File firewalld-ipdeny-ipsets-create.sh of Package firewalld-ipdeny-ipsets

Overview Repositories Revisions Requests Users Attributes Meta

File firewalld-ipdeny-ipsets-create.sh of Package firewalld-ipdeny-ipsets (Revision 2c55aecec3beeb8bb18cde370988171b)

Currently displaying revision 2c55aecec3beeb8bb18cde370988171b , Show latest

#!/bin/bash
#
# Copyright (c) 2020-2021, Ilmi Solutions Oy
# All Rights reserved
# Email: ilmi@ilmi.fi
#
# Description:
# This script download IP network info from fantastic project
# IPDENY.com:https://www.ipdeny.com/ipblocks/ and converts
# then to firewalld ipsets. After that they are converted to
# rpms
#
# Based on the below article
# https://www.linode.com/community/questions/11143/top-tip-firewalld-and-ipset-country-blacklist
# Original
# https://pagure.io/firewalld-blacklist/tree/master

# Currently not in all-zones package
# Cocos (keeling) islands:cc
# United states minor outlying islands:um

# Land names that are in file
LANDCODES="Afghanistan:af
Land islands:ax
Albania:al
Algeria:dz
American samoa:as
Andorra:ad
Angola:ao
Anguilla:ai
Antarctica:aq
Antigua and barbuda:ag
Argentina:ar
Armenia:am
Aruba:aw
Australia:au
Austria:at
Azerbaijan:az
Bahamas:bs
Bahrain:bh
Bangladesh:bd
Barbados:bb
Belarus:by
Belgium:be
Belize:bz
Benin:bj
Bermuda:bm
Bhutan:bt
Bolivia:bo
Bosnia and Herzegovina:ba
Botswana:bw
Brazil:br
British indian ocean territory:io
Brunei:bn
Bulgaria:bg
Burkina faso:bf
Burundi:bi
Cambodia:kh
Cameroon:cm
Canada:ca
Cape verde:cv
Cayman islands:ky
Central african republic:cf
Chad:td
Chile:cl
China:cn
Colombia:co
Comoros:km
Congo:cg
Congo, the democratic republic of the:cd
Cook islands:ck
Costa rica:cr
Cote d'ivoire:ci
Croatia:hr
Cuba:cu
Curaçao:cw
Cyprus:cy
Czech Republic:cz
Denmark:dk
Djibouti:dj
Dominica:dm
Dominican republic:do
Ecuador:ec
Egypt:eg
El salvador:sv
Equatorial Guinea:gq
Eritrea:er
Estonia:ee
Ethiopia:et
European Union:eu
Falkland islands (malvinas):fk
Faroe islands:fo
Fiji:fj
Finland:fi
France:fr
French guiana:gf
French polynesia:pf
Gabon:ga
Gambia:gm
Georgia:ge
Germany:de
Ghana:gh
Gibraltar:gi
Greece:gr
Greenland:gl
Grenada:gd
Guadeloupe:gp
Guam:gu
Guatemala:gt
Guinea:gn
Guinea-Bissau:gw
Guernsey:gg
Guyana:gy
Haiti:ht
Holy see (vatican city state):va
Gonduras:hn
Gong kong:hk
Gungary:hu
Iceland:is
India:in
Indonesia:id
Iran, islamic republic of:ir
Iraq:iq
Ireland:ie
Isle of man:im
Israel:il
Italy:it
Jamaica:jm
Japan:jp
Jersey:je
Jordan:jo
Kazakhstan:kz
Kenya:ke
Kiribati:ki
Korea, democratic people's republic of:kp
Korea, republic of:kr
Kuwait:kw
Kyrgyzstan:kg
Lao people's democratic republic:la
Latvia:lv
Lebanon:lb
Lesotho:ls
Liberia:lr
Libya:ly
Liechtenstein:li
Lithuania:lt
Luxembourg:lu
Macao:mo
Macedonia, the former yugoslav republic of:mk
Madagascar:mg
Malawi:mw
Malaysia:my
Maldives:mv
Mali:ml
Malta:mt
Marshall islands:mh
Martinique:mq
Mauritania:mr
Mauritius:mu
Mayotte:yt
Mexico:mx
Micronesia, federated states of:fm
Moldova, republic of:md
Monaco:mc
Mongolia:mn
Montenegro:me
Montserrat:ms
Morocco:ma
Mozambique:mz
Myanmar:mm
Namibia:na
Nauru:nr
Nepal:np
Netherlands:nl
New caledonia:nc
New zealand:nz
Nicaragua:ni
Niger:ne
Nigeria:ng
Niue:nu
Norfolk island:nf
Northern mariana islands:mp
Norway:no
Oman:om
Pakistan:pk
Palau:pw
Palestinian territory, occupied:ps
Panama:pa
Papua new guinea:pg
Paraguay:py
Peru:pe
Philippines:ph
Poland:pl
Portugal:pt
Puerto rico:pr
Qatar:qa
Reunion:re
Romania:ro
Russian federation:ru
Rwanda:rw
Saint kitts and nevis:kn
Saint lucia:lc
Saint pierre and miquelon:pm
Saint vincent and the grenadines:vc
Samoa:ws
San marino:sm
Sao Tome and Principe:st
Saudi Arabia:sa
Senegal:sn
Serbia:rs
Seychelles:sc
Sierra Leone:sl
Singapore:sg
Slovakia:sk
Slovenia:si
Solomon islands:sb
Somalia:so
South Africa:za
South Sudan:ss
Spain:es
Sint Maarten:sx
Sri Lanka:lk
Sudan:sd
Suriname:sr
Swaziland:sz
Sweden:se
Switzerland:ch
Syrian Arab Republic:sy
Taiwan:tw
Tajikistan:tj
Tanzania:tz
Thailand:th
East Timor:tl
Togo:tg
Tokelau:tk
Tonga:to
Trinidad and tobago:tt
Tunisia:tn
Turkey:tr
Turkmenistan:tm
Turks and caicos islands:tc
Tuvalu:tv
Uganda:ug
Ukraine:ua
United Arab Emirates:ae
United Kingdom:gb
United States of America:us
Uruguay:uy
Uzbekistan:uz
Vanuatu:vu
Venezuela:ve
Vietnam:vn
Virgin islands, british:vg
Virgin islands, u.s.:vi
Wallis and futuna:wf
Yemen:ye
Zambia:zm
Zimbabwe:zw"

