【已经解决】哆啦A梦面板可以屏蔽连接海外ip吗

我也想知道

@meisno #1 主要是国内入口，连接海外ip反而有风险了

面板禁止国外ip访问？OpenGFW帮助你

@alfredfenglq #3 人人有墙建，人人会建墙是吧哈哈

apt-get install iptables
apt-get install ipset
iptables -P INPUT ACCEPT
iptables -F
ipset -N cnip hash:net
wget -P /root/ http://www.ipdeny.com/ipblocks/data/countries/cn.zone
for a in $(cat /root/cn.zone ); do ipset -A cnip $a; done
iptables -A INPUT -p tcp -m set --match-set cnip src -j ACCEPT
iptables -A INPUT -p udp -m set --match-set cnip src -j ACCEPT
iptables -A INPUT -p icmp -m set --match-set cnip src -j ACCEPT
iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A INPUT -p udp --sport 53 -j ACCEPT
iptables -A OUTPUT -j ACCEPT
iptables -P INPUT DROP

ipset save > /etc/ipset.rules
apt-get install iptables-persistent
netfilter-persistent save
vi /etc/systemd/system/ipset-restore.service
'''
[Unit]
Description=Restore ipset rules
Before=netfilter-persistent.service

[Service]
Type=oneshot
ExecStart=/bin/sh -c '/sbin/ipset restore < /etc/ipset.rules'
RemainAfterExit=yes

[Install]
WantedBy=multi-user.target
'''
systemctl enable ipset-restore

只允许国内ip链接

@bqlpfy #5 感谢啦，大佬