firewall/ipt-server
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Ignore double entries in file 'ban_ipv4.list'. Changes in log output for banned ipv4 addresses.

Browse Source
This commit is contained in:
Christoph 2018-10-20 02:54:55 +02:00
parent dabe845943
commit 5505f52570
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
ipt-firewall-server
View File

@ -493,11 +493,15 @@ if [[ -f "${CONFIG_DIR}/ban_ipv4.list" ]] ; then
_ip="${ipv4}/${mask}"
if containsElement "$_ip" "${ban_ipv4_arr[@]}" ; then
continue
fi
for _dev in ${ext_if_arr[@]} ; do
if $log_blocked_ip || $log_all ; then
$ipt -A INPUT -i $_dev -s $_ip -j LOG --log-prefix "$log_prefix Blocked ${_ip}: " --log-level $log_level
$ipt -A INPUT -i $_dev -s $_ip -j LOG --log-prefix "$log_prefix Blocked: " --log-level $log_level
if $kernel_activate_forwarding ; then
$ipt -A FORWARD -i $_dev -s $_ip -j LOG --log-prefix "$log_prefix Blocked ${_ip}: " --log-level $log_level
$ipt -A FORWARD -i $_dev -s $_ip -j LOG --log-prefix "$log_prefix Blocked: " --log-level $log_level
fi
fi
$ipt -A INPUT -i $_dev -s $_ip -j DROP
@ -506,6 +510,8 @@ if [[ -f "${CONFIG_DIR}/ban_ipv4.list" ]] ; then
fi
done
ban_ipv4_arr+=("$_ip")
else
msg="$msg '${given_ipv4}'"
fi