function countries_package()
{
  local -n LIST=$1
  local AREANAME=$2

cat << EOL
%package ${AREANAME}
Summary:        IPDENY.com FirewallD meta package ${AREANAME^}
Group:          Productivity/Networking/Security
Requires:       firewalld
EOL

COUNTRIES=""
  NOTCOUNTRIES=""
  REQUIRES=""
  README=""
  for land in ${LANDCODES}
  do
      NAME=$(echo ${land} | cut -f 1 -d ':')
      SHORT=$(echo ${land} | cut -f 2 -d ':')

if [[ "${LIST[*]}" =~ "${NAME}" ]]
      then
        COUNTRIES+=" * ${NAME}\n"
        REQUIRES+="# ${NAME}\n"
        REQUIRES+="Requires:       firewalld-ipdeny-ipsets-${SHORT}\n"
        README+=" * ${NAME} (${SHORT})\n"
      fi
  done

NOT=0

for land in ${LIST[@]}
  do
    if [[ "${land}" =~ "${COUNTRIES}" ]]
    then
       NOTCOUNTRIES+=" * ${NAME}\n"
       README+=" - ${NAME} (${SHORT})\n"
       NOT=1
    fi
  done

echo -e ${README} > README.${AREANAME}

echo -e ${REQUIRES}

cat << EOL
%description ${AREANAME}
Metapackage for ${AREANAME^}

IP zone countries or land areas are:
EOL

echo -e ${COUNTRIES}

if [ "${NOT}" == "1" ]
  then
     echo "Currently not included:"
     echo -e ${NOTCOUNTRIES}
  fi
}

COUNTRIES_IN_WESTERN_ASIA=("Akrotiri and Dhekelia"
"Armenia"
"Armenian"
"Azerbaijan"
"Bahrain"
"Cyprus"
"Egypt"
"Georgia"
"Iran, islamic republic of"
"Iraq"
"Israel"
"Jordan"
"Kuwait"
"Lebanon"
"Oman"
"Palestine"
"Qatar"
"Saudi Arabia"
"Syrian Arab Republic"
"Turkey"
"United Arab Emirates"
"Yemen")

