roles/common: rework firewall

Use firehol instead of all the others. AbuseIPDB.com can't be upd- ated automatically, Abuse.ch is no longer maintained, and Spamhaus is already in firehol.
2025-01-27 23:04:00 +03:00
parent 5312dc6bd5
commit 5b1530fa91
13 changed files with 80 additions and 10350 deletions
--- a/roles/common/files/firehol_level1-ipv4.nft
+++ b/roles/common/files/firehol_level1-ipv4.nft
@ -0,0 +1,5 @@
+#!/usr/sbin/nft -f
+
+define FIREHOL_LEVEL1_IPV4 = {
+192.168.254.254/32
+}