nnduc/shellscripts
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

systemctl ipblock

Browse Source
This commit is contained in:
nnduc
2026-05-30 13:53:21 +07:00
parent 387241d1f3
commit f3082296d8
2 changed files with 24 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
iptables/china-block.sh
View File

@@ -9,9 +9,6 @@ SOURCES=(
"https://raw.githubusercontent.com/mayaxcn/china-ip-list/master/chnroute.txt" "https://raw.githubusercontent.com/mayaxcn/china-ip-list/master/chnroute.txt"
) )
echo "[*] Killing Steam..."
pkill -9 -f steam || true
echo "[*] Downloading CN IP ranges..." echo "[*] Downloading CN IP ranges..."
for url in "${SOURCES[@]}"; do for url in "${SOURCES[@]}"; do
echo " Trying $url ..." echo " Trying $url ..."
@@ -46,8 +43,8 @@ iptables -t raw -A OUTPUT -m set --match-set "$IPSET_NAME" dst -j DROP
CIDR6_FILE="/tmp/cn6.cidr" CIDR6_FILE="/tmp/cn6.cidr"
SOURCES6=( SOURCES6=(
"https://raw.githubusercontent.com/herrbischoff/country-ip-blocks/master/ipv6/cn.cidr" "https://raw.githubusercontent.com/gaoyifan/china-operator-ip/ip-lists/china6.txt"
"https://www.ipdeny.com/ipv6/ipaddresses/blocks/cn.cidr" "https://raw.githubusercontent.com/ipverse/rir-ip/master/country/cn/ipv6-aggregated.txt"
) )
echo "[*] Downloading CN IPv6 ranges..." echo "[*] Downloading CN IPv6 ranges..."

28
iptables/install.sh Normal file → Executable file
View File

@@ -1,10 +1,26 @@
#!/bin/bash #!/bin/bash
set -e set -e
install -m 755 china-block.sh /usr/local/sbin/china-block.sh install_() {
install -m 755 china-unblock.sh /usr/local/sbin/china-unblock.sh install -m 755 china-block.sh /usr/local/sbin/china-block.sh
install -m 644 china-block.service /etc/systemd/system/china-block.service install -m 755 china-unblock.sh /usr/local/sbin/china-unblock.sh
install -m 644 china-block.service /etc/systemd/system/china-block.service
systemctl daemon-reload
systemctl enable --now china-block
echo "[+] china-block service installed and started."
}
systemctl daemon-reload uninstall() {
systemctl enable --now china-block systemctl disable --now china-block 2>/dev/null || true
echo "[+] china-block service installed and started." rm -f /usr/local/sbin/china-block.sh
rm -f /usr/local/sbin/china-unblock.sh
rm -f /etc/systemd/system/china-block.service
systemctl daemon-reload
echo "[+] china-block service removed."
}
case "${1:-install}" in
install) install_ ;;
uninstall) uninstall ;;
*) echo "Usage: $0 [install|uninstall]"; exit 1 ;;
esac