add cloudflare ufw ip scripts

2 files changed, 26 insertions, 0 deletions

diff --git a/cloudflare/ufw-add-cf-ip.sh b/cloudflare/ufw-add-cf-ip.sh
new file mode 100644
index 0000000..f292346
--- /dev/null
+++ b/cloudflare/ufw-add-cf-ip.sh
@@ -0,0 +1,13 @@
+#!/bin/bash
+
+for ipv4 in `curl -s https://www.cloudflare.com/ips-v4 | tee ips-v4`
+do
+    sudo ufw allow from $ipv4 to any port 80
+    sudo ufw allow from $ipv4 to any port 443
+done
+
+for ipv6 in `curl -s https://www.cloudflare.com/ips-v6 | tee ips-v6`
+do
+    sudo ufw allow from $ipv6 to any port 80
+    sudo ufw allow from $ipv6 to any port 443
+done
\ No newline at end of file
diff --git a/cloudflare/ufw-rm-cf-ip.sh b/cloudflare/ufw-rm-cf-ip.sh
new file mode 100644
index 0000000..990e079
--- /dev/null
+++ b/cloudflare/ufw-rm-cf-ip.sh
@@ -0,0 +1,13 @@
+#!/bin/bash
+
+for ipv4 in `cat ips-v4`
+do
+    sudo ufw delete allow from $ipv4 to any port 80
+    sudo ufw delete allow from $ipv4 to any port 443
+done
+
+for ipv6 in `cat ips-v6`
+do
+    sudo ufw delete allow from $ipv6 to any port 80
+    sudo ufw delete allow from $ipv6 to any port 443
+done
\ No newline at end of file