funkemunky/Firewall-IPWhitelist
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update cloudflare.sh

Browse Source
This commit is contained in:
TommyTran732
2020-01-03 03:38:37 -05:00
committed by GitHub
parent ddb6e5b7a3
commit 6939b54f18
1 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
cloudflare.sh
+10
View File
@@ -32,7 +32,17 @@ elif [ "$lsb_dist" = "fedora" ] || [ "$lsb_dist" = "rhel" ] || [ "$lsb_dist" =
yum -y install firewalld wget
wget https://www.cloudflare.com/ips-v4
wget https://www.cloudflare.com/ips-v6
for ips in `cat ips-v4`;
do
firewall-cmd --add-rich-rule='rule family="ipv4" source address="$ips" port port="80" protocol="tcp" accept'
firewall-cmd --add-rich-rule='rule family="ipv4" source address="$ips" port port="443" protocol="tcp" accept'
done
for ips in `cat ips-v6`;
do
firewall-cmd --add-rich-rule='rule family="ipv6" source address="$ips" port port="80" protocol="tcp" accept'
firewall-cmd --add-rich-rule='rule family="ipv6" source address="$ips" port port="443" protocol="tcp" accept'
done
firewall-cmd --reload
else
output "Unsupported distribution. This script only supports Fedora, RHEL, CentOS, Ubuntu, and Debian."