matt/dnsf
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update dnsf.py

Browse Source
This commit is contained in:
matt
2025-11-13 21:35:00 -07:00
parent d8c73584c6
commit 9cc4f71d93
1 changed files with 1 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
dnsf.py
View File

@@ -98,7 +98,6 @@ iptables -A INPUT ! -i lo -d 127.0.0.0/8 -j REJECT -m comment --comment "Drop al
iptables -A INPUT -s 127.0.0.0/8 -j ACCEPT iptables -A INPUT -s 127.0.0.0/8 -j ACCEPT
iptables -A OUTPUT -d 127.0.0.0/8 -j ACCEPT iptables -A OUTPUT -d 127.0.0.0/8 -j ACCEPT
iptables -A INPUT -i lo -j ACCEPT iptables -A INPUT -i lo -j ACCEPT
iptables -A OUTPUT -p tcp --match multiport --dports 30500:30600 -j ACCEPT
iptables -A OUTPUT -m set --match-set whitelist_hosts dst -j ACCEPT iptables -A OUTPUT -m set --match-set whitelist_hosts dst -j ACCEPT
iptables -A OUTPUT -m set --match-set static_hosts dst -j ACCEPT iptables -A OUTPUT -m set --match-set static_hosts dst -j ACCEPT
iptables -A OUTPUT -j REJECT iptables -A OUTPUT -j REJECT
@@ -107,9 +106,6 @@ iptables -P FORWARD DROP
iptables -P OUTPUT DROP iptables -P OUTPUT DROP
''' '''
#iptables -A OUTPUT -d 127.0.0.0/8 -j ACCEPT
#iptables -A INPUT -s 127.0.0.0/8 -j ACCEPT
for c in default_rules.splitlines(False): for c in default_rules.splitlines(False):
print(c.strip()) print(c.strip())
os.system(c.strip()) os.system(c.strip())
@@ -169,20 +165,14 @@ def valid_ip(address):
dns_list = watch_file('dns_whitelist.conf') dns_list = watch_file('dns_whitelist.conf')
host_list = watch_file('host_whitelist.conf') host_list = watch_file('host_whitelist.conf')
#additional_rules = watch_file('additional_rules.conf')
while True: while True:
time.sleep(.01) time.sleep(.01)
commands = [] commands = []
#dnsl = dns_list.contents
dns_list.check_change() dns_list.check_change()
if dns_list.contents: if dns_list.contents:
#diff = set(dnsl) - set(dns_list.contents)
dns_regex = dns_list.contents dns_regex = dns_list.contents
#for block in dns_list.contents:
# add_rule = 'nslookup '+str(block)
# commands.append(add_rule)
#threaded(commands)
blocked = [] blocked = []
commands = [] commands = []