如何使用Python将ip的CSV列表放入iptables / IP集中？

Question

I would like to use this CSV file to block all IPs from the list. The entries in the CSV file are IP ranges. How do I seperate the IP ranges from text, and add those IP ranges to the iptables with the rule to drop all connections with those IPs.

Btw, I think this is better to use for large ip ranges, http://ipset.netfilter.org/index.html

Answer 1

You will need python netaddr module for that

import netaddr

with open('ipranges.txt','r') as f:
    for line in f:
        startip,endip=line.split(',')[:2]
        print 'iptables -I INPUT -s {} -j DROP'.format(netaddr.iprange_to_cidrs(startip, endip)[0])

Answer 2

maybe take a look at https://docs.python.org/3/library/ipaddress.html to manipulate your ip addresses. ipaddress.summarize_address_range(first, last) could be nice to generate the iptables rule.