 Ruakij
|
5318997b73
|
host_firewall: handshake meters per source reject over-limit connections with fw-rl-hs:, SYN meters log fw-rl-addr: and fw-rl-range: as evidence, conntrack accounting on
|
2026-10-26 14:35:28 +00:00 |
|
|
Ruakij
|
c50c32059e
|
host_firewall: drop inbound traffic from internet-wide scanners (OpenFilters internet-scanners), v4 and v6, daily refresh
|
2026-10-25 12:12:27 +00:00 |
|
|
Ruakij
|
c55a96c0ea
|
host_firewall: FireHOL level1 as its own set firehol_v4 next to Spamhaus, daily updater and firewall.firehol opt-out
|
2026-10-24 17:31:45 +00:00 |
|
|
Ruakij
|
ebb1377470
|
host_firewall: block Spamhaus DROP, DROPv6 and ASN-DROP networks in, out and forward
|
2026-10-24 14:31:00 +00:00 |
|
|
Ruakij
|
5e544cdfb5
|
host_firewall: optional nf_log_all_netns sysctl so the firewall logs of LXC guests reach the host kernel log
|
2026-10-24 13:43:12 +00:00 |
|
|
Ruakij
|
c5b51777c6
|
Ignore the missing geo timer unit of a host without geo sets in check mode
|
2026-10-23 20:54:31 +00:00 |
|
|
Ruakij
|
cfe87002c5
|
Replace the nftables role with host_firewall, one atomic inet host input table with zones, geo sets and lockout rollback
|
2026-10-07 11:02:59 +00:00 |
|