On 6/7/2018 11:22 PM, Tom Eastep wrote:
> On 06/07/2018 12:09 PM, Matt Darfeuille wrote:
>> On 6/7/2018 8:33 PM, Tom Eastep wrote:
>>> Eric Teeter has contributed a shell program that can create an IPSET
>>> containing the IP ranges allocated to a specified list of countries. You
>>> can find the script at:
>>>
>>> ftp://ftp.shorewall.org/pub/shorewall/contrib/GeoBlacklis/BlacklistSetup
>>>
>>> The script allows Geo-oriented blacklisting without the need for the
>>> GeoIP xtables extension.
>>>
>>> Thanks Eric!
>>>
>>
>> Note that the script relies on the shorewall 'refresh' command which has
>> been removed in Shorewall 5.2.
>>
>> Should be mentionned here as well:
>>
>> http://shorewall.org/pub/shorewall/contrib/GeoBlacklist/README
>>
> 
> Thanks Matt. I just replaced 'refresh' with 'reload' to avoid that issue.
> 

Tom, the script also supports 'shorewall6'!!! :)

$ grep -n refresh BlackListSetup
78:shorewall6 refresh

-Matt
-- 
Matt Darfeuille

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to