Skip to content

ncschool / ncfilters

Go to a project
Switch branch/tag
domain_fw.conf 1.29 KB
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 
iptables -t nat -N OPEN
iptables -t nat -F OPEN
iptables -t nat -A OPEN -j ACCEPT
iptables -t nat -N BLOCK
iptables -t nat -F BLOCK
iptables -t nat -A BLOCK -i eth1 -d 217.13.73.6 -j ACCEPT
iptables -t nat -A BLOCK -i eth1 -d 217.13.73.99 -j ACCEPT
iptables -t nat -A BLOCK -i eth1 -d 217.13.73.99 -j ACCEPT
iptables -t nat -A BLOCK -i eth1 -d 217.13.73.44 -j ACCEPT
iptables -t nat -A BLOCK -i eth1 -d 81.24.75.240 -j ACCEPT
iptables -t nat -A BLOCK -i eth1 -d 88.215.233.20 -j ACCEPT
iptables -t nat -A BLOCK -i eth1 -d 193.96.226.140 -j ACCEPT
iptables -t nat -A BLOCK -i eth1 -d 81.24.75.240 -j ACCEPT
iptables -t nat -A BLOCK -i eth1 -d 91.197.29.51 -j ACCEPT
iptables -t nat -A BLOCK -i eth1 -d 80.237.133.162 -j ACCEPT
iptables -t nat -A BLOCK -i eth1 -d 188.64.58.118 -j ACCEPT
iptables -t nat -A BLOCK -i eth1 -d 78.41.149.100 -j ACCEPT
iptables -t nat -A BLOCK -i eth1 -d 95.143.172.226 -j ACCEPT
iptables -t nat -A BLOCK -i eth1 -d 134.119.130.3 -j ACCEPT
iptables -t nat -A BLOCK -i eth1 -d 149.219.205.67 -j ACCEPT
iptables -t nat -A BLOCK -i eth1 -d 185.30.93.10 -j ACCEPT
iptables -t nat -A BLOCK -i eth1 -d 212.12.48.72 -j ACCEPT
iptables -t nat -A BLOCK -i eth1 -d 89.146.224.244 -j ACCEPT
iptables -t nat -A BLOCK  -i eth1 -m multiport -p tcp --dports  80,443,8080  -j DNAT --to-destination 10.8.11.10