forked from divested/scfw3
Complementing your firewall with IP blocking
- Shell 67.3%
- Python 32.7%
|
|
||
|---|---|---|
| .gitignore | Process exclusions using a persistent file | |
| .gitlab-ci.yml | CI: enable shellcheck | |
| ip-aggregator.py | Combine all lists into one big optimized list for efficiency | |
| LICENSE | Going the distance... [pt3] | |
| README.md | Combine all lists into one big optimized list for efficiency | |
| scfw3.sh | Minor fix | |
| trash.sh | Fixup | |
SCFW3
Overview
This is a simple script to block known bad addresses. It is meant to be used on top of firewalld.
Use
- Place scfw3.sh into /etc/cron.daily/1scfw
- Copy ip-aggregator.py into /usr/local/bin/
- This is mandatory
- Configure the lists you want enabled at the top of it
- Copy ip-aggregator.py into /usr/local/bin/
- Place trash.sh into /etc/cron.hourly/2trash
chmod +xboth of them- Enjoy!
Known Issues
- You must set FirewallBackend to iptables for firewalld or will have very long load times
Credits
- FireHOL for the blocklists: https://iplists.firehol.org
- IPdeny for the country lists: https://ipdeny.com
- @andrewtwin for the IP & CIDR merger: https://github.com/andrewtwin/ip-aggregator