27 lines
2.0 KiB
Plaintext
27 lines
2.0 KiB
Plaintext
IPSET_BLACKLIST_NAME=blacklist # change it if it collides with a pre-existing ipset list
|
|
IPSET_TMP_BLACKLIST_NAME=${IPSET_BLACKLIST_NAME}-tmp
|
|
|
|
# ensure the directory for IP_BLACKLIST/IP_BLACKLIST_RESTORE exists (it won't be created automatically)
|
|
IP_BLACKLIST_RESTORE=/etc/ipset-blacklist/ip-blacklist.restore
|
|
IP_BLACKLIST=/etc/ipset-blacklist/ip-blacklist.list
|
|
|
|
VERBOSE=yes # probably set to "no" for cron jobs, default to yes
|
|
FORCE=yes # will create the ipset-iptable binding if it does not already exist
|
|
let IPTABLES_IPSET_RULE_NUMBER=1 # if FORCE is yes, the number at which place insert the ipset-match rule (default to 1)
|
|
|
|
# Sample (!) list of URLs for IP blacklists. Currently, only IPv4 is supported in this script, everything else will be filtered.
|
|
BLACKLISTS=(
|
|
# "file:///etc/ipset-blacklist/ip-blacklist-custom.list" # optional, for your personal nemeses (no typo, plural)
|
|
"https://www.projecthoneypot.org/list_of_ips.php?t=d&rss=1" # Project Honey Pot Directory of Dictionary Attacker IPs
|
|
"https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=1.1.1.1" # TOR Exit Nodes
|
|
"http://danger.rulez.sk/projects/bruteforceblocker/blist.php" # BruteForceBlocker IP List
|
|
"https://www.spamhaus.org/drop/drop.lasso" # Spamhaus Don't Route Or Peer List (DROP)
|
|
"https://cinsscore.com/list/ci-badguys.txt" # C.I. Army Malicious IP List
|
|
"https://lists.blocklist.de/lists/all.txt" # blocklist.de attackers
|
|
"https://blocklist.greensnow.co/greensnow.txt" # GreenSnow
|
|
"https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/firehol_level1.netset" # Firehol Level 1
|
|
"https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/stopforumspam_7d.ipset" # Stopforumspam via Firehol
|
|
# "https://raw.githubusercontent.com/ipverse/rir-ip/master/country/zz/ipv4-aggregated.txt" # Ban an entire country(-code), see https://github.com/ipverse/rir-ip
|
|
# "https://raw.githubusercontent.com/ipverse/asn-ip/master/as/1234/ipv4-aggregated.txt" # Ban a specific autonomous system (ISP), see https://github.com/ipverse/asn-ip
|
|
)
|
|
MAXELEM=131072 |