host_firewall: drop inbound traffic from internet-wide scanners (OpenFilters internet-scanners), v4 and v6, daily refresh

This commit is contained in:
2026-10-25 12:12:27 +00:00
parent 38d1ac6ced
commit c50c32059e
7 changed files with 309 additions and 3 deletions
@@ -0,0 +1,8 @@
[Unit]
Description=Refresh the internet scanner sets of the host firewall
Wants=network-online.target
After=network-online.target
[Service]
Type=oneshot
ExecStart=/usr/local/sbin/nft-host-scanners