host_firewall: drop bruteforceblocker, vxvault and cybercrime, only firehol level1 and level2 ban

host_firewall/templates/host.nft.j2

@@ -171,7 +171,6 @@ table inet host {
 {% if firewall.firehol %}
 		ip saddr @firehol_v4 jump firehol_in
 		ip saddr @firehol_level2_v4 jump firehol_in
-		ip saddr @malware_v4 jump firehol_in
 {% endif %}
 
 {% endif %}
@@ -191,12 +190,6 @@ table inet host {
 		ip saddr @scanners_v4 jump scanners_in
 		ip6 saddr @scanners_v6 jump scanners_in
 
-{% endif %}
-{% if firewall.firehol %}
-
-		# After the established rule: only inbound connections of bruteforceblocker hosts drop.
-		ip saddr @bruteforceblocker_v4 jump bruteforceblocker_in
-
 {% endif %}
 		ct state invalid jump drop_log
 		iif lo accept
@@ -360,16 +353,6 @@ table inet host {
 		drop
 	}
 {% endif %}
-{% if firewall.firehol %}
-
-	# Own limit and prefix, so bruteforceblocker hits use up neither the fw-in-drop budget
-	# nor the one of the blocklists. CrowdSec whitelists the prefix: the listed
-	# hosts are known and need no decision.
-	chain bruteforceblocker_in {
-		limit rate {{ firewall.log.spamhaus_rate }} log prefix "fw-bruteforceblocker-in: "
-		drop
-	}
-{% endif %}
 {% if firewall.block_smtp_out or blocklists %}
 
 	# Outbound mail goes through the mail host only. Loopback stays open for a
@@ -385,7 +368,6 @@ table inet host {
 
 		ip daddr @firehol_v4 jump firehol_out
 		ip daddr @firehol_level2_v4 jump firehol_out
-		ip daddr @malware_v4 jump firehol_out
 {% endif %}
 {% if firewall.block_smtp_out %}
 
@@ -474,18 +456,12 @@ table inet host {
 		ip daddr @firehol_v4 jump firehol_out
 		ip saddr @firehol_level2_v4 jump firehol_in
 		ip daddr @firehol_level2_v4 jump firehol_out
-		ip saddr @malware_v4 jump firehol_in
-		ip daddr @malware_v4 jump firehol_out
 {% endif %}
 {% if firewall.scanners %}
 
 		ct state new ip saddr @scanners_v4 jump scanners_in
 		ct state new ip6 saddr @scanners_v6 jump scanners_in
 {% endif %}
-{% if firewall.firehol %}
-
-		ct state new ip saddr @bruteforceblocker_v4 jump bruteforceblocker_in
-{% endif %}
 {% for guard in forward_guard %}
 
 		# {{ guard.key }}