base-stack/sbin/firewall-blacklist-rem.sh

#!/bin/bash

# IP should be first arg
if [ -n "$1" ]; then
  IP=$1
else
  echo "IP not set"
  exit 1
fi

if [[ `firewall-cmd --ipset=blacklist --query-entry $IP` = "yes" ]]; then

  firewall-cmd --ipset=blacklist --remove-entry=$IP
  firewall-cmd --permanent --ipset=blacklist --remove-entry=$IP

else

  echo "IP $IP not in blacklist. Doing nothing."

fi