killbus/iptables quota.md

Last active March 6, 2021 18:20

Star () You must be signed in to star a gist
Fork () You must be signed in to fork a gist

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/killbus/503b0b42877e773d3c801f62e1771598.js"></script>
Save killbus/503b0b42877e773d3c801f62e1771598 to your computer and use it in GitHub Desktop.

Raw

iptables_quota.sh

#!/bin/bash
iptables -F quota33g
iptables -N quota33g
iptables -A quota33g -m quota --quota 35433480192 -j RETURN
iptables -A quota33g -d <bastion_server_ip> -j ACCEPT
iptables -A quota33g -j DROP

iptables -F OUTPUT
iptables -P OUTPUT ACCEPT
iptables -A OUTPUT -o eth0+ -j quota33g
echo done

crontab

0 0 * * * /sbin/iptables -Z quota33g