I run this server

  • 6 Posts
  • 151 Comments
Joined 1 year ago
cake
Cake day: July 27th, 2023

help-circle



















  • I would have a cron that runs a script to pull the list and update IPset, this might not work.

    make a file on your docker server with the below in it, set the file to execute chmod +x file.sh

    #!/bin/sh
    ipset -q flush ipsum
    ipset -q create ipsum hash:ip
    for ip in $(curl --compressed https://raw.githubusercontent.com/stamparm/ipsum/master/ipsum.txt 2>/dev/null | grep -v "#" | grep -v -E "\s[1-2]$" | cut -f 1); do ipset add ipsum $ip; done
    iptables -D INPUT -m set --match-set ipsum src -j DROP 2>/dev/null
    iptables -I INPUT -m set --match-set ipsum src -j DROP
    

    Then add a cron file in /etc/cron.d that runs the script every 24 hours

    10 3 * * * root /root/file.sh