host_firewall: drop bruteforceblocker, vxvault and cybercrime, only firehol level1 and level2 ban

host_firewall/defaults/main.yml

@@ -93,7 +93,7 @@ firewall:
     # Lets the kernel log the nft log statements of container network
     # namespaces (LXC guests) into the host kernel log.
     all_netns: false
-    # Shared by the Spamhaus (fw-spamhaus-in: , fw-spamhaus-out: ), FireHOL (fw-firehol-in: , fw-firehol-out: ), bruteforceblocker (fw-bruteforceblocker-in: ) and scanner (fw-scanners-in: ) chains,
+    # Shared by the Spamhaus (fw-spamhaus-in: , fw-spamhaus-out: ), FireHOL (fw-firehol-in: , fw-firehol-out: ) and scanner (fw-scanners-in: ) chains,
     # one limit each.
     spamhaus_rate: "6/minute burst 10 packets"
   # Spamhaus DROP, DROPv6 and ASN-DROP: traffic from the listed networks drops
@@ -101,11 +101,9 @@ firewall:
   # are refreshed daily by nft-host-spamhaus.
   spamhaus: true
   # FireHOL lists (IPv4 only, FireHOL has no IPv6 lists), from github.com/firehol/blocklist-ipsets:
-  # - level1 and level2 (level2 includes GreenSnow) and the malware set (vxvault and cybercrime): treated like the
-  #   Spamhaus lists, with the prefixes fw-firehol-in: and fw-firehol-out: and the same log limit.
-  # - bruteforceblocker: inbound new connections from the listed hosts drop, outbound traffic is not filtered. Log
-  #   prefix fw-bruteforceblocker-in: with its own limit, which CrowdSec whitelists.
-  # Entries in private or reserved space and ones holding an address of the host are left out. All sets are refreshed
+  # level1 and level2 (level2 includes GreenSnow): treated like the Spamhaus lists, with the prefixes fw-firehol-in:
+  # and fw-firehol-out: and the same log limit.
+  # Entries in private or reserved space and ones holding an address of the host are left out. Both sets are refreshed
   # daily by nft-host-firehol.
   firehol: true
   # Internet-wide scanners (Censys, Shodan, ONYPHE, Shadowserver, ...), IPv4