diff --git a/blocklist-update.sh b/blocklist-update.sh index 3d7908b..f99a192 100644 --- a/blocklist-update.sh +++ b/blocklist-update.sh @@ -99,8 +99,14 @@ then # Create the one and only firewall rule $IPTABLES_PATH -I $CHAINNAME -m set --match-set $CHAINNAME src -j $ACTION >>$MAILLOG 2>&1 fi + echo "Adding the return statement to the chain. We do not want to accept a non-matching ip; think about fail2ban" >>$MAILLOG -$IPTABLES_PATH -A $CHAINNAME -j RETURN >>$MAILLOG 2>&1 +if [ `$IPTABLES_PATH -L $CHAINNAME | grep RETURN | wc -l` -eq 0 ] +then + # Create the one and only firewall rule + $IPTABLES_PATH -A $CHAINNAME -j RETURN >>$MAILLOG 2>&1 +fi + ## Read all IPs from the downloaded IP list and fill up the ipset filter set echo "" >>$MAILLOG