File firewalld-ipdeny-ipsets-create.sh of Package firewalld-ipdeny-ipsets

Overview Repositories Revisions Requests Users Attributes Meta

File firewalld-ipdeny-ipsets-create.sh of Package firewalld-ipdeny-ipsets (Revision fd079997e29b956c80784f4342790d06)

Currently displaying revision fd079997e29b956c80784f4342790d06 , Show latest

#!/bin/bash
#
# Copyright (c 2020, Ilmi Solutions Oy
# All Rights reserved
# Email: ilmi@ilmi.fi
#
# Description:
# This script download IP network info from fantastic project
# IPDENY.com:https://www.ipdeny.com/ipblocks/ and converts
# then to firewalld ipsets. After that they are converted to
# rpms
#
# Based on the below article
# https://www.linode.com/community/questions/11143/top-tip-firewalld-and-ipset-country-blacklist
# Original
# https://pagure.io/firewalld-blacklist/tree/master

# Currently not in all-zones package
# Cocos (keeling) islands:cc
# United states minor outlying islands:um

# Land names that are in file
LANDCODES="Afghanistan:af
Land islands:ax
Albania:al
Algeria:dz
American samoa:as
Andorra:ad
Angola:ao
Anguilla:ai
Antarctica:aq
Antigua and barbuda:ag
Argentina:ar
Armenia:am
Aruba:aw
Australia:au
Austria:at
Azerbaijan:az
Bahamas:bs
Bahrain:bh
Bangladesh:bd
Barbados:bb
Belarus:by
Belgium:be
Belize:bz
Benin:bj
Bermuda:bm
Bhutan:bt
Bolivia:bo
Bosnia and herzegovina:ba
Botswana:bw
Brazil:br
British indian ocean territory:io
Brunei darussalam:bn
Bulgaria:bg
Burkina faso:bf
Burundi:bi
Cambodia:kh
Cameroon:cm
Canada:ca
Cape verde:cv
Cayman islands:ky
Central african republic:cf
Chad:td
Chile:cl
China:cn
Colombia:co
Comoros:km
Congo:cg
Congo, the democratic republic of the:cd
Cook islands:ck
Costa rica:cr
Cote d'ivoire:ci
Croatia:hr
Cuba:cu
Curaçao:cw
Cyprus:cy
Czech republic:cz
Denmark:dk
Djibouti:dj
Dominica:dm
Dominican republic:do
Ecuador:ec
Egypt:eg
El salvador:sv
Equatorial guinea:gq
Eritrea:er
Estonia:ee
Ethiopia:et
European Union:eu
Falkland islands (malvinas):fk
Faroe islands:fo
Fiji:fj
Finland:fi
France:fr
French guiana:gf
French polynesia:pf
Gabon:ga
Gambia:gm
Georgia:ge
Germany:de
Ghana:gh
Gibraltar:gi
Greece:gr
Greenland:gl
Grenada:gd
Guadeloupe:gp
Guam:gu
Guatemala:gt
Guinea:gn
Guinea-bissau:gw
Guernsey:gg
Guyana:gy
Haiti:ht
Holy see (vatican city state):va
Gonduras:hn
Gong kong:hk
Gungary:hu
Iceland:is
India:in
Indonesia:id
Iran, islamic republic of:ir
Iraq:iq
Ireland:ie
Isle of man:im
Israel:il
Italy:it
Jamaica:jm
Japan:jp
Jersey:je
Jordan:jo
Kazakhstan:kz
Kenya:ke
Kiribati:ki
Korea, democratic people's republic of:kp
Korea, republic of:kr
Kuwait:kw
Kyrgyzstan:kg
Lao people's democratic republic:la
Latvia:lv
Lebanon:lb
Lesotho:ls
Liberia:lr
Libyan arab jamahiriya:ly
Liechtenstein:li
Lithuania:lt
Luxembourg:lu
Macao:mo
Macedonia, the former yugoslav republic of:mk
Madagascar:mg
Malawi:mw
Malaysia:my
Maldives:mv
Mali:ml
Malta:mt
Marshall islands:mh
Martinique:mq
Mauritania:mr
Mauritius:mu
Mayotte:yt
Mexico:mx
Micronesia, federated states of:fm
Moldova, republic of:md
Monaco:mc
Mongolia:mn
Montenegro:me
Montserrat:ms
Morocco:ma
Mozambique:mz
Myanmar:mm
Namibia:na
Nauru:nr
Nepal:np
Netherlands:nl
New caledonia:nc
New zealand:nz
Nicaragua:ni
Niger:ne
Nigeria:ng
Niue:nu
Norfolk island:nf
Northern mariana islands:mp
Norway:no
Oman:om
Pakistan:pk
Palau:pw
Palestinian territory, occupied:ps
Panama:pa
Papua new guinea:pg
Paraguay:py
Peru:pe
Philippines:ph
Poland:pl
Portugal:pt
Puerto rico:pr
Qatar:qa
Reunion:re
Romania:ro
Russian federation:ru
Rwanda:rw
Saint kitts and nevis:kn
Saint lucia:lc
Saint pierre and miquelon:pm
Saint vincent and the grenadines:vc
Samoa:ws
San marino:sm
Sao tome and principe:st
Saudi arabia:sa
Senegal:sn
Serbia:rs
Seychelles:sc
Sierra leone:sl
Singapore:sg
Slovakia:sk
Slovenia:si
Solomon islands:sb
Somalia:so
South Africa:za
South Sudan:ss
Spain:es
Sint Maarten:sx
Sri lanka:lk
Sudan:sd
Suriname:sr
Swaziland:sz
Sweden:se
Switzerland:ch
Syrian arab republic:sy
Taiwan:tw
Tajikistan:tj
Tanzania:tz
Thailand:th
Timor-leste:tl
Togo:tg
Tokelau:tk
Tonga:to
Trinidad and tobago:tt
Tunisia:tn
Turkey:tr
Turkmenistan:tm
Turks and caicos islands:tc
Tuvalu:tv
Uganda:ug
Ukraine:ua
United arab emirates:ae
United kingdom:gb
United states:us
Uruguay:uy
Uzbekistan:uz
Vanuatu:vu
Venezuela:ve
Viet nam:vn
Virgin islands, british:vg
Virgin islands, u.s.:vi
Wallis and futuna:wf
Yemen:ye
Zambia:zm
Zimbabwe:zw"

