#下载ip库 #wget http://rfyiamcool.googlecode.com/files/allip.txt wget http://www.ipdeny.com/ipblocks/data/countries/cn.zone #把分号去掉 sed -i 's/;$//' allip.txt #把ip端调出来 for i in `cat cn.zone` do echo "iptables -A INPUT -s $i -j ACCEPT" >>iptables.sh done cat iptables.sh