Skip to content

Instantly share code, notes, and snippets.

@filipeandre
Forked from rojenzaman/update-cdn.sh
Created April 24, 2023 09:46
Show Gist options
  • Save filipeandre/88c0a59cd64a6849fa9ce1cd57356e8d to your computer and use it in GitHub Desktop.
Save filipeandre/88c0a59cd64a6849fa9ce1cd57356e8d to your computer and use it in GitHub Desktop.
firewalld rules for cloudflare cdn IPs (Red Hat, CentOS, Fedora)
#!/bin/bash
curl https://www.cloudflare.com/ips-v4 > .ips-v4
curl https://www.cloudflare.com/ips-v6 > .ips-v6
firewall-cmd --new-zone=cloudflare --permanent
firewall-cmd --reload
for i in `<.ips-v4`; do firewall-cmd --zone=cloudflare --add-source=$i; done
for i in `<.ips-v6`; do firewall-cmd --zone=cloudflare --add-source=$i; done
firewall-cmd --zone=cloudflare --add-port=80/tcp
firewall-cmd --zone=cloudflare --add-port=443/tcp
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment