.git broken, restart
This commit is contained in:
@@ -0,0 +1,38 @@
|
||||
34.0.0.0/8
|
||||
35.0.0.0/8
|
||||
|
||||
#SKYCA-3#Owner:Fastly
|
||||
#151.101.0.0/16
|
||||
|
||||
#NETBLK Cox
|
||||
#98.174.32.0/19
|
||||
|
||||
#OVH
|
||||
#37.59.32.0/19
|
||||
#oman#mobile
|
||||
#134.0.192.0/20
|
||||
|
||||
# RIPE
|
||||
# http addr
|
||||
#141.0.0.0/8
|
||||
|
||||
#pip atproto ?
|
||||
#151.101.0.0/16
|
||||
|
||||
#Cloud flare chatgpt
|
||||
#104.16.0.0/12
|
||||
|
||||
#Umea ftp archive (debian)
|
||||
#194.71.11.0/24
|
||||
|
||||
#Fastly Skyca
|
||||
#199.232.0.0/16
|
||||
|
||||
#LEVEL3-CIDR
|
||||
#209.244.0.0/14
|
||||
|
||||
#ionos
|
||||
#212.227.232.161 lors dúnse installation arch
|
||||
#212.227.232.0/24
|
||||
|
||||
1.0.0.1
|
||||
@@ -0,0 +1,172 @@
|
||||
3.0.0.0/9
|
||||
3.120.0.0/14
|
||||
3.128.0.0/9
|
||||
3.160.0.0/14
|
||||
3.165.0.0/16
|
||||
3.248.0.0/13
|
||||
3.64.0.0/12
|
||||
3.8.0.0/14
|
||||
13.24.0.0/13
|
||||
13.244.0.0/14
|
||||
13.248.0.0/14
|
||||
13.249.0.0/16
|
||||
13.32.0.0/12
|
||||
13.40.0.0/14
|
||||
13.48.0.0/13
|
||||
13.56.0.0/14
|
||||
18.128.0.0/9
|
||||
18.132.0.0/14
|
||||
18.154.0.0/15
|
||||
18.156.0.0/14
|
||||
18.164.0.0/15
|
||||
18.168.0.0/14
|
||||
18.184.0.0/15
|
||||
18.192.0.0/15
|
||||
18.196.0.0/15
|
||||
18.198.0.0/15
|
||||
18.244.0.0/15
|
||||
18.32.0.0/11
|
||||
18.64.0.0/10
|
||||
20.192.0.0/10
|
||||
23.192.0.0/11
|
||||
23.227.32.0/19
|
||||
23.32.0.0/11
|
||||
23.40.112.0/20
|
||||
23.41.212.0/22
|
||||
23.43.128.0/20
|
||||
23.64.0.0/14
|
||||
34.128.0.0/10
|
||||
34.16.0.0/12
|
||||
34.192.0.0/10
|
||||
34.248.0.0/13
|
||||
34.32.0.0/11
|
||||
34.4.128.0/17
|
||||
34.4.16.0/20
|
||||
34.4.32.0/19
|
||||
34.4.5.0/24
|
||||
34.4.6.0/23
|
||||
34.4.64.0/18
|
||||
34.4.8.0/21
|
||||
34.5.0.0/16
|
||||
34.6.0.0/15
|
||||
34.64.0.0/10
|
||||
34.8.0.0/13
|
||||
35.152.0.0/13
|
||||
35.153.0.0/16
|
||||
35.160.0.0/12
|
||||
35.160.0.0/13
|
||||
35.176.0.0/13
|
||||
35.184.0.0/13
|
||||
35.192.0.0/12
|
||||
35.208.0.0/12
|
||||
35.224.0.0/12
|
||||
35.240.0.0/13
|
||||
35.71.128.0/17
|
||||
35.71.64.0/18
|
||||
35.72.0.0/13
|
||||
35.80.0.0/12
|
||||
44.192.0.0/10
|
||||
44.192.0.0/11
|
||||
44.224.0.0/11
|
||||
45.32.0.0/16
|
||||
45.32.80.0/22
|
||||
45.60.0.0/16
|
||||
47.235.0.0/16
|
||||
47.236.0.0/14
|
||||
47.240.0.0/14
|
||||
47.244.0.0/15
|
||||
47.246.0.0/16
|
||||
52.0.0.0/10
|
||||
52.132.0.0/14
|
||||
52.136.0.0/13
|
||||
52.16.0.0/14
|
||||
52.192.0.0/12
|
||||
52.208.0.0/13
|
||||
52.211.252.0/22
|
||||
52.216.0.0/14
|
||||
52.220.0.0/15
