Adapt firewall rules to available deny lists.

This commit is contained in:
AMay 2026-03-17 11:27:51 -05:00
parent 07a3d8c063
commit c468db3672

View File

@ -33,6 +33,10 @@ int main(int argc, char* argv[]){
const std::string listName{line.substr(nameMarker+6)};
ipAccessTables.emplace_back(listName);
std::system(("ipset list "+listName+" > /home/sigonasr2/ips").c_str());
std::system(("iptables -D INPUT -m set --match-set "+listName+" src -j DROP").c_str());
std::system(("iptables -D FORWARD -m set --match-set "+listName+" src -j DROP").c_str());
std::system(("iptables -I INPUT -m set --match-set "+listName+" src -j DROP").c_str());
std::system(("iptables -I FORWARD -m set --match-set "+listName+" src -j DROP").c_str());
std::ifstream ipList{"/home/sigonasr2/ips"};
while(ipList.good()){