not pretty

gistfile1.txt

#!/bin/bash

# Filename: allow_uk_block_others.sh

# Step 1: Download UK IP ranges
echo "Downloading UK IP ranges..."
wget -q http://www.ipdeny.com/ipblocks/data/countries/gb.zone -O uk_ips.txt

# Check if the download was successful
if [ ! -f uk_ips.txt ]; then
    echo "Failed to download UK IP ranges. Exiting."
    exit 1
fi

# Step 2: Allow only UK IP ranges
echo "Applying UFW rules for UK IP ranges..."
while read -r ip; do
    sudo ufw allow from "$ip"
done < uk_ips.txt

# Step 3: Set default deny policies
echo "Setting default UFW policy to deny all other traffic..."
sudo ufw default deny incoming
sudo ufw default deny outgoing

# Step 4: Enable UFW
echo "Enabling UFW with new rules..."
sudo ufw enable

# Step 5: Verify the UFW rules
echo "Verifying UFW status..."
sudo ufw status

# Cleanup the downloaded IP list file
rm -f uk_ips.txt

echo "UFW configuration complete. Only UK traffic is allowed."