PDA

Archiv verlassen und diese Seite im Standarddesign anzeigen : CS GO MatchMaking bestimmte Server blocken



spychodelics
20.05.15, 22:43
Hallo Ihr Lieben,

kann mir jemand erklären wie ich auf meinem Desktop eine Regel erstelle die auf Knopfdruck an ist um folgende IP Bereiche zu sperren?

Quelle hier:

https://docs.google.com/document/d/15f31nNUGmvXGOMe3n7pnR9JC7lfSWG70ycbH9eE6ohY/edit



1- Block Russia (blockeun):

netsh advfirewall firewall add rule name=blockeun dir=out action=block protocol=any remoteip=146.66.156.0-146.66.156.255,146.66.157.0-146.66.157.255,185.25.180.0-185.25.180.255,185.25.181.0-185.25.181.255

2- Block EU East (blockeue):

netsh advfirewall firewall add rule name=blockeue dir=out action=block protocol=any remoteip=146.66.155.0-146.66.155.255,185.25.182.0-185.25.182.255

3- Block EU West (blockeuw):

netsh advfirewall firewall add rule name=blockeuw dir=out action=block protocol=any remoteip=146.66.152.0-146.66.152.255,146.66.158.0-146.66.158.255,146.66.159.0-146.66.159.255

4- Block US East (blockuse):

netsh advfirewall firewall add rule name=blockuse dir=out action=block protocol=any remoteip=208.78.164.0-208.78.164.255,208.78.165.0-208.78.165.255,208.78.166.0-208.78.166.255

5- Block US West (blockusw):

netsh advfirewall firewall add rule name=blockusw dir=out action=block protocol=any remoteip=192.69.96.0-192.69.96.255,192.69.97.0-192.69.97.255

6- Block Brazil (blockbrz):

netsh advfirewall firewall add rule name=blockbrz dir=out action=block protocol=any remoteip=209.197.29.0-209.197.29.255,209.197.25.0-209.197.25.255,205.185.194.0-205.185.194.255

7- Block Dubai (blockdxb):

netsh advfirewall firewall add rule name=blockdxb dir=out action=block protocol=any remoteip=185.25.183.0-185.25.183.255

8- Block India (blockind):

netsh advfirewall firewall add rule name=blockind dir=out action=block protocol=any remoteip=180.149.41.0-180.149.41.255,116.202.224.146

9- Block South Africa (blockcpt): (copy the whole thing from start to finish)

netsh advfirewall firewall add rule name=blockcpt dir=out action=block protocol=any remoteip=197.80.4.37,152.111.192.0-152.111.192.255,197.80.200.0-197.80.200.255,196.38.180.0-196.38.180.255,197.84.209.0-197.84.209.255

10- Block Singpaore (blocksgp):

netsh advfirewall firewall add rule name=blocksgp dir=out action=block protocol=any remoteip=103.28.54.0-103.28.54.255,103.28.55.0-103.28.55.255,103.10.124.0-103.10.124.255

11- Block Australia (blockaus):

netsh advfirewall firewall add rule name=blockaus dir=out action=block protocol=any remoteip=103.10.125.0-103.10.125.255

12- Block US SouthWest (blockuss):
netsh advfirewall firewall add rule name=blockaus dir=out action=block protocol=any remoteip=162.254.194.0-162.254.194.255


Sinn und Zweck ist es das sich mein Desktop nur noch die EU Server "pingen" kann. Es sollen also explizit alle oben angegeben Server geblockt werden sonst nichts.

Jemand eine Idee? Und wie würde die Zeile für iptables aussehen um die russischen Server zu blocken?

Dankend

spychodelics
25.05.15, 21:15
Wen es interessiert. Nach herumbasteln mit einigen GUIs für iptables hab ich mich entschieden das per Hand zu machen.

Herauskommen ist das hier:



# Generated by iptables-save v1.4.21 on Mon May 25 17:04:33 2015
*filter
:INPUT ACCEPT [472:681532]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [267:14855]
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A INPUT -s 162.254.194.0/24 -j DROP
-A INPUT -s 103.10.125.0/24 -j DROP
-A INPUT -s 103.10.124.0/24 -j DROP
-A INPUT -s 103.28.55.0/24 -j DROP
-A INPUT -s 103.28.54.0/24 -j DROP
-A INPUT -s 197.84.209.0/24 -j DROP
-A INPUT -s 196.38.180.0/24 -j DROP
-A INPUT -s 197.80.200.0/24 -j DROP
-A INPUT -s 152.111.192.0/24 -j DROP
-A INPUT -s 197.80.4.37/32 -j DROP
-A INPUT -s 180.149.41.0/24 -j DROP
-A INPUT -s 185.25.183.0/24 -j DROP
-A INPUT -s 205.185.194.0/24 -j DROP
-A INPUT -s 209.197.25.0/24 -j DROP
-A INPUT -s 209.197.29.0/24 -j DROP
-A INPUT -s 192.69.97.0/24 -j DROP
-A INPUT -s 192.69.96.0/24 -j DROP
-A INPUT -s 208.78.166.0/24 -j DROP
-A INPUT -s 208.78.165.0/24 -j DROP
-A INPUT -s 208.78.164.0/24 -j DROP
-A INPUT -s 185.25.181.0/24 -j DROP
-A INPUT -s 185.25.180.0/24 -j DROP
-A INPUT -s 146.66.157.0/24 -j DROP
-A INPUT -s 146.66.156.0/24 -j DROP
-A OUTPUT -s 162.254.194.0/24 -j DROP
-A OUTPUT -s 103.10.125.0/24 -j DROP
-A OUTPUT -s 103.10.124.0/24 -j DROP
-A OUTPUT -s 103.28.55.0/24 -j DROP
-A OUTPUT -s 103.28.54.0/24 -j DROP
-A OUTPUT -s 197.84.209.0/24 -j DROP
-A OUTPUT -s 196.38.180.0/24 -j DROP
-A OUTPUT -s 197.80.200.0/24 -j DROP
-A OUTPUT -s 152.111.192.0/24 -j DROP
-A OUTPUT -s 197.80.4.37/32 -j DROP
-A OUTPUT -s 180.149.41.0/24 -j DROP
-A OUTPUT -s 185.25.183.0/24 -j DROP
-A OUTPUT -s 205.185.194.0/24 -j DROP
-A OUTPUT -s 209.197.25.0/24 -j DROP
-A OUTPUT -s 209.197.29.0/24 -j DROP
-A OUTPUT -s 192.69.97.0/24 -j DROP
-A OUTPUT -s 192.69.96.0/24 -j DROP
-A OUTPUT -s 208.78.165.0/24 -j DROP
-A OUTPUT -s 208.78.166.0/24 -j DROP
-A OUTPUT -s 208.78.164.0/24 -j DROP
-A OUTPUT -s 185.25.181.0/24 -j DROP
-A OUTPUT -s 185.25.180.0/24 -j DROP
-A OUTPUT -s 146.66.157.0/24 -j DROP
-A OUTPUT -s 146.66.156.0/24 -j DROP
COMMIT
# Completed on Mon May 25 17:04:33 2015

BetterWorld
25.05.15, 22:40
Vielleicht magst dir mal ufw angucken.

Ein CLI Interface zu iptables.
Macht das Firewallen und scripten leichter.

spychodelics
26.05.15, 22:58
Nachdem ich iptables verstanden habe, brauch ich keinen CLI oder GUI mehr.
Aber trotzdem danke!