eaguad1337 · October 22, 2018 14:11
diff --git a/ufw_whitelist_cloudflare.sh b/ufw_whitelist_cloudflare.sh
 #!/bin/sh
 # @author Eduardo Aguad <[email protected]>

 cd /tmp
 wget https://www.cloudflare.com/ips-v4 -O ips-v4-$$.tmp
 wget https://www.cloudflare.com/ips-v6 -O ips-v6-$$.tmp

 for cfip in `cat ips-v6-$$.tmp`; do ufw allow from $cfip to any port 443 proto tcp; done
 for cfip in `cat ips-v4-$$.tmp`; do ufw allow from $cfip to any port 443 proto tcp; done

 for cfip in `cat ips-v4-$$.tmp`; do ufw allow from $cfip to any port 80 proto tcp; done
 for cfip in `cat ips-v6-$$.tmp`; do ufw allow from $cfip to any port 80 proto tcp; done
	#!/bin/sh
	# @author Eduardo Aguad <[email protected]>

	cd /tmp
	wget https://www.cloudflare.com/ips-v4 -O ips-v4-$$.tmp
	wget https://www.cloudflare.com/ips-v6 -O ips-v6-$$.tmp

	for cfip in `cat ips-v6-$$.tmp`; do ufw allow from $cfip to any port 443 proto tcp; done
	for cfip in `cat ips-v4-$$.tmp`; do ufw allow from $cfip to any port 443 proto tcp; done

	for cfip in `cat ips-v4-$$.tmp`; do ufw allow from $cfip to any port 80 proto tcp; done
	for cfip in `cat ips-v6-$$.tmp`; do ufw allow from $cfip to any port 80 proto tcp; done