|
||||
52.222.0.0/16
|
||||
52.222.128.0/17
|
||||
52.223.0.0/17
|
||||
52.223.128.0/18
|
||||
52.30.0.0/15
|
||||
52.48.0.0/14
|
||||
52.58.0.0/15
|
||||
52.64.0.0/12
|
||||
52.84.0.0/14
|
||||
52.84.0.0/15
|
||||
52.88.0.0/13
|
||||
52.94.216.0/21
|
||||
54.144.0.0/12
|
||||
54.160.0.0/11
|
||||
54.192.0.0/12
|
||||
54.200.0.0/14
|
||||
54.208.0.0/13
|
||||
54.216.0.0/14
|
||||
54.216.0.0/15
|
||||
54.220.0.0/15
|
||||
54.224.0.0/11
|
||||
54.244.0.0/16
|
||||
54.36.0.0/15
|
||||
54.38.0.0/16
|
||||
54.64.0.0/11
|
||||
54.72.0.0/15
|
||||
54.93.0.0/16
|
||||
57.0.0.0/8
|
||||
63.208.0.0/13
|
||||
63.215.202.0/24
|
||||
63.32.0.0/14
|
||||
64.74.128.0/17
|
||||
64.74.236.0/24
|
||||
64.74.96.0/19
|
||||
66.102.0.0/20
|
||||
67.202.64.0/18
|
||||
67.220.224.0/19
|
||||
67.220.224.0/20
|
||||
69.166.0.0/21
|
||||
69.173.144.0/20
|
||||
74.125.0.0/16
|
||||
98.80.0.0/12
|
||||
98.80.0.0/13
|
||||
99.78.128.0/17
|
||||
99.79.0.0/16
|
||||
99.80.0.0/15
|
||||
99.82.0.0/17
|
||||
99.82.128.0/18
|
||||
99.85.128.0/17
|
||||
99.86.0.0/16
|
||||
99.87.0.0/17
|
||||
99.87.128.0/18
|
||||
104.16.0.0/12
|
||||
104.64.0.0/10
|
||||
104.85.16.0/20
|
||||
107.178.192.0/18
|
||||
108.177.0.0/17
|
||||
130.211.0.0/16
|
||||
135.125.0.0/16
|
||||
141.0.0.0/8
|
||||
142.250.0.0/15
|
||||
151.101.0.0/16
|
||||
157.90.0.0/16
|
||||
162.19.0.0/16
|
||||
169.254.0.0/16
|
||||
172.104.0.0/15
|
||||
172.104.0.0/16
|
||||
172.105.0.0/17
|
||||
172.105.128.0/20
|
||||
172.105.144.0/23
|
||||
172.105.146.0/24
|
||||
172.217.0.0/16
|
||||
172.240.0.0/16
|
||||
172.240.44.0/22
|
||||
172.64.0.0/13
|
||||
#192.0.64.0/18
|
||||
#192.124.249.0/24
|
||||
#192.229.128.0/17
|
||||
198.47.127.0/24
|
||||
198.47.96.0/19
|
||||
199.232.0.0/16
|
||||
199.43.0.0/24
|
||||
208.93.168.0/21
|
||||
216.239.32.0/19
|
||||
216.58.192.0/19
|
||||
@@ -0,0 +1,85 @@
|
||||
#!/bin/bash
|
||||
set -e
|
||||
|
||||
echo "==> Flushing old rules"
|
||||
nft flush ruleset
|
||||
|
||||
# Paths
|
||||
#BLACKLIST=${1:-/etc/nftables/blacklist.txt}
|
||||
#WHITELIST=${2:-/etc/nftables/whitelist.txt}
|
||||
|
||||
# Create base table and chains
|
||||
nft add table inet filter
|
||||
|
||||
nft add chain inet filter input { type filter hook input priority 0 \; policy drop \; }
|
||||
nft add chain inet filter output { type filter hook output priority 0 \; policy accept \; }
|
||||
nft add chain inet filter forward { type filter hook forward priority 0 \; policy drop \; }
|
||||
|
||||
# Define sets
|
||||
nft add set inet filter banned_ipv4 '{ type ipv4_addr ; flags interval ; }'
