10 Commits
Author SHA1 Message Date
Ruakij 1d10f2be39 host_firewall: drop bruteforceblocker, vxvault and cybercrime, only firehol level1 and level2 ban 2026-11-05 16:51:45 +00:00
Ruakij 6a1e7b77e7 host_firewall: ban firehol level2, bruteforceblocker, vxvault and cybercrime; greensnow is part of level2 2026-11-05 13:25:48 +00:00
Ruakij ca34bd8363 host_firewall: GreenSnow set greensnow_v4 drops inbound new connections of the listed hosts 2026-10-30 09:01:25 +00:00
Ruakij c50c32059e host_firewall: drop inbound traffic from internet-wide scanners (OpenFilters internet-scanners), v4 and v6, daily refresh 2026-10-25 12:12:27 +00:00
Ruakij c55a96c0ea host_firewall: FireHOL level1 as its own set firehol_v4 next to Spamhaus, daily updater and firewall.firehol opt-out 2026-10-24 17:31:45 +00:00
Ruakij 312be161b9 host_firewall: check the Spamhaus and geo sets under another table name, a dry run against the live name made unlisted addresses match 2026-10-24 17:20:11 +00:00
Ruakij d5610a5b34 host_firewall: refresh the Spamhaus sets by rule set reload, flush and refill let unlisted addresses match 2026-10-24 14:53:10 +00:00
Ruakij ebb1377470 host_firewall: block Spamhaus DROP, DROPv6 and ASN-DROP networks in, out and forward 2026-10-24 14:31:00 +00:00
Ruakij 9e2e6cbb99 Add IPv4 port forwards and masquerade to host_firewall in an ip host_nat table 2026-10-07 21:10:35 +00:00
Ruakij cfe87002c5 Replace the nftables role with host_firewall, one atomic inet host input table with zones, geo sets and lockout rollback 2026-10-07 11:02:59 +00:00