forked from query67/Cloudflare-IPWhitelist
-
Notifications
You must be signed in to change notification settings - Fork 0
/
tcpshield.sh
81 lines (68 loc) · 2.32 KB
/
tcpshield.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
#!/bin/bash
output(){
echo -e '\e[36m'$1'\e[0m';
}
get_ports(){
read -a ports
if [[ $ports = "" ]]; then
output "You cannot put in an empty list of ports! Try again:"
get_ports
fi
}
output "TCPShield IPWhitelist Script"
output "Copyright © 2021 Thien Tran <[email protected]>."
output "Support: https://matrix.to/#/#tommytran732:matrix.org"
output ""
output "Enter the list of ports you want opened, separated by a space."
output "For example, if you want to open port 25565-25570, type: "
output "25565 25566 25567 25568 25569 25570"
get_ports
if [ -r /etc/os-release ]; then
lsb_dist="$(. /etc/os-release && echo "$ID")"
fi
if [ -r /etc/os-release ]; then
lsb_dist="$(. /etc/os-release && echo "$ID")"
dist_version="$(. /etc/os-release && echo "$VERSION_ID")"
else
output "Unsupported Distribution! Only RHEL, CentOS, Fedora, Ubuntu, and Debian are supported!"
exit 1
fi
if [ "$lsb_dist" = "rhel" ]; then
output "OS: Red Hat Enterprise Linux $dist_version detected."
else
output "OS: $lsb_dist $dist_version detected."
fi
if [ "$lsb_dist" = "ubuntu" ] || [ "$lsb_dist" = "debian" ]; then
apt -y install ufw wget
# Opening Port 22 just in case so that we do not lose the internet connection when the rules are applied.
ufw allow 22
wget https://tcpshield.com/v4
for ips in `cat v4`;
do
for port in "${ports[@]}";
do
ufw allow from $ips to any proto tcp port $port
done
done
yes | ufw enable
elif [ "$lsb_dist" = "fedora" ] || [ "$lsb_dist" = "rhel" ] || [ "$lsb_dist" = "centos" ] || [ "$lsb_dist" = "opensuse" ]; then
if [ "$lsb_dist" = "fedora" ] || [ "$lsb_dist" = "rhel" ] || [ "$lsb_dist" = "centos" ]; then
yum -y install firewalld wget
elif [ "$lsb_dist" = "opensuse" ]; then
zypper in firewalld wget -y
fi
wget https://tcpshield.com/v4
for ips in `cat v4`;
do
for port in "${ports[@]}";
do
firewall-cmd --permanent --add-rich-rule='rule family="ipv4" source address='"$ips"' port port='"$port"' protocol="tcp" accept'
done
done
firewall-cmd --reload
else
output "Unsupported distribution. This script only supports Fedora, RHEL, CentOS, Ubuntu, and Debian."
exit 1
fi
rm v4
output "Configuration finished!"