host_firewall: drop bruteforceblocker, vxvault and cybercrime, only firehol level1 and level2 ban

This commit is contained in:
2026-11-05 16:51:45 +00:00
parent 6a1e7b77e7
commit 1d10f2be39
4 changed files with 27 additions and 37 deletions
+2 -4
View File
@@ -23,13 +23,11 @@ BASE_URL = "https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/"
USER_AGENT = "ruekov-host-firewall (nft-host-firehol)"
# set name -> (lists merged into it, lower bound for their entries together that
# catches an empty or truncated answer; the lists hold about 4700 (level1),
# 18700 (level2), 500 (bruteforceblocker) and 70 + 500 (vxvault, cybercrime)).
# catches an empty or truncated answer; the lists hold about 4700 (level1) and
# 18700 (level2)).
SETS = {
"firehol_v4": (["firehol_level1.netset"], 1000),
"firehol_level2_v4": (["firehol_level2.netset"], 5000),
"bruteforceblocker_v4": (["bruteforceblocker.ipset"], 100),
"malware_v4": (["vxvault.ipset", "cybercrime.ipset"], 200),
}
# A prefix this wide is a parse error, not a bad network.
MIN_PREFIXLEN = 8