File firewalld-ipdeny-ipsets-create.sh of Package firewalld-ipdeny-ipsets

Overview Repositories Revisions Requests Users Attributes Meta

File firewalld-ipdeny-ipsets-create.sh of Package firewalld-ipdeny-ipsets (Revision 8d17bcfcc072936c5ba8ab5d52526d92)

Currently displaying revision 8d17bcfcc072936c5ba8ab5d52526d92 , Show latest

#!/bin/bash
#
# Copyright (c 2020, Ilmi Solutions Oy
# All Rights reserved
# Email: ilmi@ilmi.fi
#
# Description:
# This script download IP network info from fantastic project
# IPDENY.com:https://www.ipdeny.com/ipblocks/ and converts
# then to firewalld ipsets. After that they are converted to
# rpms
#
# Based on the below article
# https://www.linode.com/community/questions/11143/top-tip-firewalld-and-ipset-country-blacklist
# Original
# https://pagure.io/firewalld-blacklist/tree/master

# Currently not in all-zones package
# Cocos (keeling) islands:cc
# United states minor outlying islands:um

# Land names that are in file
LANDCODES="Afghanistan:af
Land islands:ax
Albania:al
Algeria:dz
American samoa:as
Andorra:ad
Angola:ao
Anguilla:ai
Antarctica:aq
Antigua and barbuda:ag
Argentina:ar
Armenia:am
Aruba:aw
Australia:au
Austria:at
Azerbaijan:az
Bahamas:bs
Bahrain:bh
Bangladesh:bd
Barbados:bb
Belarus:by
Belgium:be
Belize:bz
Benin:bj
Bermuda:bm
Bhutan:bt
Bolivia:bo
Bosnia and herzegovina:ba
Botswana:bw
Brazil:br
British indian ocean territory:io
Brunei darussalam:bn
Bulgaria:bg
Burkina faso:bf
Burundi:bi
Cambodia:kh
Cameroon:cm
Canada:ca
Cape verde:cv
Cayman islands:ky
Central african republic:cf
Chad:td
Chile:cl
China:cn
Colombia:co
Comoros:km
Congo:cg
Congo, the democratic republic of the:cd
Cook islands:ck
Costa rica:cr
Cote d'ivoire:ci
Croatia:hr
Cuba:cu
Cyprus:cy
Czech republic:cz
Denmark:dk
Djibouti:dj
Dominica:dm
Dominican republic:do
Ecuador:ec
Egypt:eg
El salvador:sv
Equatorial guinea:gq
Eritrea:er
Estonia:ee
Ethiopia:et
Falkland islands (malvinas):fk
Faroe islands:fo
Fiji:fj
Finland:fi
France:fr
French guiana:gf
French polynesia:pf
Gabon:ga
Gambia:gm
Georgia:ge
Germany:de
Ghana:gh
Gibraltar:gi
Greece:gr
Greenland:gl
Grenada:gd
Guadeloupe:gp
Guam:gu
Guatemala:gt
Guinea:gn
Guinea-bissau:gw
Guyana:gy
Haiti:ht
Holy see (vatican city state):va
Gonduras:hn
Gong kong:hk
Gungary:hu
Iceland:is
India:in
Indonesia:id
Iran, islamic republic of:ir
Iraq:iq
Ireland:ie
Isle of man:im
Israel:il
Italy:it
Jamaica:jm
Japan:jp
Jersey:je
Jordan:jo
Kazakhstan:kz
Kenya:ke
Kiribati:ki
Korea, democratic people's republic of:kp
Korea, republic of:kr
Kuwait:kw
Kyrgyzstan:kg
Lao people's democratic republic:la
Latvia:lv
Lebanon:lb
Lesotho:ls
Liberia:lr
Libyan arab jamahiriya:ly
Liechtenstein:li
Lithuania:lt
Luxembourg:lu
Macao:mo
Macedonia, the former yugoslav republic of:mk
Madagascar:mg
Malawi:mw
Malaysia:my
Maldives:mv
Mali:ml
Malta:mt
Marshall islands:mh
Martinique:mq
Mauritania:mr
Mauritius:mu
Mayotte:yt
Mexico:mx
Micronesia, federated states of:fm
Moldova, republic of:md
Monaco:mc
Mongolia:mn
Montenegro:me
Montserrat:ms
Morocco:ma
Mozambique:mz
Myanmar:mm
Namibia:na
Nauru:nr
Nepal:np
Netherlands:nl
New caledonia:nc
New zealand:nz
Nicaragua:ni
Niger:ne
Nigeria:ng
Niue:nu
Norfolk island:nf
Northern mariana islands:mp
Norway:no
Oman:om
Pakistan:pk
Palau:pw
Palestinian territory, occupied:ps
Panama:pa
Papua new guinea:pg
Paraguay:py
Peru:pe
Philippines:ph
Poland:pl
Portugal:pt
Puerto rico:pr
Qatar:qa
Reunion:re
Romania:ro
Russian federation:ru
Rwanda:rw
Saint kitts and nevis:kn
Saint lucia:lc
Saint pierre and miquelon:pm
Saint vincent and the grenadines:vc
Samoa:ws
San marino:sm
Sao tome and principe:st
Saudi arabia:sa
Senegal:sn
Serbia:rs
Seychelles:sc
Sierra leone:sl
Singapore:sg
Slovakia:sk
Slovenia:si
Solomon islands:sb
Somalia:so
South africa:za
Spain:es
Sri lanka:lk
Sudan:sd
Suriname:sr
Swaziland:sz
Sweden:se
Switzerland:ch
Syrian arab republic:sy
Taiwan:tw
Tajikistan:tj
Thailand:th
Timor-leste:tl
Togo:tg
Tokelau:tk
Tonga:to
Trinidad and tobago:tt
Tunisia:tn
Turkey:tr
Turkmenistan:tm
Turks and caicos islands:tc
Tuvalu:tv
Uganda:ug
Ukraine:ua
United arab emirates:ae
United kingdom:gb
United states:us
Uruguay:uy
Uzbekistan:uz
Vanuatu:vu
Venezuela:ve
Viet nam:vn
Virgin islands, british:vg
Virgin islands, u.s.:vi
Wallis and futuna:wf
Yemen:ye
Zambia:zm
Zimbabwe:zw"

