Ruakij c2c8934ec9 host_firewall: per-service new-connection meters per source (/32, /64) and per range (/24, /48) from measured peaks, excess dropped with prefix fw-ratelimit:, replaces the ssh meter

2026-10-26 12:24:31 +00:00

..

host.nft.j2

host_firewall: per-service new-connection meters per source (/32, /64) and per range (/24, /48) from measured peaks, excess dropped with prefix fw-ratelimit:, replaces the ssh meter

2026-10-26 12:24:31 +00:00

nft-host-geo.j2

host_firewall: check the Spamhaus and geo sets under another table name, a dry run against the live name made unlisted addresses match

2026-10-24 17:20:11 +00:00

nft-host-scanners.allowlist.j2

host_firewall: drop inbound traffic from internet-wide scanners (OpenFilters internet-scanners), v4 and v6, daily refresh

2026-10-25 12:12:27 +00:00