function countries_package()
{
  local -n LIST=$1
  local AREANAME=$2

cat << EOL
%package ${AREANAME}
Summary:        IPDENY.com this area for ${AREANAME^} FirewallD ipset XML
Group:          Productivity/Networking/Security
Requires:       firewalld
EOL

COUNTRIES=""
  NOTCOUNTRIES=""
  REQUIRES=""
  for land in ${LANDCODES}
  do
      NAME=$(echo ${land} | cut -f 1 -d ':')
      SHORT=$(echo ${land} | cut -f 2 -d ':')

if [[ "${LIST[*]}" =~ "${NAME}" ]]
      then
        COUNTRIES+=" * ${NAME}\n"
        REQUIRES+="# ${NAME}\n"
        REQUIRES+="Requires:       firewalld-ipdeny-ipsets-${SHORT}\n"
      fi
  done

NOT=0

for land in ${LIST[@]}
  do
    if [[ "${land}" =~ "${COUNTRIES}" ]]
    then
       NOTCOUNTRIES+=" * ${NAME}\n"
       NOT=1
    fi
  done

echo -e ${REQUIRES}

cat << EOL
%description ${AREANAME}
Metapackage for ${AREANAME^}-area
Countries or areas are:
EOL

echo -e ${COUNTRIES}

if [ "${NOT}" == "1" ]
  then
     echo "Currently not included:"
     echo -e ${NOTCOUNTRIES}
  fi
}

COUNTRIES_IN_NORTH_AMERICA=("Antigua and Barbuda"
"Bahamas"
"Barbados"
"Belize"
"Canada"
"Costa Rica"
"Cuba"
"Dominica"
"Dominican Republic"
"El Salvador"
"Grenada"
"Guatemala"
"Haiti"
"Honduras"
"Jamaica"
"Mexico"
"Nicaragua"
"Panama"
"Saint Kitts and Nevis"
"Saint Lucia"
"Saint Vincent and the Grenadines"
"Trinidad and Tobago"
"United States of America"
"Anguilla"
"Aruba"
"Bermuda"
"Bonaire"
"British Virgin Islands"
"Cayman Islands"
"Clipperton Island"
"Curacao"
"Greenland"
"Guadeloupe"
"Martinique"
"Montserrat"
"Navassa Island"
"Puerto Rico"
"Saba"
"Saint Barthelemy"
"Saint Martin"
"Saint Pierre and Miquelon"
"Sint Eustatius"
"Sint Maarten"
"Turks and Caicos Islands"
"US Virgin Islands")

COUNTRIES_IN_CARIBBEAN=("Antigua and Barbuda"
"Bahamas"
"Barbados"
"Aruba"
"Sint Eustatius and Saba"
"Bonaire"
"Sint Eustatius"
"Saba"
"Curaçao"
"Sint Maarten"
"Collectivity of Saint Martin"
"Guadeloupe"
"Martinique"
"Saint Barthélemy"
"Dominican Republic"
"Haiti"
"Navassa Island"
"Puerto Rico"
"United States Virgin Islands"
"British Virgin Islands"
"Anguilla"
"Cayman Islands"
"Montserrat"
"Turks and Caicos Islands"
"Cuba"
"Dominica"
"Jamaica"
"Grenada"
"Archipelago of San Andrés"
"Federal Dependencies of Venezuela"
"Nueva Esparta"
"Trinidad and Tobago"
"Saint Kitts and Nevis"
"Saint Lucia"
"Saint Vincent and the Grenadines")

COUNTRIES_IN_SOUTH_AMERICA=("Argentina"
"Bolivia"
"Brazil"
"Chile"
"Colombia"
"Ecuador"
"Guyana"
"Paraguay"
"Peru"
"Suriname"
"Uruguay"
"Venezuela"
"Falkland Islands"
"French Guiana"
"South Georgia and the South Sandwich Islands")

COUNTRIES_IN_EASTERN_EUROPE=("Estonia"
"Latvia"
"Lithuania"
"Poland"
"Czech Republic"
"Slovakia"
"Hungary"
"Romania"
"Bulgaria"
"Slovenia"
"Croatia"
"Albania"
"Montenegro"
"Serbia"
"North Macedonia"
"Bosnia and Herzegovina"
"Kosovo")

COUNTRIES_IN_OCEANIA=("Australia"
"Fiji"
"Kiribati"
"Marshall Islands"
"Micronesia"
"Nauru"
"New Zealand"
"Palau"
"Papua New Guinea"
"Samoa"
"Solomon Islands"
"Tonga"
"Tuvalu"
"Vanuatu"
"American Samoa"
"Cook Islands"
"French Polynesia"
"Guam"
"New Caledonia"
"Niue"
"Norfolk Island"
"Northern Mariana Islands"
"Pitcairn Islands"
"Tokelau"
"Wake Island"
"Wallis and Futuna")

COUNTRIES_IN_ASIA=("Afghanistan‎"
"Armenia"
"Azerbaijan"
"Bahrain"
"Bangladesh"
"Bhutan"
"Brunei"
"Cambodia"
"China"
"Cyprus"
"East Timor"
"Egypt"
"Georgia"
"India"
"Indonesia"
"Iran"
"Iraq"
"Israel"
"Japan"
"Jordan"
"Kazakhstan"‎
"Kuwait"
"Kyrgyzstan"‎
"Laos"
"Lebanon"
"Malaysia"
"Maldives"
"Mongolia"
"Myanmar"
"Nepal"
"Northern Cyprus"
"Oman"
"Pakistan"‎
"Philippines"‎
"Qatar"
"Russia"
"Saudi Arabia"‎
"Singapore"
"Sri Lanka"
"Syria"
"Taiwan"
"Tajikistan"‎
"Thailand"
"Turkey"
"Turkmenistan"‎
"United Arab Emirates"‎
"Uzbekistan"
"Vietnam"
"Yemen‎")

