EdgeOS GeoIP blocking

gistfile1.py

#!/usr/bin/env python

import os
import urllib2


countries={'DK':'denmark'}

os.system("/opt/vyatta/sbin/vyatta-cfg-cmd-wrapper begin")
for country in countries.keys():
    url = "http://www.ipdeny.com/ipblocks/data/aggregated/%s-aggregated.zone" % country.lower()
    os.system("/opt/vyatta/sbin/vyatta-cfg-cmd-wrapper delete firewall group network-group %s" % countries[country])
    os.system("/opt/vyatta/sbin/vyatta-cfg-cmd-wrapper set firewall group network-group %s" % countries[country])
    for ip in urllib2.urlopen(url).readlines():
        os.system("/opt/vyatta/sbin/vyatta-cfg-cmd-wrapper set firewall group network-group %s network %s" % (countries[country],ip))
os.system("/opt/vyatta/sbin/vyatta-cfg-cmd-wrapper commit")
os.system("/opt/vyatta/sbin/vyatta-cfg-cmd-wrapper end")

I can only assume it still works. I haven’t used an edgerouter for a couple of years now, but it worked on the latest (2.x) version when I switched.

It doesn’t do any “magic” it simply parses a list of IP scopes and adds them to the firewall group.

I have no idea if the ipdeny url is still valid though.

Hey just wanted to let you know that its working. Also I assume this script wont work with IPv6?