From 53a0a5473f45d37027af9663638adbf56667e4ca Mon Sep 17 00:00:00 2001
From: Andrew Opalach <andrew@akon.city>
Date: Tue, 12 Nov 2024 22:26:02 -0500
Subject: Hopefully no leaks

---
 hosts/rod/scripts/ban-ip-forward        |  2 ++
 hosts/rod/scripts/ban-iprange-forward   |  2 ++
 hosts/rod/scripts/block-my-enemies      | 18 ++++++++++++++++++
 hosts/rod/scripts/fail2ban-ban-ip       |  3 +++
 hosts/rod/scripts/fail2ban-unban-ip     |  3 +++
 hosts/rod/scripts/unban-iprange-forward |  2 ++
 6 files changed, 30 insertions(+)
 create mode 100755 hosts/rod/scripts/ban-ip-forward
 create mode 100755 hosts/rod/scripts/ban-iprange-forward
 create mode 100755 hosts/rod/scripts/block-my-enemies
 create mode 100755 hosts/rod/scripts/fail2ban-ban-ip
 create mode 100755 hosts/rod/scripts/fail2ban-unban-ip
 create mode 100755 hosts/rod/scripts/unban-iprange-forward

(limited to 'hosts/rod/scripts')

diff --git a/hosts/rod/scripts/ban-ip-forward b/hosts/rod/scripts/ban-ip-forward
new file mode 100755
index 0000000..04e6de7
--- /dev/null
+++ b/hosts/rod/scripts/ban-ip-forward
@@ -0,0 +1,2 @@
+#! /usr/bin/env sh
+sudo iptables -I FORWARD -s $1 -j DROP
diff --git a/hosts/rod/scripts/ban-iprange-forward b/hosts/rod/scripts/ban-iprange-forward
new file mode 100755
index 0000000..7de1682
--- /dev/null
+++ b/hosts/rod/scripts/ban-iprange-forward
@@ -0,0 +1,2 @@
+#! /usr/bin/env sh
+sudo iptables -I FORWARD -m iprange --src-range $1 -j DROP
diff --git a/hosts/rod/scripts/block-my-enemies b/hosts/rod/scripts/block-my-enemies
new file mode 100755
index 0000000..473595c
--- /dev/null
+++ b/hosts/rod/scripts/block-my-enemies
@@ -0,0 +1,18 @@
+#! /usr/bin/env bash
+
+BAN_IP="$HOME/scripts/ban-ip-forward"
+BAN_IP_RANGE="$HOME/scripts/ban-iprange-forward"
+
+while read l; do
+  c=$(echo "$l" | cut -d'#' -f1 | xargs)
+  if [[ "${l:0:1}" == "s" ]]
+  then
+    $BAN_IP "${c:2}"
+  elif [[ "${l:0:1}" == "r" ]]
+  then
+    $BAN_IP_RANGE "${c:2}"
+  elif [[ "${l:0:1}" == "f" ]]
+  then
+    echo "You have forgiven "${c:2}"."
+  fi
+done <$1
diff --git a/hosts/rod/scripts/fail2ban-ban-ip b/hosts/rod/scripts/fail2ban-ban-ip
new file mode 100755
index 0000000..b1b97c6
--- /dev/null
+++ b/hosts/rod/scripts/fail2ban-ban-ip
@@ -0,0 +1,3 @@
+#! /usr/bin/env sh
+# Get jail names: sudo fail2ban-client status
+fail2ban-client set $1 banip $2
diff --git a/hosts/rod/scripts/fail2ban-unban-ip b/hosts/rod/scripts/fail2ban-unban-ip
new file mode 100755
index 0000000..6ca4842
--- /dev/null
+++ b/hosts/rod/scripts/fail2ban-unban-ip
@@ -0,0 +1,3 @@
+#! /usr/bin/env sh
+# Get jail names, sudo fail2ban-client status
+fail2ban-client set $1 unbanip $2
diff --git a/hosts/rod/scripts/unban-iprange-forward b/hosts/rod/scripts/unban-iprange-forward
new file mode 100755
index 0000000..22d6e9f
--- /dev/null
+++ b/hosts/rod/scripts/unban-iprange-forward
@@ -0,0 +1,2 @@
+#! /usr/bin/env sh
+sudo iptables -D FORWARD -m iprange --src-range $1 -j DROP
-- 
cgit v1.2.3-101-g0448