zine-tw.com

代碼: 選擇全部

# 預設封鎖所有連入
sudo ufw default deny incoming
sudo ufw default allow outgoing
## sudo ufw allow 22/tcp comment 'SSH'

# 批次匯入 Cloudflare IPv4
for ip in $(curl -s https://www.cloudflare.com/ips-v4); do 
    sudo ufw allow from $ip to any port 80,443 proto tcp comment 'Cloudflare IPv4'
done

# 批次匯入 Cloudflare IPv6
for ip6 in $(curl -s https://www.cloudflare.com/ips-v6); do 
    sudo ufw allow from $ip6 to any port 80,443 proto tcp comment 'Cloudflare IPv6'
done

# 啟用 UFW
sudo ufw enable