Geaiez

1. !/bin/bash

1. Create special MLDONKEY chain

iptables -t filter -N MLDONKEY iptables -t filter -F MLDONKEY

1. Create the logdrop chain to log & drop a packet

iptables -t filter -N MLDONKEY_LOGDROP iptables -t filter -F MLDONKEY_LOGDROP iptables -t filter -A MLDONKEY_LOGDROP -j LOG --log-prefix "MLDONKEY" iptables -t filter -A MLDONKEY_LOGDROP -j DROP

1. Jump to the special MLD chain at the end of the INPUT chain (commented out)
2. iptables -t nat -A INPUT -j MLDONKEY

1. List of ip ranges to ban

iptables -t filter -I INPUT 1 -s 38.113.0.0/16 -j MLDONKEY_LOGDROP iptables -t filter -I INPUT 1 -s 38.115.0.0/16 -j MLDONKEY_LOGDROP iptables -t filter -I INPUT 1 -s 38.117.0.0/16 -j MLDONKEY_LOGDROP iptables -t filter -I INPUT 1 -s 38.118.0.0/15 -j MLDONKEY_LOGDROP iptables -t filter -I INPUT 1 -s 65.19.175.0/24 -j MLDONKEY_LOGDROP iptables -t filter -I INPUT 1 -s 66.54.0.0/16 -j MLDONKEY_LOGDROP iptables -t filter -I INPUT 1 -s 66.117.0.0/16 -j MLDONKEY_LOGDROP iptables -t filter -I INPUT 1 -s 207.234.0.0/16 -j MLDONKEY_LOGDROP