roles/common: Use AbuseIPDB.com list in nftables

For now I am still manually updating this, as we can only hit their API five times per day, so it is not possible to have each host get the list themselves every day with our one API key.
2021-07-31 21:46:50 +03:00
parent 7ae100faeb
commit a67d901641
5 changed files with 10032 additions and 0 deletions
--- a/roles/common/tasks/firewall_Debian.yml
+++ b/roles/common/tasks/firewall_Debian.yml
@ -41,6 +41,8 @@
      - spamhaus-ipv4.nft
      - spamhaus-ipv6.nft
      - abusech-ipv4.nft
+      - abuseipdb-ipv4.nft
+      - abuseipdb-ipv6.nft
    notify:
      - reload nftables

--- a/roles/common/tasks/firewall_Ubuntu.yml
+++ b/roles/common/tasks/firewall_Ubuntu.yml
@ -47,6 +47,8 @@
      - spamhaus-ipv4.nft
      - spamhaus-ipv6.nft
      - abusech-ipv4.nft
+      - abuseipdb-ipv4.nft
+      - abuseipdb-ipv6.nft
    notify:
      - reload nftables