AR2000
09186aedac
Squashed commit of the following: commitad482533faAuthor: AR2000 <ar2000@ar2000.me> Date: Thu Jan 16 15:33:16 2025 +0100 add jq to container commit79352ec046Author: AR2000 <ar2000@ar2000.me> Date: Thu Jan 16 14:55:37 2025 +0100 stdin commit3100810052Author: AR2000 <ar2000@ar2000.me> Date: Thu Jan 16 14:33:05 2025 +0100 test
70 lines
2.2 KiB
Bash
Executable File
70 lines
2.2 KiB
Bash
Executable File
#!/bin/bash
|
|
#
|
|
# Script to add /remove IPs to iptables
|
|
|
|
: ${IPTABLES_CHAIN:=INPUT}
|
|
|
|
function iptableAdd() {
|
|
#check if the rule already exist
|
|
if ! iptables $comment -C $IPTABLES_CHAIN -s "$1" -j DROP; then
|
|
#do we insert at a $IPTABLES_INSERT position or append to the chain
|
|
if [[ -z "${IPTABLES_INSERT}" ]]; then
|
|
iptables $comment -A $IPTABLES_CHAIN -s "$1" -j DROP
|
|
else
|
|
iptables $comment -I $IPTABLES_CHAIN "$IPTABLES_INSERT" -s "$1" -j DROP
|
|
fi
|
|
fi
|
|
}
|
|
|
|
function iptableDel() {
|
|
iptables $comment -D $IPTABLES_CHAIN -s "$1" -j DROP
|
|
}
|
|
|
|
function ip6tableAdd() {
|
|
#check if the rule already exist
|
|
if ! ip6tables $comment -C $IPTABLES_CHAIN -s "$1" -j DROP; then
|
|
#do we insert at a $IPTABLES_INSERT position or append to the chain
|
|
if [[ -z "${IPTABLES_INSERT}" ]]; then
|
|
ip6tables $comment -A $IPTABLES_CHAIN -s "$1" -j DROP
|
|
else
|
|
ip6tables $comment -I $IPTABLES_CHAIN "$IPTABLES_INSERT" -s "$1" -j DROP
|
|
fi
|
|
fi
|
|
}
|
|
|
|
function ip6tableDel() {
|
|
ip6tables $comment -D $IPTABLES_CHAIN -s "$1" -j DROP
|
|
}
|
|
|
|
function processAction() {
|
|
|
|
[[ -n "${IPTABLES_COMMENT}" ]] && comment="-m comment --comment \"$4\"" || comment=""
|
|
|
|
#determine action
|
|
if [ "$1" = "add" ]; then #add
|
|
if [[ "$2" =~ .*[.].* ]]; then #ipv4
|
|
echo "add $2 for $3 with $4"
|
|
iptableAdd "$2"
|
|
elif [[ "$2" =~ .*[:].* ]]; then #ipv6
|
|
echo "IPV6 : add $2 for $3 with $4"
|
|
ip6tableAdd "$2"
|
|
fi
|
|
elif [ "$1" = "del" ]; then #del
|
|
if [[ "$2" =~ .*[.].* ]]; then #ipv4
|
|
echo "del $2 for $3 with $4"
|
|
iptableDel "$2"
|
|
elif [[ "$2" =~ .*[:].* ]]; then #ipv6
|
|
echo "IPV6 : add $2 for $3 with $4"
|
|
ip6tableDel "$2"
|
|
fi
|
|
else
|
|
echo "unknown action"
|
|
fi
|
|
}
|
|
|
|
while read line; do
|
|
echo processAction $(echo "$line" | jq -r .action) $(echo "$line" | jq -r .value) $(echo "$line" | jq -r .duration) $(echo "$line" | jq -r .scenario) | tee bouncer.sh.out
|
|
processAction $(echo "$line" | jq -r .action) $(echo "$line" | jq -r .value) $(echo "$line" | jq -r .duration) $(echo "$line" | jq -r .scenario)
|
|
done
|
|
#{"duration":"-1h1m9s","origin":"CAPI","scenario":"crowdsecurity/ssh-bf","scope":"Ip","type":"ban","value":"122.117.32.192","id":22739513,"action":"del"}
|