[GH-ISSUE #3230] [Feature Request] 是否有来源IP控制

gitea-mirror commented

2026-05-05 13:40:10 -06:00

Owner

Originally created by @Guation on GitHub (Dec 29, 2022).
Original GitHub issue: https://github.com/fatedier/frp/issues/3230

Describe the feature request

最近在检查frps日志的时候发现映射的ssh端口存在大量来自境外IP的连接请求已经把sshd配置成了仅证书登录但是这些爆破扫描一点没少还是在锲而不舍的尝试连接能不能在frps配置一个指定IP比如中国大陆IP连接ssh端口的时候就把数据转发到frpc可以尝试进行登录境外IP连接ssh端口请求直接丢弃掉请求不响应任何数据

Describe alternatives you've considered

No response

Affected area

Docs
Installation
Performance and Scalability
Security
User Experience
Test and Release
Developer Infrastructure
Client Plugin
Server Plugin
Extensions
Others

Originally created by @Guation on GitHub (Dec 29, 2022). Original GitHub issue: https://github.com/fatedier/frp/issues/3230 ### Describe the feature request 最近在检查frps日志的时候发现映射的ssh端口存在大量来自境外IP的连接请求已经把sshd配置成了仅证书登录但是这些爆破扫描一点没少还是在锲而不舍的尝试连接能不能在frps配置一个指定IP比如中国大陆IP连接ssh端口的时候就把数据转发到frpc可以尝试进行登录境外IP连接ssh端口请求直接丢弃掉请求不响应任何数据 ### Describe alternatives you've considered _No response_ ### Affected area - [ ] Docs - [ ] Installation - [ ] Performance and Scalability - [ ] Security - [X] User Experience - [ ] Test and Release - [ ] Developer Infrastructure - [X] Client Plugin - [X] Server Plugin - [ ] Extensions - [ ] Others

gitea-mirror closed this issue

2026-05-05 13:40:11 -06:00

gitea-mirror commented

2026-05-05 13:40:13 -06:00

Author

Owner

@Becods commented on GitHub (Dec 29, 2022):

善用iptables

@Becods commented on GitHub (Dec 29, 2022): 善用iptables

gitea-mirror commented

2026-05-05 13:40:15 -06:00

Author

Owner

@Guation commented on GitHub (Dec 29, 2022):

善用iptables

那个加一两个IP还好如果要过滤整个大陆IP还是太麻烦了

@Guation commented on GitHub (Dec 29, 2022): > 善用iptables 那个加一两个IP还好如果要过滤整个大陆IP还是太麻烦了

gitea-mirror commented

2026-05-05 13:40:15 -06:00

Author

Owner

@Becods commented on GitHub (Jan 1, 2023):

善用iptables

那个加一两个IP还好如果要过滤整个大陆IP还是太麻烦了

没有什么是一个bash解决不了的

#!/bin/bash
for i in `curl https://www.ipdeny.com/ipblocks/data/countries/cn.zone|egrep -v "^#|^$"`;do
	/sbin/iptables -A INPUT -s $i -j DROP
done

@Becods commented on GitHub (Jan 1, 2023): > > 善用iptables > > 那个加一两个IP还好如果要过滤整个大陆IP还是太麻烦了没有什么是一个bash解决不了的 ``` #!/bin/bash for i in `curl https://www.ipdeny.com/ipblocks/data/countries/cn.zone|egrep -v "^#|^$"`;do /sbin/iptables -A INPUT -s $i -j DROP done ```

gitea-mirror commented

2026-05-05 13:40:16 -06:00

Author

Owner

@Guation commented on GitHub (Jan 1, 2023):

善用iptables

那个加一两个IP还好如果要过滤整个大陆IP还是太麻烦了

没有什么是一个bash解决不了的
#!/bin/bash
for i in `curl https://www.ipdeny.com/ipblocks/data/countries/cn.zone|egrep -v "^#|^$"`;do
	/sbin/iptables -A INPUT -s $i -j DROP
done

谢谢

@Guation commented on GitHub (Jan 1, 2023): > > > 善用iptables > > > > > > 那个加一两个IP还好如果要过滤整个大陆IP还是太麻烦了 > > 没有什么是一个bash解决不了的 > > ``` > #!/bin/bash > for i in `curl https://www.ipdeny.com/ipblocks/data/countries/cn.zone|egrep -v "^#|^$"`;do > /sbin/iptables -A INPUT -s $i -j DROP > done > ``` 谢谢