COUNTRIES_IN_NORTH_AMERICA="Antigua and Barbuda
Bahamas
Barbados
Belize
Canada
Costa Rica
Cuba
Dominica
Dominican Republic
El Salvador
Grenada
Guatemala
Haiti
Honduras
Jamaica
Mexico
Nicaragua
Panama
Saint Kitts and Nevis
Saint Lucia
Saint Vincent and the Grenadines
Trinidad and Tobago
United States of America
Anguilla
Aruba
Bermuda
Bonaire
British Virgin Islands
Cayman Islands
Clipperton Island
Curacao
Greenland
Guadeloupe
Martinique
Montserrat
Navassa Island
Puerto Rico
Saba
Saint Barthelemy
Saint Martin
Saint Pierre and Miquelon
Sint Eustatius
Sint Maarten
Turks and Caicos Islands
US Virgin Islands"

COUNTRIES_IN_SOUTH_AMERICA="Argentina
Bolivia
Brazil
Chile
Colombia
Ecuador
Guyana
Paraguay
Peru
Suriname
Uruguay
Venezuela
Falkland Islands
French Guiana
South Georgia and the South Sandwich Islands"

COUNTRIES_IN_EASTERN_EUROPE="Estonia
Latvia
Lithuania
Poland
Czech Republic
Slovakia
Hungary
Romania
Bulgaria
Slovenia
Croatia
Albania
Montenegro
Serbia
North Macedonia
Bosnia and Herzegovina
Kosovo"

