menu
|
|
fi
|
|
|
|
wget https://files.mylinux.work/s/aRXEsCe5G8b43QB/download/after6.init
|
|
chmod 750 after6.init
|
|
mv /tmp/after6.init /etc/ufw/after6.init
|
|
|
|
blocklist_menu
|
|
}
|
|
}
|
|
|
|
function ipv6_menu() {
|
|
{
|
|
clear
|
|
echo "Would you like to enable IPv6 support? [Y/n]"
|
|
printf "\n"
|
|
echo "Y - Yes"
|
|
echo "N - No"
|
|
|
|
read -rn 1 user_input
|
|
if [[ "$user_input" == [yY] ]]; then
|
|
ipv6_install
|
|
elif [[ "$user_input" == [nN] ]]; then
|
|
blocklist_menu
|
|
fi
|
|
}
|
|
}
|
|
|
|
function ipv4_install() {
|
|
{
|
|
if [ ! "$(command -v ipset)" ]; then
|
|
apt -y install ipset
|
|
fi
|
|
cd /tmp || exit 2
|
|
wget https://files.mylinux.work/s/cqKc2CkzmHMpBXW/download/after.init
|
|
chmod 750 after.init
|
|
mv /tmp/after.init /etc/ufw/after.init
|
|
|
|
wget https://files.mylinux.work/s/KfDSRWCcrxiTftf/download/ufw-blocklists.sh
|
|
chmod 755 ufw-blocklists.sh
|
|
mv /tmp/ufw-blocklists.sh /usr/local/bin/
|
|
ipv6_menu
|
|
}
|
|
}
|
|
|
|
function Main_Menu() {
|
|
{
|
|
clear
|
|
echo "Configure UFW to block IPs listed in blocklist ipsets? [Y/n]"
|
|
printf "\n"
|
|
echo "Y - Yes"
|
|
echo "N - No"
|
|
|
|
read -rn 1 user_input
|
|
if [[ "$user_input" == [yY] ]]; then
|
|
ipv4_install
|
|
elif [[ "$user_input" == [nN] ]]; then
|
|
exit 0
|
|
fi
|
|
}
|
|
}
|
|
|
|
Main_Menu |