#!/bin/sh
# 2024-04-16 02:31:50 FM
IPTABLES=/usr/sbin/iptables
IPSET=/usr/sbin/ipset
$IPSET create BLOCKLIST hash:net

$IPSET add BLOCKLIST 43.248.156.0/22
$IPSET add BLOCKLIST 103.39.252.0/22
$IPSET add BLOCKLIST 119.252.112.0/20
$IPSET add BLOCKLIST 124.109.8.0/21
$IPTABLES -A INPUT -m set --match-set BLOCKLIST src -j DROP
$IPTABLES -A OUTPUT -m set --match-set BLOCKLIST dst -j DROP