bundles/nftables: add "globally blocked ips"

2024-01-23 09:30:41 +01:00 · 2024-01-23 09:30:41 +01:00 · 980f4cb41a
commit 980f4cb41a
parent 5ffbe50b1e
2 changed files with 9 additions and 0 deletions
--- a/bundles/nftables/metadata.py
+++ b/bundles/nftables/metadata.py
@ -6,6 +6,10 @@ defaults = {
            'nftables': {},
        },
    },
+    'nftables': {
+        'blocked_v4': repo.libs.firewall.global_ip4_blocklist,
+        'blocked_v6': repo.libs.firewall.global_ip6_blocklist,
+    },
    'pacman': {
        'packages': {
            'nftables': {},
--- a/libs/firewall.py
+++ b/libs/firewall.py
@ -44,3 +44,8 @@ named_networks = {
        },
    },
 }
+
+global_ip4_blocklist = {
+    "141.98.11.0/24", # 2024-01-21, smtp login bruteforce
+}
+global_ip6_blocklist = set()