iptables-country-block

Interact with iptables, block whole countries based on assigned ip blocks

Install

$ npm install [--global] iptables-country-block

Usage

CLI

Note: Most use cases requires --global installation

$ [sudo] iptables-country-block ["<country iso codes, space delimited>"[ "<iptables chain name>"[ "<url template of ip block sources>"]]]
$ [sudo] iptables-country-block "ru cn" "countryipblock" "https://raw.githubusercontent.com/herrbischoff/country-ip-blocks/master/ipv4/{isoCode}.cidr"

Require

const {
	createIptablesChain,
	getCountryIPBlocks,
	iptables
} = require('iptables-country-block');

await iptables('-N somechain');
// or await createIptablesChain('somechain');

const ipBlocks = await getCountryIPBlocks(
	'https://raw.githubusercontent.com/herrbischoff/country-ip-blocks/master/ipv4/{isoCode}.cidr',
	'cn'
);

for(let i = 0; i < ipBlocks.length; ++i){
	await iptables('-A somechain -s ' + ipBlocks[i] + ' -j DROP');
}


await iptables('-I INPUT -j somechain');
await iptables('-I OUTPUT -j somechain');
await iptables('-I FORWARD -j somechain');