View Single Post
Old 10-08-2012, 08:39 PM   #20
twobob
( ͡° ͜ʖ ͡°){ʇlnɐɟ ƃǝs}Tưr
twobob ought to be getting tired of karma fortunes by now.twobob ought to be getting tired of karma fortunes by now.twobob ought to be getting tired of karma fortunes by now.twobob ought to be getting tired of karma fortunes by now.twobob ought to be getting tired of karma fortunes by now.twobob ought to be getting tired of karma fortunes by now.twobob ought to be getting tired of karma fortunes by now.twobob ought to be getting tired of karma fortunes by now.twobob ought to be getting tired of karma fortunes by now.twobob ought to be getting tired of karma fortunes by now.twobob ought to be getting tired of karma fortunes by now.
 
twobob's Avatar
 
Posts: 6,552
Karma: 6021146
Join Date: Jun 2012
Location: uti gratia usura (Yao ying da ying; Mo ying da yieng)
Device: PW-WIFI|K5-3G+WIFI| K4|K3-3G|DXG|K2| Rooted Nook Touch
fixed

EDIT:

With full listing of commands for 5 as penance.

Quote:
iptables -I OUTPUT -m iprange --dst-range 23.0.0.1-23.15.255.254 -j DROP

iptables -I OUTPUT -m iprange --dst-range 50.16.0.1-56.19.255.254 -j DROP

iptables -I OUTPUT -m iprange --dst-range 72.21.192.1-72.21.223.254 -j DROP

iptables -I OUTPUT -m iprange --dst-range 107.20.0.1-107.23.255.254 -j DROP

iptables -I OUTPUT -m iprange --dst-range 184.72.1-184.75.255.254 -j DROP

iptables -I OUTPUT -m iprange --dst-range 204.246.160.1-204.246.191.254 -j DROP

iptables -I OUTPUT -m iprange --dst-range 205.251.192.1-205.251.255.254 -j DROP

iptables -I OUTPUT -m iprange --dst-range 207.171.160.1-207.171.191.254 -j DROP
[root@kindle root]# iptables -L

snip
Quote:
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
DROP all -- anywhere anywhere destination IP range 207.171.160.1-207.171.191.254
DROP all -- anywhere anywhere destination IP range 205.251.192.1-205.251.255.254
DROP all -- anywhere anywhere destination IP range 204.246.160.1-204.246.191.254
DROP all -- anywhere anywhere destination IP range 184.72.1.0-184.75.255.254
DROP all -- anywhere anywhere destination IP range 107.20.0.1-107.23.255.254
DROP all -- anywhere anywhere destination IP range 72.21.192.1-72.21.223.254
DROP all -- anywhere anywhere destination IP range 50.16.0.1-56.19.255.254
DROP all -- anywhere anywhere destination IP range 23.0.0.1-23.15.255.254
ACCEPT all -- anywhere localhost.localdomain
this would live in /etc/sysconfig/iptables to be made permanent.

Like:
Quote:
*filter
:INPUT DROP [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]

# Drop Amazon bits and bats
-I OUTPUT -m iprange --dst-range 23.0.0.1-23.15.255.254 -j DROP
-I OUTPUT -m iprange --dst-range 50.16.0.1-56.19.255.254 -j DROP
-I OUTPUT -m iprange --dst-range 72.21.192.1-72.21.223.254 -j DROP
-I OUTPUT -m iprange --dst-range 107.20.0.1-107.23.255.254 -j DROP
-I OUTPUT -m iprange --dst-range 184.72.1-184.75.255.254 -j DROP
-I OUTPUT -m iprange --dst-range 204.246.160.1-204.246.191.254 -j DROP
-I OUTPUT -m iprange --dst-range 205.251.192.1-205.251.255.254 -j DROP
-I OUTPUT -m iprange --dst-range 207.171.160.1-207.171.191.254 -j DROP

REST OF FILE ELIDED
EDIT EDIT:

Did a shutdown -r now to test it all works fine. it does. I can sleep easy
Goodnight

Obviously, this will bust the store amongst other things

It's a LONG less than a minute
Attached Thumbnails
Click image for larger version

Name:	kindle:0.0 - GVncViewer_120.png
Views:	168
Size:	14.9 KB
ID:	93703   Click image for larger version

Name:	kindle:0.0 - GVncViewer_121.png
Views:	182
Size:	20.1 KB
ID:	93704  

Last edited by twobob; 10-08-2012 at 09:00 PM. Reason: [root@kindle root]# iptables -L
twobob is offline   Reply With Quote