COUNTRIES_IN_MIDDLE_EAST=("Akrotiri and Dhekelia"
"Bahrain"
"Cyprus"
"Egypt"
"Iran, islamic republic of"
"Iraq"
"Kurdish"
"Israel"
"Jordan"
"Kuwait"
"Lebanon"
"Oman"
"Palestine"
"Qatar"
"Saudi Arabia"
"Syrian Arab Republic"
"Turkey"
"United Arab Emirates"
"Yemen")

COUNTRIES_IN_NORTH_AMERICA=("Antigua and Barbuda"
"Bahamas"
"Barbados"
"Belize"
"Canada"
"Costa Rica"
"Cuba"
"Dominica"
"Dominican Republic"
"El Salvador"
"Grenada"
"Guatemala"
"Haiti"
"Honduras"
"Jamaica"
"Mexico"
"Nicaragua"
"Panama"
"Saint Kitts and Nevis"
"Saint Lucia"
"Saint Vincent and the Grenadines"
"Trinidad and Tobago"
"United States of America"
"Anguilla"
"Aruba"
"Bermuda"
"Bonaire"
"British Virgin Islands"
"Cayman Islands"
"Clipperton Island"
"Curacao"
"Greenland"
"Guadeloupe"
"Martinique"
"Montserrat"
"Navassa Island"
"Puerto Rico"
"Saba"
"Saint Barthelemy"
"Saint Martin"
"Saint Pierre and Miquelon"
"Sint Eustatius"
"Sint Maarten"
"Turks and Caicos Islands"
"US Virgin Islands")

COUNTRIES_IN_CARIBBEAN=("Antigua and Barbuda"
"Bahamas"
"Barbados"
"Aruba"
"Sint Eustatius and Saba"
"Bonaire"
"Sint Eustatius"
"Saba"
"Curaçao"
"Sint Maarten"
"Collectivity of Saint Martin"
"Guadeloupe"
"Martinique"
"Saint Barthélemy"
"Dominican Republic"
"Haiti"
"Navassa Island"
"Puerto Rico"
"United States Virgin Islands"
"British Virgin Islands"
"Anguilla"
"Cayman Islands"
"Montserrat"
"Turks and Caicos Islands"
"Cuba"
"Dominica"
"Jamaica"
"Grenada"
"Archipelago of San Andrés"
"Federal Dependencies of Venezuela"
"Nueva Esparta"
"Trinidad and Tobago"
"Saint Kitts and Nevis"
"Saint Lucia"
"Saint Vincent and the Grenadines")

COUNTRIES_IN_SOUTH_AMERICA=("Argentina"
"Bolivia"
"Brazil"
"Chile"
"Colombia"
"Ecuador"
"Guyana"
"Paraguay"
"Peru"
"Suriname"
"Uruguay"
"Venezuela"
"Falkland Islands"
"French Guiana"
"South Georgia and the South Sandwich Islands")

COUNTRIES_IN_EASTERN_EUROPE=("Estonia"
"Latvia"
"Lithuania"
"Poland"
"Czech Republic"
"Slovakia"
"Hungary"
"Romania"
"Bulgaria"
"Slovenia"
"Croatia"
"Albania"
"Montenegro"
"Serbia"
"North Macedonia"
"Bosnia and Herzegovina"
"Kosovo")

COUNTRIES_IN_CENTRAL_EUROPE=("Austria"
"Czech Republic"
"Germany"
"Hungary"
"Liechtenstein"
"Poland"
"Slovakia"
"Switzerland")

COUNTRIES_IN_WESTERN_EUROPE=("Austria"
"Belgium"
"Czech Republic"
"France"
"Germany"
"Ireland"
"Liechtenstein"
"Luxembourg"
"Monaco"
"Netherlands"
"Switzerland"
"United Kingdom")

COUNTRIES_IN_SOUTHERN_EUROPE=("Albania"
"Bosnia and Herzegovina"
"Croatia"
"Cyprus"
"East Thrace"
"France"
"Gibraltar"
"Greece"
"Italy"
"Malta"
"Monaco"
"Montenegro"
"Slovenia"
"Spain")