|
||||
nft add set inet filter banned_ipv6 '{ type ipv6_addr ; flags interval ; }'
|
||||
nft add set inet filter white_ipv4 '{ type ipv4_addr ; flags interval ; }'
|
||||
nft add set inet filter white_ipv6 '{ type ipv6_addr ; flags interval ; }'
|
||||
|
||||
## NOT From / to locale address
|
||||
## cannot work, but should develop the concept
|
||||
#for IP_LOCALE in $(ip addr | grep inet | grep -Eo $IP_REG) ; do
|
||||
# if [[ "$line" == *:* ]]; then
|
||||
# nft add rule ip filter input ip6 daddr $IP_LOCALE drop
|
||||
# else
|
||||
# echo "ban $line"
|
||||
# nft add rule ip filter input ip daddr $IP_LOCALE drop
|
||||
# fi
|
||||
#done < "$BLACKLIST"
|
||||
|
||||
# Load whitelist
|
||||
while IFS= read -r line; do
|
||||
[[ -z "$line" || "$line" == \#* ]] && continue
|
||||
if [[ "$line" == *:* ]]; then
|
||||
echo "accept $line"
|
||||
nft add element inet filter white_ipv6 "{ $line }"
|
||||
else
|
||||
echo "accept $line"
|
||||
nft add element inet filter white_ipv4 "{ $line }"
|
||||
fi
|
||||
done < "$WHITELIST"
|
||||
|
||||
# Load blacklist
|
||||
while IFS= read -r line; do
|
||||
[[ -z "$line" || "$line" == \#* ]] && continue
|
||||
if [[ "$line" == *:* ]]; then
|
||||
echo "ban $line"
|
||||
nft add element inet filter banned_ipv6 "{ $line }"
|
||||
else
|
||||
echo "ban $line"
|
||||
nft add element inet filter banned_ipv4 "{ $line }"
|
||||
fi
|
||||
done < "$BLACKLIST"
|
||||
|
||||
# Input rules
|
||||
nft add rule inet filter input iif "lo" accept
|
||||
nft add rule inet filter input ip saddr @white_ipv4 accept
|
||||
nft add rule inet filter input ip6 saddr @white_ipv6 accept
|
||||
nft add rule inet filter input ip saddr @banned_ipv4 drop
|
||||
nft add rule inet filter input ip6 saddr @banned_ipv6 drop
|
||||
nft add rule inet filter input ct state established,related accept
|
||||
nft add rule inet filter input drop
|
||||
|
||||
# Output rules
|
||||
nft add rule inet filter output ip daddr @white_ipv4 accept
|
||||
nft add rule inet filter output ip6 daddr @white_ipv6 accept
|
||||
nft add rule inet filter output ip daddr @banned_ipv4 drop
|
||||
nft add rule inet filter output ip6 daddr @banned_ipv6 drop
|
||||
#nft add rule inet filter output accept
|
||||
|
||||
# Save and enable
|
||||
echo "==> Saving to /etc/nftables.conf"
|
||||
nft list ruleset > /etc/nftables.conf
|
||||
chmod 644 /etc/nftables.conf
|
||||
|
||||
nft flush ruleset
|
||||
echo "==> Enabling nftables.service"
|
||||
systemctl enable --now nftables.service
|
||||
|
||||
echo "✅ Firewall applied and saved."
