Files
cham423-cs-tools/cloudfront_opsec.sh
T
2021-10-01 11:38:49 -07:00

8 lines
310 B
Bash

#!/bin/bash
apt install ufw
ufw allow ssh
ufw default deny incoming
ufw default allow outgoing
for ip in $(curl https://ip-ranges.amazonaws.com/ip-ranges.json | jq '.prefixes[] | select(.service? == "CLOUDFRONT") | .ip_prefix?' | tr -d '"'); do ufw allow proto tcp from $ip to any port 80,443; done
ufw enable