COUNTRIES_IN_SOUTHEAST_EUROPE=("Albania"
"Bosnia and Herzegovina"
"Bulgaria"
"Croatia"
"Greece"
"Kosovo"
"Moldova"
"Montenegro"
"Macedonia"
"Romania"
"Serbia"
"Slovenia"
"Turkey")

COUNTRIES_IN_OCEANIA=("American Samoa"
"Australia"
"Cook Islands"
"Fiji"
"French Polynesia"
"Guam"
"Kiribati"
"Marshall Islands"
"Micronesia"
"Nauru"
"New Caledonia"
"New Zealand"
"Niue"
"Norfolk Island"
"Northern Mariana Islands"
"Palau"
"Papua New Guinea"
"Pitcairn Islands"
"Samoa"
"Solomon Islands"
"Tokelau"
"Tonga"
"Tuvalu"
"Vanuatu"
"Wake Island"
"Wallis and Futuna")

COUNTRIES_IN_ASIA=("Afghanistan‎"
"Armenia"
"Azerbaijan"
"Bahrain"
"Bangladesh"
"Bhutan"
"Brunei"
"Cambodia"
"China"
"Cyprus"
"East Timor"
"Egypt"
"Georgia"
"India"
"Indonesia"
"Iran, islamic republic of"
"Iraq"
"Israel"
"Japan"
"Jordan"
"Kazakhstan"‎
"Kuwait"
"Kyrgyzstan"‎
"Laos"
"Lebanon"
"Malaysia"
"Maldives"
"Mongolia"
"Myanmar"
"Nepal"
"Northern Cyprus"
"Oman"
"Pakistan"‎
"Philippines"‎
"Qatar"
"Russian federation"
"Saudi Arabia"‎
"Singapore"
"Sri Lanka"
"Syrian Arab Republic"
"Taiwan"
"Tajikistan"‎
"Thailand"
"Turkey"
"Turkmenistan"‎
"United Arab Emirates"‎
"Uzbekistan"
"Vietnam"
"Yemen‎")

COUNTRIES_IN_SOUTHEAST_ASIA=(Brunei
"Cambodia"
"East Timor"
"Indonesia"
"Laos"
"Malaysia"
"Myanmar"
"Philippines"
"Singapore"
"Thailand"
"Vietnam")

COUNTRIES_IN_AFRICA=("Angola"
"Benin"‎
"Botswana"
"Burkina Faso"
"Burundi‎"
"Cameroon"
"Cape Verde"
"Central African Republic"
"Chad‎"
"Comoros"
"Congo"‎
"Congo, the democratic republic of the"‎
"Egypt‎"
"Equatorial Guinea"‎,
"Eritrea‎"
"Ethiopia‎"
"Gabon‎"
"Gambia"‎,
"Ghana‎"
"Guinea‎"
"Guinea-Bissau"‎,
"Ivory Coast‎"
"Kenya‎"
"Lesotho"‎,
"Liberia‎"
"Libya‎"
"Madagascar"‎
"Malawi‎"
"Mali‎"
"Mauritania"‎,
"Mauritius‎"
"Morocco"
"Mozambique"‎
"Namibia‎"
"Niger‎"
"Nigeria"‎,
"Rwanda‎"
"Sahrawi"‎
"Sao Tome and Principe‎"
"Senegal‎"
"Seychelles"‎,
"Sierra Leone"‎
"Somalia‎"
"Somaliland"‎,
"South Africa"‎,
"South Sudan‎"
"Sudan‎"
"Tanzania"‎
"Togo"
"Tunisia"‎,
"Uganda"‎,
"Western Sahara"‎
"Zambia"‎,
"Zimbabwe‎")

COUNTRIES_IN_NORTH_AFRICA=("Algeria"
"Egypt"
"Libya"
"Morocco"
"Tunisia"
"Ceuta"
"Melilla"
"Sahrawi")