|
||||
|
||||
@@ -0,0 +1,336 @@
|
||||
102.219.208.167
|
||||
104.193.135.243
|
||||
104.254.90.235
|
||||
10.43.239.84
|
||||
106.221.188.55
|
||||
106.253.78.116
|
||||
110.73.86.196
|
||||
112.162.227.33
|
||||
113.116.70.146
|
||||
116.78.253.106
|
||||
116.90.75.165
|
||||
117.3.46.112
|
||||
120.34.24.95
|
||||
120.56.158.23
|
||||
121.162.35.185
|
||||
123.199.123.251
|
||||
1.235.96.176
|
||||
129.132.89.152
|
||||
133.197.22.77
|
||||
138.199.54.37
|
||||
14.152.83.173
|
||||
142.204.104.62
|
||||
14.56.56.48
|
||||
145.82.104.221
|
||||
146.246.229.87
|
||||
146.70.111.19
|
||||
146.70.116.113
|
||||
146.70.29.205
|
||||
147.234.151.90
|
||||
15.193.29.10
|
||||
157.73.223.95
|
||||
158.101.1.7
|
||||
159.185.119.200
|
||||
161.97.129.255
|
||||
167.208.219.102
|
||||
168.43.16.113
|
||||
178.151.166.46
|
||||
183.98.223.4
|
||||
185.65.134.203
|
||||
185.65.134.204
|
||||
188.244.155.177
|
||||
191.96.67.28
|
||||
194.233.100.217
|
||||
194.32.120.207
|
||||
195.189.181.151
|
||||
200.119.185.159
|
||||
206.192.180.207
|
||||
207.149.131.95
|
||||
209.244.0.0
|
||||
209.244.0.3
|
||||
209.247.255.255
|
||||
211.104.178.73
|
||||
211.131.97.161
|
||||
218.1.185.71
|
||||
218.97.88.45
|
||||
222.101.241.100
|
||||
222.119.216.85
|
||||
23.158.56.120
|
||||
232.122.173.59
|
||||
25.119.124.208
|
||||
2.57.170.237
|
||||
3.0.244.209
|
||||
31.40.215.56
|
||||
33.227.162.112
|
||||
36.24.138.23
|
||||
37.46.199.54
|
||||
39.123.140.40
|
||||
39.129.36.144
|
||||
45.132.159.24
|
||||
45.14.192.97
|
||||
45.84.136.104
|
||||
45.85.144.36
|
||||
45.88.97.218
|
||||
46.6.47.53
|
||||
49.77.184.21
|
||||
57.205.78.171
|
||||
58.231.156.215
|
||||
61.0.28.66
|
||||
66.28.0.0
|
||||
66.28.0.61
|
||||
66.28.255.255
|
||||
66.28.3.249
|
||||
67.220.85.116
|
||||
68.108.49.216
|
||||
73.19.249.173
|
||||
73.4.249.173
|
||||
77.238.137.24
|
||||
77.29.43.66
|
||||
77.81.142.245
|
||||
79.137.136.16
|
||||
79.140.148.109
|
||||
81.199.130.125
|
||||
81.210.180.207
|
||||
85.114.193.151
|
||||
85.206.250.159
|
||||
86.33.63.72
|
||||
89.46.8.79
|
||||
90.151.234.147
|
||||
90.187.1.69
|
||||
90.247.94.53
|
||||
92.243.182.33
|
||||
92.35.84.82
|
||||
93.114.129.186
|
||||
100.167.104.219
|
||||
100.241.101.222
|
||||
102.22.99.68
|
||||
102.66.182.135
|
||||
103.129.160.91
|
||||
103.15.13.82
|
||||
104.128.213.94
|
||||
104.136.84.45
|
||||
105.173.6.24
|
||||
107.56.162.23
|
||||
108.235.125.176
|
||||
109.148.140.79
|
||||
111.40.118.98
|
||||
111.66.120.59
|
||||
112.129.97.161
|
||||
112.46.3.117
|
||||
113.16.43.168
|
||||
114.67.37.152
|
||||
115.129.97.161
|
||||
116.85.220.67
|
||||
117.165.247.89
|
||||
117.216.161.95
|
||||
120.250.214.178
|
||||
