#!/bin/bash
#
# DOT-AS IP Ranges - iptables/ipset rules
# ASN: AS2576
# Generated: 2025-12-15
# Source: ScaniteX (https://scanitex.com)
#
# Usage: chmod +x this_script.sh && sudo ./this_script.sh
#

# Create IPv4 ipset
ipset create dotas_v4 hash:net -exist
ipset flush dotas_v4

# Add IPv4 ranges
ipset add dotas_v4 204.152.44.0/23
ipset add dotas_v4 204.69.250.0/23
ipset add dotas_v4 169.135.0.0/16
ipset add dotas_v4 204.68.196.0/23
ipset add dotas_v4 204.86.184.0/21
ipset add dotas_v4 199.79.178.0/24
ipset add dotas_v4 152.119.0.0/16
ipset add dotas_v4 204.86.192.0/23
ipset add dotas_v4 204.68.194.0/23
ipset add dotas_v4 204.68.195.0/24
ipset add dotas_v4 204.69.252.0/24
ipset add dotas_v4 204.238.19.0/24
ipset add dotas_v4 199.79.177.0/24
ipset add dotas_v4 204.68.194.0/24
ipset add dotas_v4 199.79.179.0/24
ipset add dotas_v4 199.79.176.0/24
ipset add dotas_v4 152.120.0.0/16
ipset add dotas_v4 204.68.202.0/24
ipset add dotas_v4 199.79.180.0/24
ipset add dotas_v4 152.122.0.0/16

# Create IPv6 ipset
ipset create dotas_v6 hash:net family inet6 -exist
ipset flush dotas_v6

# Add IPv6 ranges
ipset add dotas_v6 2001:19e8:230::/44
ipset add dotas_v6 2001:19e8:2::/48
ipset add dotas_v6 2001:19e8:f0::/48
ipset add dotas_v6 2001:19e8:d6::/48
ipset add dotas_v6 2001:19e8:f6::/48
ipset add dotas_v6 2001:19e8:f4::/48
ipset add dotas_v6 2001:19e8:d1::/48
ipset add dotas_v6 2001:19e8:f3::/48
ipset add dotas_v6 2001:19e8:d7::/48
ipset add dotas_v6 2001:19e8:a::/48
ipset add dotas_v6 2001:19e8:1::/48
ipset add dotas_v6 2001:19e8:f9::/48
ipset add dotas_v6 2001:19e8:d2::/48
ipset add dotas_v6 2001:19e8:f5::/48
ipset add dotas_v6 2001:19e8::/48
ipset add dotas_v6 2001:19e8:fb::/48
ipset add dotas_v6 2001:19e8:fa::/48
ipset add dotas_v6 2001:19e8:d9::/48
ipset add dotas_v6 2001:19e8:220::/44
ipset add dotas_v6 2001:19e8:f7::/48
ipset add dotas_v6 2001:19e8:d5::/48
ipset add dotas_v6 2001:19e8:d4::/48
ipset add dotas_v6 2001:19e8:d::/48
ipset add dotas_v6 2001:19e8:f1::/48
ipset add dotas_v6 2001:19e8:f2::/48
ipset add dotas_v6 2001:19e8:d3::/48
ipset add dotas_v6 2001:19e8:da::/48
ipset add dotas_v6 2001:19e8:e::/48
ipset add dotas_v6 2001:19e8:f8::/48
ipset add dotas_v6 2001:19e8:d8::/48

# Apply iptables rules (uncomment to use)
# iptables -A INPUT -m set --match-set dotas_v4 src -j ACCEPT
# iptables -A INPUT -m set --match-set dotas_v4 src -j DROP
# ip6tables -A INPUT -m set --match-set dotas_v6 src -j ACCEPT
# ip6tables -A INPUT -m set --match-set dotas_v6 src -j DROP

echo "IP ranges for DOT-AS loaded successfully!"
echo "IPv4 ranges: 20"
echo "IPv6 ranges: 30"