# CUR_DATE=$(date --iso-8601 | tr -d '-')
# Download the latest network adresses by country file
curl -k https://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz > all-zones.tar.gz
IFS=$'\n'

countries_package COUNTRIES_IN_ASIA "asia"
countries_package COUNTRIES_IN_SOUTHEAST_ASIA "southeast-asia"
countries_package COUNTRIES_IN_WESTERN_ASIA "western-asia"
countries_package COUNTRIES_IN_MIDDLE_EAST "middle-east"
countries_package COUNTRIES_IN_NORTH_AFRICA "north-africa"
countries_package COUNTRIES_IN_AFRICA "africa"
countries_package COUNTRIES_IN_NORTH_AMERICA "north-america"
countries_package COUNTRIES_IN_SOUTH_AMERICA "south-america"
countries_package COUNTRIES_IN_OCEANIA "australia-oceania"
countries_package COUNTRIES_IN_EASTERN_EUROPE "eastern-europe"
countries_package COUNTRIES_IN_CENTRAL_EUROPE "central-europe"
countries_package COUNTRIES_IN_WESTERN_EUROPE "western-europe"
countries_package COUNTRIES_IN_SOUTHERN_EUROPE "southern-europe"
countries_package COUNTRIES_IN_SOUTHEAST_EUROPE "southeast-europe"
countries_package COUNTRIES_IN_CARIBBEAN "caribbean"

POSTUNSCRIPT=""
FILES=""

# Create packages
for land in ${LANDCODES}
do
  NAME=$(echo ${land} | cut -f 1 -d ':')
  SHORT=$(echo ${land} | cut -f 2 -d ':')
  SAFENAME=$(echo ${NAME} | cut -f 1 -d ':' | tr [:upper:] [:lower:] | tr -d ',' | tr -d "'"| tr "[:blank:]" "_" )

echo

cat << EOL
%package ${SHORT}
Summary:        IPDENY.com ${NAME} FirewallD ipset XML
Group:          Productivity/Networking/Security
Requires:       firewalld
Requires:       firewalld-ipdeny-ipsets = %{version}

%description ${SHORT}
Blocklists for ${NAME}

Blocklist is added automaticly to 'public'-zone with rich rule
If you want to use some other zone apply/remove by hand with as root

\$ firewall-cmd --permanent --zone=<ZONENAME> --add-rich-rule='rule source ipset=ipdeny-${SAFENAME}-${SHORT} log prefix=ipset_${SHORT}-'

To use this package there have to be FirewallD up and running!
You HAVE TO RELOAD firewall by yourself!
After RELOAD it drop packages from thos IP addresses and if you
are communicating from banned IPv4 block _you can't communicate
with your server anymore_. Don't take risks and be safe!

IPdeny offers country GEO IP address block downloads free of charge.
Our country based IP zone files can be easily used in your applications and
web sites to minimize on-line fraud, SPAM, floods and sometimes brute force attacks.
EOL

POSTUNSCRIPT+="%post ${SHORT}\ntest -f %{_bindir}/firewall-cmd && %{_bindir}/firewall-cmd --quiet --permanent --zone=public --add-rich-rule=\"rule source ipset=ipdeny-${SHORT}-%{version}_%{release} drop\" || : %{nil}\n\n"
POSTUNSCRIPT+="%preun ${SHORT}\ntest -f %{_bindir}/firewall-cmd && %{_bindir}/firewall-cmd --quiet --permanent --zone=public --remove-rich-rule=\"rule source ipset=ipdeny-${SHORT}-%{version}_%{release} drop\" || : %{nil}\n\n"

FILES+="%files ${SHORT}\n%config %{_sysconfdir}/firewalld/ipsets/ipdeny-${SHORT}-%{version}_%{release}.xml\n\n"

done

echo
echo -e ${POSTUNSCRIPT}
echo "%files
%license Copyrights.txt
%dir %{_sysconfdir}/firewalld
%dir %{_sysconfdir}/firewalld/ipsets

%files north-africa
%doc README.north-africa

%files africa
%doc README.africa

%files middle-east
%doc README.middle-east

%files southeast-asia
%doc README.southeast-asia

%files western-asia
%doc README.western-asia

%files asia
%doc README.asia

%files australia-oceania
%doc README.australia-oceania

%files caribbean
%doc README.caribbean

%files eastern-europe
%doc README.eastern-europe

%files western-europe
%doc README.western-europe

%files southern-europe
%doc README.southern-europe

%files southeast-europe
%doc README.southeast-europe

%files south-america
%doc README.south-america

%files north-america
%doc README.north-america

"
echo -e ${FILES}

Places

File firewalld-ipdeny-ipsets-create.sh of Package firewalld-ipdeny-ipsets (Revision 2c55aecec3beeb8bb18cde370988171b)

Places