topic IP ranges for countries from GeoProtection (new version) in Scripts https://community.checkpoint.com/t5/Scripts/IP-ranges-for-countries-from-GeoProtection-new-version/m-p/39667#M572 <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="ipgl123.JPG" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/9444iB217DB541A6CADFF/image-size/medium?v=v2&amp;px=400" role="button" title="ipgl123.JPG" alt="ipgl123.JPG" /></span><BR />This script lists all country entries from the file ip2country. csv and displays the countries sorted for R80.10. <BR />The country code can then be insert. For the selected country all IP Ranges are displayed.</P> <P>So you can find all IP range, which are blocked by GeoProtection for a country.</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="_Val__0-1605787951901.png" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/9115iBA62B7C1F6835918/image-size/medium?v=v2&amp;px=400" role="button" title="_Val__0-1605787951901.png" alt="_Val__0-1605787951901.png" /></span></P> <P>&nbsp;</P> <P><IMG style="width: auto; height: auto;" class="image-1 jive-image" src="https://community.checkpoint.com/legacyfs/online/checkpoint/63799_pastedImage_1.png" border="0" /></P> <P>&nbsp;</P> <P><STRONG>Script:</STRONG></P> <P>#!/bin/bash<BR />dec2ip() {<BR />local ip dec=$@<BR />delim=""<BR />for e in {3..0}<BR />do<BR />((octet = dec / (256 ** e) ))<BR />((dec -= octet * 256 ** e))<BR />ip+=$delim$octet<BR />delim=.<BR />done<BR />printf '%s' "$ip"<BR />}</P> <P>echo count CN country name<BR />echo ----------------------------------------------------<BR />more /opt/CPrt-R80/conf/ip2country.csv | awk '{print $6 " " $7} ' FS=',' | sort | uniq -c |sed 's/"//g'<BR />read -p "Please insert country : " name<BR />echo Find network with country : $name<BR />if [ "$name" != "" ]<BR />then<BR />more /opt/CPrt-R80/conf/ip2country.csv |grep $name &gt; _temp.txt<BR />declare -i index<BR />index=0<BR />for i in $(cat _temp.txt ); do<BR />ip123=$( echo $i |grep $name | awk '{print $1}' FS=',' |sed 's/"//g')<BR />net123=$( echo $i |grep $name | awk '{print $2}' FS=',' |sed 's/"//g')<BR />if [ "$ip123" != "" ]<BR />then<BR /># echo $ip123<BR />index=$index+1<BR />printf '%s' "$name $index # "<BR />dec2ip $ip123<BR /># echo $net123<BR />printf '%s' " - "<BR />dec2ip $net123<BR />printf '%s\n' ""<BR />fi<BR />done;<BR />fi</P> <P>&nbsp;</P> <P><STRONG>Version:</STRONG></P> <P><SPAN style="color: #000000; background-color: transparent; font-weight: 200; text-decoration: none; font-size: 28px;">&nbsp;<SPAN style="font-size: 15px;">+ version 0.4 06-02-2018 - bug fix<BR />&nbsp; + version 0.5 09-03-2018 - bug fix<BR />&nbsp; + version 0.6 18-03-2018 - new feature <BR />&nbsp; + new version 0.9 06-04-2018 - new feature </SPAN></SPAN></P> Tue, 31 Mar 2026 08:22:48 GMT HeikoAnkenbrand 2026-03-31T08:22:48Z IP ranges for countries from GeoProtection (new version) https://community.checkpoint.com/t5/Scripts/IP-ranges-for-countries-from-GeoProtection-new-version/m-p/39667#M572 62 Tue, 31 Mar 2026 08:22:48 GMT https://community.checkpoint.com/t5/Scripts/IP-ranges-for-countries-from-GeoProtection-new-version/m-p/39667#M572 HeikoAnkenbrand 2026-03-31T08:22:48Z Re: Bash script to show IP ranges for countrys from GeoProtection (new version) https://community.checkpoint.com/t5/Scripts/IP-ranges-for-countries-from-GeoProtection-new-version/m-p/39668#M573 <HTML><HEAD></HEAD><BODY><P>I would like to extend the script so that a firewall object is created automatically.&nbsp;Firewall range objects and then a group of all range objects.</P><P>This allows you to use regional country settings in firewall rules.</P><P></P><P>Regards,</P><P><A _jive_internal="true" class="" data-containerid="-1" data-containertype="-1" data-objectid="55229" data-objecttype="3" href="https://community.checkpoint.com/people/h.ank2614aef2-c5d1-3f73-bbbd-45c59b9e2728">Heiko</A></P></BODY></HTML> Sat, 10 Mar 2018 09:31:30 GMT https://community.checkpoint.com/t5/Scripts/IP-ranges-for-countries-from-GeoProtection-new-version/m-p/39668#M573 HeikoAnkenbrand 2018-03-10T09:31:30Z Re: Bash script to show IP ranges for countrys from GeoProtection (new version) https://community.checkpoint.com/t5/Scripts/IP-ranges-for-countries-from-GeoProtection-new-version/m-p/39669#M574 <HTML><HEAD></HEAD><BODY><P>An even better idea would be to combine the ip2country.csv and the efforts for automatically updated dynamic cloud services (like O365, which is in EA -&gt;&nbsp;<A href="https://community.checkpoint.com/docs/DOC-2339">Dynamic Objects in R80.10</A>)</P><P>With that one would have the possibility to use dynamic objects with predefined names like "Geo_Protection_&lt;Country&gt;" or whatever to use them in the policy.</P></BODY></HTML> Thu, 15 Mar 2018 14:03:56 GMT https://community.checkpoint.com/t5/Scripts/IP-ranges-for-countries-from-GeoProtection-new-version/m-p/39669#M574 Norbert_Bohusch 2018-03-15T14:03:56Z Re: Bash script to show IP ranges for countrys from GeoProtection (new version) https://community.checkpoint.com/t5/Scripts/IP-ranges-for-countries-from-GeoProtection-new-version/m-p/39670#M575 <HTML><HEAD></HEAD><BODY><P>Good idea!</P><P></P><P>If I have some time, I will extend the script:-)</P><P></P><P>Regards,</P><P><A _jive_internal="true" class="" data-containerid="-1" data-containertype="-1" data-objectid="55229" data-objecttype="3" href="https://community.checkpoint.com/people/h.ank2614aef2-c5d1-3f73-bbbd-45c59b9e2728">Heiko</A></P></BODY></HTML> Thu, 15 Mar 2018 14:20:44 GMT https://community.checkpoint.com/t5/Scripts/IP-ranges-for-countries-from-GeoProtection-new-version/m-p/39670#M575 HeikoAnkenbrand 2018-03-15T14:20:44Z Re: Bash script to show IP ranges for countrys from GeoProtection (new version) https://community.checkpoint.com/t5/Scripts/IP-ranges-for-countries-from-GeoProtection-new-version/m-p/39671#M576 <HTML><HEAD></HEAD><BODY><P>Have you developed this further yet?</P></BODY></HTML> Tue, 20 Mar 2018 13:15:03 GMT https://community.checkpoint.com/t5/Scripts/IP-ranges-for-countries-from-GeoProtection-new-version/m-p/39671#M576 hong_jungil 2018-03-20T13:15:03Z