#!/bin/bash
#
# SURFNET-NL - SURF B.V. IP Ranges - iptables/ipset rules
# ASN: AS1103
# Generated: 2025-12-16
# Source: ScaniteX (https://scanitex.com)
#
# Usage: chmod +x this_script.sh && sudo ./this_script.sh
#

# Create IPv4 ipset
ipset create surfnetnlsurfbv_v4 hash:net -exist
ipset flush surfnetnlsurfbv_v4

# Add IPv4 ranges
ipset add surfnetnlsurfbv_v4 145.126.0.0/16
ipset add surfnetnlsurfbv_v4 194.53.88.0/24
ipset add surfnetnlsurfbv_v4 145.97.24.0/21
ipset add surfnetnlsurfbv_v4 145.116.128.0/18
ipset add surfnetnlsurfbv_v4 194.53.95.0/24
ipset add surfnetnlsurfbv_v4 192.31.231.0/24
ipset add surfnetnlsurfbv_v4 145.107.24.0/22
ipset add surfnetnlsurfbv_v4 194.13.16.0/20
ipset add surfnetnlsurfbv_v4 194.53.94.0/24
ipset add surfnetnlsurfbv_v4 145.127.0.0/17
ipset add surfnetnlsurfbv_v4 145.76.0.0/16
ipset add surfnetnlsurfbv_v4 145.136.0.0/15
ipset add surfnetnlsurfbv_v4 145.98.0.0/16
ipset add surfnetnlsurfbv_v4 192.87.0.0/16
ipset add surfnetnlsurfbv_v4 145.137.128.0/18
ipset add surfnetnlsurfbv_v4 145.120.0.0/14
ipset add surfnetnlsurfbv_v4 145.116.64.0/18
ipset add surfnetnlsurfbv_v4 145.91.0.0/16
ipset add surfnetnlsurfbv_v4 145.102.0.0/16
ipset add surfnetnlsurfbv_v4 192.43.212.0/24
ipset add surfnetnlsurfbv_v4 194.13.112.0/21
ipset add surfnetnlsurfbv_v4 136.231.0.0/16
ipset add surfnetnlsurfbv_v4 145.100.0.0/15
ipset add surfnetnlsurfbv_v4 137.120.0.0/16
ipset add surfnetnlsurfbv_v4 145.103.0.0/16
ipset add surfnetnlsurfbv_v4 192.42.113.0/24
ipset add surfnetnlsurfbv_v4 145.90.0.0/16
ipset add surfnetnlsurfbv_v4 145.117.0.0/16
ipset add surfnetnlsurfbv_v4 131.224.0.0/16
ipset add surfnetnlsurfbv_v4 194.104.240.0/20
ipset add surfnetnlsurfbv_v4 132.229.0.0/16
ipset add surfnetnlsurfbv_v4 145.5.0.0/16
ipset add surfnetnlsurfbv_v4 156.83.0.0/16
ipset add surfnetnlsurfbv_v4 145.160.0.0/12
ipset add surfnetnlsurfbv_v4 145.41.0.0/16
ipset add surfnetnlsurfbv_v4 145.138.0.0/16
ipset add surfnetnlsurfbv_v4 145.98.16.0/24
ipset add surfnetnlsurfbv_v4 129.125.0.0/16
ipset add surfnetnlsurfbv_v4 134.221.0.0/16
ipset add surfnetnlsurfbv_v4 194.26.8.0/22
ipset add surfnetnlsurfbv_v4 145.28.0.0/15
ipset add surfnetnlsurfbv_v4 145.85.0.0/16
ipset add surfnetnlsurfbv_v4 145.48.0.0/15
ipset add surfnetnlsurfbv_v4 145.74.0.0/15
ipset add surfnetnlsurfbv_v4 131.211.0.0/16
ipset add surfnetnlsurfbv_v4 145.23.0.0/16
ipset add surfnetnlsurfbv_v4 131.174.0.0/16
ipset add surfnetnlsurfbv_v4 130.37.0.0/16
ipset add surfnetnlsurfbv_v4 145.20.0.0/16
ipset add surfnetnlsurfbv_v4 145.97.16.0/22
ipset add surfnetnlsurfbv_v4 145.0.0.0/16
ipset add surfnetnlsurfbv_v4 145.97.64.0/18
ipset add surfnetnlsurfbv_v4 145.52.0.0/16
ipset add surfnetnlsurfbv_v4 145.116.192.0/20