124.227.130.5
|
||||
125.130.199.81
|
||||
125.130.97.161
|
||||
130.104.130.23
|
||||
130.228.73.106
|
||||
133.29.199.138
|
||||
134.26.57.220
|
||||
135.182.66.102
|
||||
137.104.52.87
|
||||
13.9.34.100
|
||||
140.130.97.161
|
||||
141.130.97.161
|
||||
144.36.129.39
|
||||
145.157.59.46
|
||||
146.70.142.93
|
||||
146.70.86.84
|
||||
149.68.199.198
|
||||
150.46.156.185
|
||||
151.181.189.195
|
||||
151.193.114.85
|
||||
152.89.132.129
|
||||
153.82.155.45
|
||||
157.110.147.88
|
||||
158.158.38.68
|
||||
159.230.19.27
|
||||
159.250.206.85
|
||||
16.136.137.79
|
||||
161.44.228.105
|
||||
163.250.206.2
|
||||
163.93.175.107
|
||||
164.130.97.161
|
||||
165.75.90.116
|
||||
168.247.47.163
|
||||
170.128.97.161
|
||||
172.90.143.188
|
||||
173.83.152.14
|
||||
17.4.124.212
|
||||
175.233.18.5
|
||||
177.155.244.188
|
||||
179.133.13.82
|
||||
184.103.199.185
|
||||
184.122.255.96
|
||||
184.129.97.161
|
||||
184.72.101.174
|
||||
184.86.241.66
|
||||
185.128.97.161
|
||||
185.199.103.184
|
||||
185.35.162.121
|
||||
186.129.114.93
|
||||
186.156.87.76
|
||||
188.104.83.188
|
||||
188.114.31.176
|
||||
188.154.233.193
|
||||
19.111.70.146
|
||||
191.59.41.134
|
||||
193.191.49.95
|
||||
193.233.154.188
|
||||
194.139.1.218
|
||||
195.199.200.86
|
||||
196.86.73.110
|
||||
198.199.68.149
|
||||
198.2.106.86
|
||||
198.6.199.138
|
||||
199.212.0.46
|
||||
199.5.26.46
|
||||
199.71.0.46
|
||||
200.229.215.18
|
||||
203.134.65.185
|
||||
204.134.65.185
|
||||
205.192.180.207
|
||||
205.29.70.146
|
||||
207.120.32.194
|
||||
21.120.182.84
|
||||
211.213.87.45
|
||||
21.160.189.5
|
||||
21.184.77.49
|
||||
212.124.4.17
|
||||
213.130.97.161
|
||||
213.188.192.85
|
||||
215.156.231.58
|
||||
217.100.233.194
|
||||
221.104.82.145
|
||||
222.82.135.78
|
||||
223.131.169.76
|
||||
224.131.97.161
|
||||
224.193.167.31
|
||||
225.143.197.169
|
||||
229.131.97.161
|
||||
229.56.209.185
|
||||
23.130.104.130
|
||||
2.33.240.83
|
||||
235.180.57.85
|
||||
235.90.254.104
|
||||
237.11.4.189
|
||||
237.170.57.2
|
||||
238.248.39.216
|
||||
239.130.97.161
|
||||
239.76.175.70
|
||||
241.204.154.114
|
||||
241.251.68.185
|
||||
24.159.132.45
|
||||
243.135.193.104
|
||||
245.142.81.77
|
||||
249.3.28.66
|
||||
250.230.111.95
|
||||
251.123.199.123
|
||||
251.125.51.158
|
||||
252.241.255.132
|
||||
252.7.227.93
|
||||
254.25.198.81
|
||||
255.129.97.161
|
||||
25.90.161.49
|
||||
28.215.92.54
|
||||
28.67.96.191
|
||||
31.167.193.224
|
||||
33.182.243.92
|
||||
36.135.139.97
|
||||
36.144.85.45
|
||||
37.236.220.216
|
||||
37.54.199.138
|
||||
39.185.201.93
|
||||
40.140.123.39
|
||||
40.66.17.82
|
||||
41.132.97.161
|
||||
41.63.116.97
|
||||
4.223.98.183
|
||||
