Skip to content

Instantly share code, notes, and snippets.

@XTechnology-TR
Forked from rojenzaman/update-cdn.sh
Created February 8, 2023 19:15
Show Gist options
  • Save XTechnology-TR/7b1914af65f30e724280441d90a360b1 to your computer and use it in GitHub Desktop.
Save XTechnology-TR/7b1914af65f30e724280441d90a360b1 to your computer and use it in GitHub Desktop.
firewalld rules for cloudflare cdn IPs (Red Hat, CentOS, Fedora)
#!/bin/bash
curl https://www.cloudflare.com/ips-v4 > .ips-v4
curl https://www.cloudflare.com/ips-v6 > .ips-v6
firewall-cmd --new-zone=cloudflare --permanent
firewall-cmd --reload
for i in `<.ips-v4`; do firewall-cmd --zone=cloudflare --add-source=$i; done
for i in `<.ips-v6`; do firewall-cmd --zone=cloudflare --add-source=$i; done
firewall-cmd --zone=cloudflare --add-port=80/tcp
firewall-cmd --zone=cloudflare --add-port=443/tcp
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment