东软古董级防火墙批量注入IP之脚本浅谈，仅供参考

又到了每年的护网行动，今年根据要求需要禁止访问的IP地址太多又没有规律可循，手动录入工作量太大，经过几个小时的研究发现东软的防火墙在策略控制方面的局限性，例如一个IP对象最多支撑15个明细IP，对应几百上千需要控制的IP量简直无法容忍，下面把本次的脚本模板贴出来当然其中的详细策略我都改为ANY了，仅供参考。

object ipaddr hw1 97.74.95.243,96.78.175.36,94.156.6.153,94.156.161.73,94.137.92.1,92.255.78.148,92.205.18.100,92.118.39.40,92.118.39.242,89.58.53.37,87.121.221.80,87.121.221.69,87.121.221.176,85.217.144.203,85.208.96.194

object ipaddr hw2 84.54.51.20,84.51.5.208,84.227.190.79,82.156.146.178,8.213.16.10,8.210.195.211,8.142.31.72,79.137.104.27,79.110.48.122,78.186.133.164,78.128.114.14,68.183.5.40,64.227.182.168,59.255.61.254,5.255.121.41

object ipaddr hw3 47.92.79.86,47.92.79.156,47.92.73.218,47.92.71.160,47.92.68.55,47.92.36.178,47.92.132.28,47.92.132.12,47.92.131.213,47.92.131.189,47.92.130.251,47.92.130.222,47.92.129.29,47.92.129.167,47.92.129.15

object ipaddr hw4 47.92.128.196,47.92.128.121,47.92.127.83,47.92.127.201,47.92.127.188,47.92.126.226,47.92.126.210,47.92.126.19,47.92.126.14,47.92.125.245,47.92.125.206,47.92.125.178,47.92.124.69,47.92.124.33,47.92.124.223

object ipaddr hw5 47.92.124.198,47.92.124.169,47.92.124.124,47.92.123.155,47.92.122.250,47.92.122.225,47.92.121.91,47.92.121.66,47.92.121.228,47.92.121.209,47.92.120.95,47.92.120.64,47.92.120.22,47.92.120.107,47.92.119.65

object ipaddr hw6 47.92.119.51,47.92.119.197,47.92.119.121,47.92.117.45,47.92.117.41,47.92.117.239,47.92.117.203,47.92.117.157,47.92.117.134,47.92.116.208,47.92.116.169,47.92.116.160,47.92.115.70,47.92.115.34,47.92.115.235

object ipaddr hw7 47.92.114.230,47.92.114.125,47.92.114.115,47.92.113.42,47.92.113.246,47.92.113.239,47.92.113.21,47.92.112.5,47.92.112.219,47.92.112.205,47.92.112.163,47.92.111.218,47.92.111.175,47.92.110.202,47.92.109.41

object ipaddr hw8 47.92.109.208,47.92.108.236,47.92.108.233,47.92.108.228,47.92.108.218,47.92.108.18,47.92.107.128,47.92.107.107,47.92.106.235,47.92.106.189,47.92.105.33,47.92.105.139,47.92.105.0,47.92.104.218,47.92.104.174

object ipaddr hw9 47.92.103.79,47.92.103.37,47.92.103.104,47.92.102.80,47.92.102.76,47.92.102.72,47.92.102.38,47.92.101.6,47.92.101.251,47.92.1.90,47.92.1.167,47.92.0.254,47.92.0.217,47.92.0.115,46.32.172.69

object ipaddr hw10 45.81.243.21,45.156.128.12,45.145.186.104,43.163.230.138,43.163.220.117,43.163.205.190,43.154.189.227,43.153.219.74,43.153.180.87,43.139.241.127,43.138.51.252,43.137.209.224,43.131.28.68,43.128.107.25,39.99.158.187

object ipaddr hw11 39.99.158.136,39.99.151.218,39.98.93.222,39.98.93.106,39.98.91.128,39.98.90.44,39.98.89.35,39.98.88.64,39.98.88.233,39.98.88.149,39.98.86.243,39.98.86.215,39.98.85.224,39.98.85.197,39.98.85.185

object ipaddr hw12 39.98.79.68,39.98.78.92,39.98.77.156,39.98.77.121,39.98.70.219,39.98.69.26,39.98.64.228,39.98.63.2,39.98.59.135,39.98.56.119,39.98.50.9,39.98.214.147,39.98.213.79,39.98.212.73,39.98.206.72

