Block known malware servers

This commit is contained in:
Bob Mottram 2014-06-18 23:46:23 +01:00
parent 1a3aab2c3d
commit 55d6fc8344
1 changed files with 33 additions and 0 deletions

View File

@ -1260,6 +1260,39 @@ iptables -A syn_flood -j DROP
iptables -A INPUT -p icmp -j DROP
#iptables -A OUTPUT -p icmp -j ACCEPT
# Block malware servers (See Der Spiegel Snowden files)
iptables -A INPUT -s 146.185.26.163 -j DROP
iptables -A INPUT -s 37.130.229.100 -j DROP
iptables -A INPUT -s 85.237.211.198 -j DROP
iptables -A INPUT -s 85.237.212.52 -j DROP
iptables -A INPUT -s 85.237.211.177 -j DROP
iptables -A INPUT -s 212.118.232.184 -j DROP
iptables -A INPUT -s 212.118.232.50 -j DROP
iptables -A INPUT -s 176.249.28.104 -j DROP
iptables -A INPUT -s 212.118.232.140 -j DROP
iptables -A INPUT -s 37.130.229.101 -j DROP
iptables -A INPUT -s 31.6.17.94 -j DROP
iptables -A INPUT -s 84.45.121.218 -j DROP
iptables -A INPUT -s 80.84.63.242 -j DROP
iptables -A INPUT -s 37.220.10.28 -j DROP
iptables -A INPUT -s 94.229.78.58 -j DROP
iptables -A OUTPUT -s 146.185.26.163 -j DROP
iptables -A OUTPUT -s 37.130.229.100 -j DROP
iptables -A OUTPUT -s 85.237.211.198 -j DROP
iptables -A OUTPUT -s 85.237.212.52 -j DROP
iptables -A OUTPUT -s 85.237.211.177 -j DROP
iptables -A OUTPUT -s 212.118.232.184 -j DROP
iptables -A OUTPUT -s 212.118.232.50 -j DROP
iptables -A OUTPUT -s 176.249.28.104 -j DROP
iptables -A OUTPUT -s 212.118.232.140 -j DROP
iptables -A OUTPUT -s 37.130.229.101 -j DROP
iptables -A OUTPUT -s 31.6.17.94 -j DROP
iptables -A OUTPUT -s 84.45.121.218 -j DROP
iptables -A OUTPUT -s 80.84.63.242 -j DROP
iptables -A OUTPUT -s 37.220.10.28 -j DROP
iptables -A OUTPUT -s 94.229.78.58 -j DROP
# Save the settings
iptables-save > /etc/firewall.conf
ip6tables-save > /etc/firewall6.conf