一键设置IIS只允许cloudflare访问

使用IIS套上cloudflare后，很多人不知道禁止非cloudflare ip访问，今天给个一键代码，在ps里边执行即可。

1. # Cloudflare IP 地址列表
2. $cloudflareIPs = @(
3. “173.245.48.0/20”,
4. “103.21.244.0/22”,
5. “103.22.200.0/22”,
6. “103.31.4.0/22”,
7. “141.101.64.0/18”,
8. “108.162.192.0/18”,
9. “190.93.240.0/20”,
10. “188.114.96.0/20”,
11. “197.234.240.0/22”,
12. “198.41.128.0/17”,
13. “162.158.0.0/15”,
14. “104.16.0.0/13”,
15. “104.24.0.0/14”,
16. “172.64.0.0/13”,
17. “131.0.72.0/22”
18. )
20. # 获取所有 IIS 网站的配置
21. $sites = Get-Website
23. # 循环遍历所有 IIS 网站并添加 Cloudflare IP 地址到允许列表
24. foreach ($site in $sites) {
25. $siteName = $site.Name
26. $siteConfig = Get-WebConfiguration -PSPath “IIS:\Sites\$siteName”
28. foreach ($ipRange in $cloudflareIPs) {
29. $ruleName = “AllowCloudflareIP_$([System.Guid]::NewGuid())”
30. $addRuleScript = @”
31. ipconfig /flushdns
32. New-WebConfigurationProperty -PSPath ‘IIS:\Sites\$siteName’ -Filter “system.webServer/security/ipSecurity” -Name “.” -Value @{
33. “ipAddress” = “$ipRange”;
34. “subnetMask” = “255.255.255.255”;
35. “allowed” = $true;
36. “domainName” = ”;
37. “byPass” = $false;
38. “matchOnly” = $true;
39. “negate” = $false;
40. “ruleName” = “$ruleName”;
41. “enableReverseDns” = $false;
42. }
43. “@
44. Invoke-Expression $addRuleScript
45. }
47. # 应用更改
48. $siteConfig | Set-WebConfiguration -Verbose
49. }