#!/bin/bash

range1="192.168.55.1:192.168.55.15"

function load_ranges()
{
	if [ $range1 != "" ]; then
		first_num=$(echo "$range1" | cut -d : -f2 | cut -d . -f1)
		second_num=$(echo "$range1" | cut -d : -f2 | cut -d . -f2)
		third_num=$(echo "$range1" | cut -d : -f2 | cut -d . -f3)
		low_range_num=$(echo "$range1" | cut -d : -f1 | cut -d . -f4)
		high_range_num=$(echo "$range1" | cut -d : -f2 | cut -d . -f4)
                counter=1

		# The until loop stops once the top of the range is hit,
		# Note that it stops one ip address before the end of the
		# range.  I'm not sure how to test for greater than

		until [[ $low_range_num = $high_range_num ]];do
			current_ip="$first_num.$second_num.$third_num.$low_range_num"
			
			#you can add your rules here, and use $current_ip for the
			#range.

			#iptables -A FORWARD -i eth1 -d $current_ip -j DROP

			#iptables -A INPUT -d $current_ip -j DROP
						
#echo $current_ip

			let low_range_num=$low_range_num+1

                        let counter=$counter+1
                        if [ $counter = "255" ];then
                                           break
                         fi
		done
	fi
}
load_ranges

	if [ $* != "" ]; then
		first_num=$(echo "$*" | cut -d : -f2 | cut -d . -f1)

# Drops packets from specific IP's, and rejects outgoing
# communication to them
function black_list()
{
      awk '!/c/{print $3}' $FIREFILE | \
      while read i;do
	    $IPT -A BLACKHOLE -d $i -j REJECT \
	             --reject-with tcp-reset
	     $IPT -A BLACKHOLE -s $i -j DROP
      done
}

a=tcp   b=udp   c=spy         d=lanallow
80	b	 IP_ADD    IP_ADD
20	68	IP_ADD	 d
21	67	c	        d
110   b 	c	        d
25	b	 IP_ADD	  d
a	b	c	        d
a	b	 c	         d
a	b	 c	          d