ipset add surfnetnlsurfbv_v4 145.97.48.0/20
ipset add surfnetnlsurfbv_v4 145.81.0.0/16
ipset add surfnetnlsurfbv_v4 195.169.0.0/16
ipset add surfnetnlsurfbv_v4 194.171.0.0/16
ipset add surfnetnlsurfbv_v4 145.97.128.0/18
ipset add surfnetnlsurfbv_v4 192.42.120.0/22
ipset add surfnetnlsurfbv_v4 145.97.20.0/22
ipset add surfnetnlsurfbv_v4 192.33.36.0/24
ipset add surfnetnlsurfbv_v4 145.33.0.0/16
ipset add surfnetnlsurfbv_v4 194.53.89.0/24
ipset add surfnetnlsurfbv_v4 145.95.0.0/16
ipset add surfnetnlsurfbv_v4 192.42.124.0/22
ipset add surfnetnlsurfbv_v4 145.144.0.0/12
ipset add surfnetnlsurfbv_v4 141.252.0.0/16
ipset add surfnetnlsurfbv_v4 145.24.0.0/16
ipset add surfnetnlsurfbv_v4 145.97.192.0/18
ipset add surfnetnlsurfbv_v4 193.176.235.0/24
ipset add surfnetnlsurfbv_v4 194.53.92.0/24
ipset add surfnetnlsurfbv_v4 192.42.114.0/23
ipset add surfnetnlsurfbv_v4 194.104.124.0/23
ipset add surfnetnlsurfbv_v4 145.96.0.0/16
ipset add surfnetnlsurfbv_v4 145.37.0.0/16
ipset add surfnetnlsurfbv_v4 145.92.0.0/15
ipset add surfnetnlsurfbv_v4 145.51.0.0/16
ipset add surfnetnlsurfbv_v4 145.116.224.0/19
ipset add surfnetnlsurfbv_v4 137.56.0.0/16
ipset add surfnetnlsurfbv_v4 143.121.0.0/16
ipset add surfnetnlsurfbv_v4 137.224.0.0/16
ipset add surfnetnlsurfbv_v4 194.26.12.0/22
ipset add surfnetnlsurfbv_v4 145.108.0.0/16
ipset add surfnetnlsurfbv_v4 192.104.140.0/24
ipset add surfnetnlsurfbv_v4 145.107.0.0/16
ipset add surfnetnlsurfbv_v4 145.118.0.0/16
ipset add surfnetnlsurfbv_v4 145.44.0.0/16
ipset add surfnetnlsurfbv_v4 145.1.0.0/17
ipset add surfnetnlsurfbv_v4 145.2.0.0/15
ipset add surfnetnlsurfbv_v4 145.140.0.0/14
ipset add surfnetnlsurfbv_v4 145.88.0.0/15
ipset add surfnetnlsurfbv_v4 193.177.176.0/22
ipset add surfnetnlsurfbv_v4 145.97.0.0/20
ipset add surfnetnlsurfbv_v4 139.63.0.0/16
ipset add surfnetnlsurfbv_v4 145.38.0.0/15
ipset add surfnetnlsurfbv_v4 192.16.188.0/23
ipset add surfnetnlsurfbv_v4 145.124.0.0/15
ipset add surfnetnlsurfbv_v4 145.19.0.0/16
ipset add surfnetnlsurfbv_v4 145.9.0.0/16

# Create IPv6 ipset
ipset create surfnetnlsurfbv_v6 hash:net family inet6 -exist
ipset flush surfnetnlsurfbv_v6

# Add IPv6 ranges
ipset add surfnetnlsurfbv_v6 2001:67c:262c::/48
ipset add surfnetnlsurfbv_v6 2001:610::/29
ipset add surfnetnlsurfbv_v6 2001:67c:1200::/48

# Apply iptables rules (uncomment to use)
# iptables -A INPUT -m set --match-set surfnetnlsurfbv_v4 src -j ACCEPT
# iptables -A INPUT -m set --match-set surfnetnlsurfbv_v4 src -j DROP
# ip6tables -A INPUT -m set --match-set surfnetnlsurfbv_v6 src -j ACCEPT
# ip6tables -A INPUT -m set --match-set surfnetnlsurfbv_v6 src -j DROP

echo "IP ranges for SURFNET-NL - SURF B.V. loaded successfully!"
echo "IPv4 ranges: 100"
echo "IPv6 ranges: 3"