Update dnsf.py

This commit is contained in:
2025-11-13 21:35:00 -07:00
parent d8c73584c6
commit 9cc4f71d93

12
dnsf.py
View File

@@ -98,7 +98,6 @@ iptables -A INPUT ! -i lo -d 127.0.0.0/8 -j REJECT -m comment --comment "Drop al
iptables -A INPUT -s 127.0.0.0/8 -j ACCEPT
iptables -A OUTPUT -d 127.0.0.0/8 -j ACCEPT
iptables -A INPUT -i lo -j ACCEPT
iptables -A OUTPUT -p tcp --match multiport --dports 30500:30600 -j ACCEPT
iptables -A OUTPUT -m set --match-set whitelist_hosts dst -j ACCEPT
iptables -A OUTPUT -m set --match-set static_hosts dst -j ACCEPT
iptables -A OUTPUT -j REJECT
@@ -107,9 +106,6 @@ iptables -P FORWARD DROP
iptables -P OUTPUT DROP
'''
#iptables -A OUTPUT -d 127.0.0.0/8 -j ACCEPT
#iptables -A INPUT -s 127.0.0.0/8 -j ACCEPT
for c in default_rules.splitlines(False):
print(c.strip())
os.system(c.strip())
@@ -169,20 +165,14 @@ def valid_ip(address):
dns_list = watch_file('dns_whitelist.conf')
host_list = watch_file('host_whitelist.conf')
#additional_rules = watch_file('additional_rules.conf')
while True:
time.sleep(.01)
commands = []
#dnsl = dns_list.contents
dns_list.check_change()
if dns_list.contents:
#diff = set(dnsl) - set(dns_list.contents)
dns_regex = dns_list.contents
#for block in dns_list.contents:
# add_rule = 'nslookup '+str(block)
# commands.append(add_rule)
#threaded(commands)
blocked = []
commands = []