https://szeching.com/tags/firewall/ Recent content in Firewall on 瓶子裡的小狐狸 Hugo -- gohugo.io zh-Hant © 2026 Y Cheung Wed, 24 Nov 2021 11:00:00 +0000 https://szeching.com/blocking-ip-addresses-from-the-ultimate-bad-bot-blockers-bad-ip-address-list-using-iptables/ Wed, 24 Nov 2021 11:00:00 +0000 https://szeching.com/blocking-ip-addresses-from-the-ultimate-bad-bot-blockers-bad-ip-address-list-using-iptables/ <h2 class="relative group">在服務器上增加 iptables chain <div id="在服務器上增加-iptables-chain" class="anchor"></div> <span class="absolute top-0 w-6 transition-opacity opacity-0 -start-6 not-prose group-hover:opacity-100 select-none"> <a class="text-primary-300 dark:text-neutral-700 !no-underline" href="#%e5%9c%a8%e6%9c%8d%e5%8b%99%e5%99%a8%e4%b8%8a%e5%a2%9e%e5%8a%a0-iptables-chain" aria-label="定位點">#</a> </span> </h2> <div class="highlight-wrapper"><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-shell" data-lang="shell"><span class="line"><span class="ln">1</span><span class="cl">iptables -N black_ip_list </span></span><span class="line"><span class="ln">2</span><span class="cl">iptables -I INPUT -p tcp -m multiport --dports 80,443 -j black_ip_list</span></span></code></pre></div></div> <h2 class="relative group">新建 bash 文件 banip.sh <div id="新建-bash-文件-banipsh" class="anchor"></div> <span class="absolute top-0 w-6 transition-opacity opacity-0 -start-6 not-prose group-hover:opacity-100 select-none"> <a class="text-primary-300 dark:text-neutral-700 !no-underline" href="#%e6%96%b0%e5%bb%ba-bash-%e6%96%87%e4%bb%b6-banipsh" aria-label="定位點">#</a> </span> </h2> <p>在這個文件中，首先清空 black_ip_list 中的規則， 然後從 <code>mitchellkrogza/nginx-ultimate-bad-bot-blocker</code> 中獲取最新的IP BLACKLIST 列表，循環每一個IP地址，將其設為拒絕請求。</p>