42.249.217.91
|
||||
43.47.130.59
|
||||
46.0.71.199
|
||||
48.195.172.46
|
||||
48.56.56.14
|
||||
49.161.90.25
|
||||
50.57.168.62
|
||||
51.57.168.62
|
||||
51.83.251.178
|
||||
53.132.97.161
|
||||
53.47.6.46
|
||||
53.94.247.90
|
||||
54.199.46.37
|
||||
55.188.221.106
|
||||
56.215.40.31
|
||||
6.126.215.134
|
||||
62.168.57.51
|
||||
62.40.237.92
|
||||
6.24.7.89
|
||||
66.43.29.77
|
||||
67.181.243.85
|
||||
69.1.187.90
|
||||
70.69.233.212
|
||||
7.1.101.158
|
||||
71.185.1.218
|
||||
7.162.21.174
|
||||
71.93.101.81
|
||||
72.33.249.173
|
||||
72.63.33.86
|
||||
73.128.97.161
|
||||
73.178.104.211
|
||||
73.197.144.79
|
||||
75.129.97.161
|
||||
77.22.197.133
|
||||
78.63.251.162
|
||||
79.8.46.89
|
||||
80.106.90.178
|
||||
80.48.196.168
|
||||
81.100.108.185
|
||||
81.198.25.254
|
||||
8.167.179.167
|
||||
8.44.147.212
|
||||
84.86.70.146
|
||||
85.184.137.106
|
||||
86.129.97.161
|
||||
87.33.208.175
|
||||
89.189.227.87
|
||||
90.157.189.5
|
||||
91.150.141.112
|
||||
91.19.23.94
|
||||
92.118.61.94
|
||||
93.142.70.146
|
||||
93.201.185.39
|
||||
94.61.118.92
|
||||
95.36.15.108
|
||||
97.192.14.45
|
||||
144.245.228.49
|
||||
175.208.33.87
|
||||
178.214.250.120
|
||||
178.90.106.80
|
||||
24.137.238.77
|
||||
46.166.151.178
|
||||
46.59.157.145
|
||||
5.130.227.124
|
||||
60.203.150.169
|
||||
85.216.119.222
|
||||
95.131.149.207
|
||||
210.250.101.86
|
||||
218.1.139.194
|
||||
67.37.152.114
|
||||
91.217.249.42
|
||||
95.49.191.193
|
||||
111.245.87.109
|
||||
171.78.205.57
|
||||
45.87.213.211
|
||||
86.106.2.198
|
||||
27.19.230.159
|
||||
212.147.44.8
|
||||
62.104.204.142
|
||||
23.138.24.36
|
||||
59.173.122.232
|
||||
185.108.100.81
|
||||
87.229.246.146
|
||||
10.29.193.15
|
||||
@@ -0,0 +1,9 @@
|
||||
<network>
|
||||
<name>virtnat</name>
|
||||
<forward mode='nat'/>
|
||||
<ip address='192.168.177.1' netmask='255.255.255.0'>
|
||||
<dhcp>
|
||||
<range start='192.168.177.2' end='192.168.177.254'/>
|
||||
</dhcp>
|
||||
</ip>
|
||||
</network>
|
||||
@@ -0,0 +1,37 @@
|
||||
#Paypal
|
||||
151.101.129.21
|
||||
34.107.221.82
|
||||
|
||||
#sigmanet#codium
|
||||
178.238.223.0/24
|
||||
#gititea
|
||||
34.217.253.146
|
||||
|
||||
#microsoft (github)
|
||||
#20.0.0.0/11
|
||||
|
||||
#whois
|
||||
199.212.0.0/24
|
||||
|
||||
#Umea ftp archive (debian)
|
||||
194.71.11.0/24
|
||||
|
||||
#GitHub
|
||||
185.199.111.0/24
|
||||
|
||||
#ChatGpt
|
||||
104.18.32.47
|
||||
|
||||
#ipinfo.io
|
||||
34.117.59.81
|
||||
|
||||
#ifconfig.me
|
||||
34.160.111.145
|
||||
|
||||
#gitea
|
||||
34.217.253.146
|
||||
|
||||
#protonmail
|
||||
185.70.42.0/24
|
||||
185.70.41.0/24
|
||||
185.70.40.0/24
|
||||
Reference in New Issue
Block a user