On 6/7/2018 11:22 PM, Tom Eastep wrote: > On 06/07/2018 12:09 PM, Matt Darfeuille wrote: >> On 6/7/2018 8:33 PM, Tom Eastep wrote: >>> Eric Teeter has contributed a shell program that can create an IPSET >>> containing the IP ranges allocated to a specified list of countries. You >>> can find the script at: >>> >>> ftp://ftp.shorewall.org/pub/shorewall/contrib/GeoBlacklis/BlacklistSetup >>> >>> The script allows Geo-oriented blacklisting without the need for the >>> GeoIP xtables extension. >>> >>> Thanks Eric! >>> >> >> Note that the script relies on the shorewall 'refresh' command which has >> been removed in Shorewall 5.2. >> >> Should be mentionned here as well: >> >> http://shorewall.org/pub/shorewall/contrib/GeoBlacklist/README >> > > Thanks Matt. I just replaced 'refresh' with 'reload' to avoid that issue. >
Tom, the script also supports 'shorewall6'!!! :) $ grep -n refresh BlackListSetup 78:shorewall6 refresh -Matt -- Matt Darfeuille ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users