|
@@ -111,6 +111,7 @@ setup_badips() {
|
|
|
|
|
|
|
|
setup_scanips() {
|
|
setup_scanips() {
|
|
|
ipset create -! $scanset hash:ip hashsize 4096 timeout $scanttl maxelem $scanmaxelems
|
|
ipset create -! $scanset hash:ip hashsize 4096 timeout $scanttl maxelem $scanmaxelems
|
|
|
|
|
+ ${iptables} -A INPUT -i ${wan} -j SET --add-set $scanset src --exist --timeout $scanttl
|
|
|
if $loginput ; then
|
|
if $loginput ; then
|
|
|
${iptables} -A INPUT -j WAN-LOG-DROP
|
|
${iptables} -A INPUT -j WAN-LOG-DROP
|
|
|
fi
|
|
fi
|