COUNTRIES_IN_OCEANIA="Australia
Fiji
Kiribati
Marshall Islands
Micronesia
Nauru
New Zealand
Palau
Papua New Guinea
Samoa
Solomon Islands
Tonga
Tuvalu
Vanuatu
American Samoa
Cook Islands
French Polynesia
Guam
New Caledonia
Niue
Norfolk Island
Northern Mariana Islands
Pitcairn Islands
Tokelau
Wake Island
Wallis and Futuna"

COUNTRIES_IN_ASIA="Afghanistan‎
Armenia‎
Azerbaijan‎
Bahrain‎
Bangladesh‎
Bhutan‎
Brunei‎
Cambodia‎
China‎
Cyprus‎
East Timor‎
Egypt‎
Georgia
India‎
Indonesia‎
Iran‎
Iraq‎
Israel‎
Japan‎
Jordan‎
Kazakhstan‎
Kuwait‎
Kyrgyzstan‎
Laos‎
Lebanon‎
Malaysia‎
Maldives‎
Mongolia‎
Myanmar‎
Nepal
Northern Cyprus‎
Oman‎
Pakistan‎
Philippines‎
Qatar‎
Russia‎
Saudi Arabia‎
Singapore‎
Sri Lanka‎
Syria‎
Taiwan‎
Tajikistan‎
Thailand‎
Turkey‎
Turkmenistan‎
United Arab Emirates‎
Uzbekistan‎
Vietnam‎
Yemen‎"

COUNTRIES_IN_AFRICA="Angola
Benin‎
Botswana
Burkina Faso
Burundi‎
Cameroon
Cape Verde
Central African Republic
Chad‎
Comoros
Democratic Republic of the Congo‎
Egypt‎
Equatorial Guinea‎
Eritrea‎
Ethiopia‎
Gabon‎
The Gambia‎
Ghana‎
Guinea‎
Guinea-Bissau‎
Ivory Coast‎
Kenya‎
Lesotho‎
Liberia‎
Libya‎
Madagascar‎
Malawi‎
Mali‎
Mauritania‎
Mauritius‎
Morocco
Mozambique‎
Namibia‎
Niger‎
Nigeria‎
Rwanda‎
Sahrawi Arab Democratic Republic‎
São Tomé and Príncipe‎
Senegal‎
Seychelles‎
Sierra Leone‎
Somalia‎
Somaliland‎
South Africa‎
South Sudan‎
Sudan‎
Tanzania‎
Togo
Tunisia‎
Uganda‎
Western Sahara‎
Zambia‎
Zimbabwe‎"

# CUR_DATE=$(date --iso-8601 | tr -d '-')
# Download the latest network adresses by country file
# curl https://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz > all-zones-${CUR_DATE}.tar.gz
IFS=$'\n'

echo "# African continent countries"
for land in ${LANDCODES}
do
  NAME=$(echo ${land} | cut -f 1 -d ':')
  SHORT=$(echo ${land} | cut -f 2 -d ':')

if [[ "${COUNTRIES_IN_AFRICA}" =~ "${NAME}" ]]
  then
    echo "# ${NAME}"
    echo "Requires:       firewalld-ipdeny-ipsets-${SHORT}"
  fi

done

echo "# Asian continent countries"
for land in ${LANDCODES}
do
  NAME=$(echo ${land} | cut -f 1 -d ':')
  SHORT=$(echo ${land} | cut -f 2 -d ':')

if [[ "${COUNTRIES_IN_ASIA}" =~ "${NAME}" ]]
  then
    echo "# ${NAME}"
    echo "Requires:       firewalld-ipdeny-ipsets-${SHORT}"
  fi

done

echo "# Eastern Europe countries"
for land in ${LANDCODES}
do
  NAME=$(echo ${land} | cut -f 1 -d ':')
  SHORT=$(echo ${land} | cut -f 2 -d ':')

if [[ "${COUNTRIES_IN_EASTERN_EUROPE}" =~ "${NAME}" ]]
  then
    echo "# ${NAME}"
    echo "Requires:       firewalld-ipdeny-ipsets-${SHORT}"
  fi