object ipaddr hw13 39.98.196.184,39.98.194.35,39.98.194.28,39.98.194.123,39.98.193.178,39.98.193.123,39.98.193.103,39.98.191.79,39.98.191.107,39.98.190.238,39.98.188.53,39.98.185.17,39.98.181.194,39.98.180.177

object ipaddr hw14 39.98.165.247,39.98.123.102,39.97.216.147,39.96.174.123,39.105.192.239,39.103.223.29,39.103.189.243,39.103.187.109,39.103.183.170,39.103.166.46,39.103.165.234,39.103.163.12,39.103.145.64

object ipaddr hw15 39.103.141.239,39.103.130.139,39.101.195.13,39.101.173.125,37.32.20.98,35.200.141.182,35.197.172.87,34.170.198.220,31.7.70.251,31.24.200.23,23.95.200.27,223.4.73.58,223.4.70.199,223.4.68.129,216.244.66.235

object ipaddr hw16 216.219.95.135,216.219.90.13,211.20.14.156,207.90.244.10,203.95.222.26,202.150.153.195,200.118.99.170,20.219.75.127,199.254.199.244,196.189.124.195,194.180.49.108,194.180.48.20,193.35.18.253,193.35.18.169,192.81.213.192

object ipaddr hw17 191.55.225.176,191.55.167.33,191.234.202.180,189.112.196.1,188.166.211.7,188.161.155.241,186.67.248.8,186.31.95.163,185.254.37.7,185.225.74.45,185.225.74.130,185.191.171.12,185.180.143.81,185.180.143.50,185.180.143.49

object ipaddr hw18 185.180.143.141,185.136.206.203,184.105.139.70,181.176.145.66,179.43.163.134,178.62.3.65,177.47.224.68,175.123.253.139,175.119.79.57,174.78.149.196,174.138.8.155,172.245.139.239,170.64.137.55

object ipaddr hw19 170.64.137.100,170.187.155.47,167.99.12.43,167.94.146.56,167.94.146.55,167.248.133.51,167.248.133.127,167.179.94.170,164.90.222.93,162.243.161.105,162.142.125.223,161.132.219.115,159.65.117.174,159.223.130.202,159.203.27.11

object ipaddr hw20 158.160.105.43,158.101.213.149,157.245.49.201,157.245.248.106,157.230.185.9,156.67.216.15,156.232.10.176,152.32.150.138,149.78.186.30,148.153.45.236,143.244.159.11,141.98.11.60,141.98.11.11,139.186.225.246,139.186.207.73

object ipaddr hw21 139.186.161.58,139.186.161.147,134.213.210.46,13.90.16.70,128.199.214.193,128.199.162.2,123.56.46.72,123.56.155.157,118.25.146.76,118.193.59.97,117.50.170.127,117.50.170.124,117.50.170.122,117.50.170.120,117.50.170.118

object ipaddr hw22 117.50.170.115,117.50.170.114,117.50.170.112,117.50.170.111,115.132.154.29,114.117.207.133,114.115.156.140,111.67.203.249,109.237.97.180,109.206.243.38,109.205.213.106,109.104.152.202,107.180.88.176,106.75.66.17,106.3.146.203

object ipaddr hw23 106.3.146.202,103.149.90.68,103.131.11.247,101.43.223.75,101.36.181.142,100.62.79.128,100.62.79.0,100.62.78.128,100.62.78.0,100.62.15.128,100.62.15.0,100.62.14.128,100.62.14.0,100.61.51.128,100.61.51.0

object ipaddr hw24 100.61.50.128,100.61.49.128,100.61.49.0,100.61.48.128,100.61.48.0,1.15.248.71

object group hw_2023 type ipadd object hw1,hw2,hw3,hw4,hw5,hw6,hw7,hw8,hw9,hw10,hw11,hw12,hw13,hw14,hw15,hw16,hw17,hw18,hw19,hw20,hw21,hw22,hw23,hw24

object group hw_2023 type ipadd description 禁止访问IP

policy access hw_2023 any any any group hw_2023 any any deny enable 20
policy access hw_2023 log on

脚本需要注意的就是必须用英文标点符号才可以