#!/bin/sh
set -eu
F=/etc/malware-watch/blocked-iocs.txt
[ -r "$F" ] || exit 0
while IFS= read -r ip; do
  [ -n "$ip" ] || continue
  iptables -C OUTPUT -d "$ip" -j REJECT 2>/dev/null || iptables -I OUTPUT 1 -d "$ip" -j REJECT
  if iptables -nL DOCKER-USER >/dev/null 2>&1; then
    iptables -C DOCKER-USER -d "$ip" -j REJECT 2>/dev/null || iptables -I DOCKER-USER 1 -d "$ip" -j REJECT
  fi
done < "$F"
