#!/bin/sh
# 2024-04-23 02:30:11 CF
IPTABLES=/usr/sbin/iptables
IPSET=/usr/sbin/ipset
$IPSET create BLOCKLIST hash:net

$IPSET add BLOCKLIST 41.78.120.0/22
$IPSET add BLOCKLIST 41.223.184.0/22
$IPSET add BLOCKLIST 169.239.96.0/22
$IPSET add BLOCKLIST 196.216.160.0/24
$IPSET add BLOCKLIST 197.242.176.0/21
$IPTABLES -A INPUT -m set --match-set BLOCKLIST src -j DROP
$IPTABLES -A OUTPUT -m set --match-set BLOCKLIST dst -j DROP