fixed
EDIT:
With full listing of commands for 5 as penance.
Quote:
iptables -I OUTPUT -m iprange --dst-range 23.0.0.1-23.15.255.254 -j DROP
iptables -I OUTPUT -m iprange --dst-range 50.16.0.1-56.19.255.254 -j DROP
iptables -I OUTPUT -m iprange --dst-range 72.21.192.1-72.21.223.254 -j DROP
iptables -I OUTPUT -m iprange --dst-range 107.20.0.1-107.23.255.254 -j DROP
iptables -I OUTPUT -m iprange --dst-range 184.72.1-184.75.255.254 -j DROP
iptables -I OUTPUT -m iprange --dst-range 204.246.160.1-204.246.191.254 -j DROP
iptables -I OUTPUT -m iprange --dst-range 205.251.192.1-205.251.255.254 -j DROP
iptables -I OUTPUT -m iprange --dst-range 207.171.160.1-207.171.191.254 -j DROP
|
[root@kindle root]#
iptables -L
snip
Quote:
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
DROP all -- anywhere anywhere destination IP range 207.171.160.1-207.171.191.254
DROP all -- anywhere anywhere destination IP range 205.251.192.1-205.251.255.254
DROP all -- anywhere anywhere destination IP range 204.246.160.1-204.246.191.254
DROP all -- anywhere anywhere destination IP range 184.72.1.0-184.75.255.254
DROP all -- anywhere anywhere destination IP range 107.20.0.1-107.23.255.254
DROP all -- anywhere anywhere destination IP range 72.21.192.1-72.21.223.254
DROP all -- anywhere anywhere destination IP range 50.16.0.1-56.19.255.254
DROP all -- anywhere anywhere destination IP range 23.0.0.1-23.15.255.254
ACCEPT all -- anywhere localhost.localdomain
|
this would live in /etc/sysconfig/iptables to be made permanent.
Like:
Quote:
*filter
:INPUT DROP [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
# Drop Amazon bits and bats
-I OUTPUT -m iprange --dst-range 23.0.0.1-23.15.255.254 -j DROP
-I OUTPUT -m iprange --dst-range 50.16.0.1-56.19.255.254 -j DROP
-I OUTPUT -m iprange --dst-range 72.21.192.1-72.21.223.254 -j DROP
-I OUTPUT -m iprange --dst-range 107.20.0.1-107.23.255.254 -j DROP
-I OUTPUT -m iprange --dst-range 184.72.1-184.75.255.254 -j DROP
-I OUTPUT -m iprange --dst-range 204.246.160.1-204.246.191.254 -j DROP
-I OUTPUT -m iprange --dst-range 205.251.192.1-205.251.255.254 -j DROP
-I OUTPUT -m iprange --dst-range 207.171.160.1-207.171.191.254 -j DROP
REST OF FILE ELIDED
|
EDIT EDIT:
Did a
shutdown -r now to test it all works fine. it does. I can sleep easy
Goodnight
Obviously, this will bust the store amongst other things
It's a LONG less than a minute