COUNTRIES_IN_AFRICA=("Angola"
"Benin"‎
"Botswana"
"Burkina Faso"
"Burundi‎"
"Cameroon"
"Cape Verde"
"Central African Republic"
"Chad‎"
"Comoros"
"Democratic Republic of the Congo"‎
"Egypt‎"
"Equatorial Guinea"‎,
"Eritrea‎"
"Ethiopia‎"
"Gabon‎"
"Gambia"‎,
"Ghana‎"
"Guinea‎"
"Guinea-Bissau"‎,
"Ivory Coast‎"
"Kenya‎"
"Lesotho"‎,
"Liberia‎"
"Libya‎"
"Madagascar"‎
"Malawi‎"
"Mali‎"
"Mauritania"‎,
"Mauritius‎"
"Morocco"
"Mozambique"‎
"Namibia‎"
"Niger‎"
"Nigeria"‎,
"Rwanda‎"
"Sahrawi Arab Democratic Republic"‎
"São Tomé and Príncipe‎"
"Senegal‎"
"Seychelles"‎,
"Sierra Leone"‎
"Somalia‎"
"Somaliland"‎,
"South Africa"‎,
"South Sudan‎"
"Sudan‎"
"Tanzania"‎
"Togo"
"Tunisia"‎,
"Uganda"‎,
"Western Sahara"‎
"Zambia"‎,
"Zimbabwe‎")

# CUR_DATE=$(date --iso-8601 | tr -d '-')
# Download the latest network adresses by country file
# curl https://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz > all-zones-${CUR_DATE}.tar.gz
IFS=$'\n'

countries_package COUNTRIES_IN_ASIA "asia"
countries_package COUNTRIES_IN_AFRICA "africa"
countries_package COUNTRIES_IN_NORTH_AMERICA "north-america"
countries_package COUNTRIES_IN_SOUTH_AMERICA "south-america"
countries_package COUNTRIES_IN_OCEANIA "australia-oceania"
countries_package COUNTRIES_IN_EASTERN_EUROPE "eastern-europe"
countries_package COUNTRIES_IN_CARIBBEAN "caribbean"

POSTUNSCRIPT=""
FILES=""

# Create packages
for land in ${LANDCODES}
do
  NAME=$(echo ${land} | cut -f 1 -d ':')
  SHORT=$(echo ${land} | cut -f 2 -d ':')
  SAFENAME=$(echo ${NAME} | cut -f 1 -d ':' | tr [:upper:] [:lower:] | tr -d ',' | tr -d "'"| tr "[:blank:]" "_" )

echo

cat << EOL
%package ${SHORT}
Summary:        IPDENY.com ${NAME} FirewallD ipset XML
Group:          Productivity/Networking/Security
Requires:       firewalld
Requires:       firewalld-ipdeny-ipsets = %{version}

%description ${SHORT}
Blocklists for ${NAME}

Blocklist is added automaticly to 'public'-zone with rich rule
If you want to use some other zone apply/remove by hand with as root

\$ firewall-cmd --permanent --zone=<ZONENAME> --add-rich-rule='rule source ipset=ipdeny-${SAFENAME}-${SHORT} log prefix=ipset_${SHORT}-'

To use this package there have to be FirewallD up and running!
You HAVE TO RELOAD firewall by yourself!
After RELOAD it drop packages from thos IP addresses and if you
are communicating from banned IPv4 block _you can't communicate
with your server anymore_. Don't take risks and be safe!

IPdeny offers country GEO IP address block downloads free of charge.
Our country based IP zone files can be easily used in your applications and
web sites to minimize on-line fraud, SPAM, floods and sometimes brute force attacks.
EOL

POSTUNSCRIPT+="%post ${SHORT}\ntest -f %{_bindir}/firewall-cmd && %{_bindir}/firewall-cmd --quiet --permanent --zone=public --add-rich-rule=\"rule source ipset=ipdeny-${SHORT} log prefix=ipset_${SAFENAME}_${SHORT}- level=info limit value=1/m drop\" || : %{nil}\n\n"
POSTUNSCRIPT+="%preun ${SHORT}\ntest -f %{_bindir}/firewall-cmd && %{_bindir}/firewall-cmd --quiet --permanent --zone=public --remove-rich-rule=\"rule source ipset=ipdeny-${SHORT} log prefix=ipset_${SAFENAME}_${SHORT}- level=info limit value=1/m drop\" || : %{nil}\n\n"

FILES+="%files ${SHORT}\n%config %{_sysconfdir}/firewalld/ipsets/ipdeny-${SHORT}.xml\n\n"

done

echo
echo -e ${POSTUNSCRIPT}
echo -e ${FILES}

Places

File firewalld-ipdeny-ipsets-create.sh of Package firewalld-ipdeny-ipsets (Revision fd079997e29b956c80784f4342790d06)

Places