done

echo "# South American countries"
for land in ${LANDCODES}
do
  NAME=$(echo ${land} | cut -f 1 -d ':')
  SHORT=$(echo ${land} | cut -f 2 -d ':')

if [[ "${COUNTRIES_IN_SOUTH_AMERICA}" =~ "${NAME}" ]]
  then
    echo "# ${NAME}"
    echo "Requires:       firewalld-ipdeny-ipsets-${SHORT}"
  fi

done

echo "# North American countries"
for land in ${LANDCODES}
do
  NAME=$(echo ${land} | cut -f 1 -d ':')
  SHORT=$(echo ${land} | cut -f 2 -d ':')

if [[ "${COUNTRIES_IN_NORTH_AMERICA}" =~ "${NAME}" ]]
  then
    echo "# ${NAME}"
    echo "Requires:       firewalld-ipdeny-ipsets-${SHORT}"
  fi

done

echo "# Australia and Oceania countries"
for land in ${LANDCODES}
do
  NAME=$(echo ${land} | cut -f 1 -d ':')
  SHORT=$(echo ${land} | cut -f 2 -d ':')

if [[ "${COUNTRIES_IN_OCEANIA}" =~ "${NAME}" ]]
  then
    echo "# ${NAME}"
    echo "Requires:       firewalld-ipdeny-ipsets-${SHORT}"
  fi

done

# Create packages
for land in ${LANDCODES}
do
  NAME=$(echo ${land} | cut -f 1 -d ':')
  SHORT=$(echo ${land} | cut -f 2 -d ':')

echo

cat << EOL
%package ${SHORT}
Summary:        IPDENY.com ${NAME} FirewallD ipset XML
Group:          Productivity/Networking/Security
Requires:       firewalld
Requires:       firewalld-ipdeny-ipsets = %{version}

%description ${SHORT}
Blocklists for ${NAME}

Blocklist is added automaticly to 'public'-zone with rich rule
If you want to use some other zone apply/remove by hand with as root

\$ firewall-cmd --permanent --zone=ZONENAME --add-rich-rule='rule source ipset=ipdeny-${SHORT} log prefix=ipset_${SHORT}- level=info limit value=1/m drop'

To use this package there have to be FirewallD up and running!
This package can be extremely DANGEROUS if one does not understand what
one is doing. BEWARE and be safe.

IPdeny offers country GEO IP address block downloads free of charge.
Our country based IP zone files can be easily used in your applications and
web sites to minimize on-line fraud, SPAM, floods and sometimes brute force attacks.
EOL
done

# Create POST and POSTUN scripts
for land in ${LANDCODES}
do
  NAME=$(echo ${land} | cut -f 1 -d ':')
  SHORT=$(echo ${land} | cut -f 2 -d ':')

echo
cat << EOL
%post ${SHORT}
test -f %{_bindir}/firewall-cmd && %{_bindir}/firewall-cmd --quiet --permanent --zone=public --add-rich-rule="rule source ipset=ipdeny-${SHORT} log prefix=ipset_${SHORT}- level=info limit value=1/m drop" || : \
%{nil}

%preun ${SHORT}
test -f %{_bindir}/firewall-cmd && %{_bindir}/firewall-cmd --quiet --permanent --zone=public --remove-rich-rule="rule source ipset=ipdeny-${SHORT} log prefix=ipset_${SHORT}- level=info limit value=1/m drop" || : \
%{nil}
EOL
done

# Create files
for land in ${LANDCODES}
do
  NAME=$(echo ${land} | cut -f 1 -d ':')
  SHORT=$(echo ${land} | cut -f 2 -d ':')

echo
cat << EOL
%files ${SHORT}
%config %{_sysconfdir}/firewalld/ipsets/ipdeny-${SHORT}.xml
EOL
done

Places

File firewalld-ipdeny-ipsets-create.sh of Package firewalld-ipdeny-ipsets (Revision 8d17bcfcc072936c5ba8ab5d52526d92)

Places