Alan Orth
8dd7663b3c
This adds Abuse.sh's list of IPs using blacklisted SSL certificates to nftables. These IPs are high confidence indicators of compromise and we should not route them. The list is updated daily by a systemd timer. See: https://sslbl.abuse.ch/blacklist/
13 lines
228 B
SYSTEMD
13 lines
228 B
SYSTEMD
[Unit]
|
||
Description=Update Abuse.ch SSL Blacklist IPs
|
||
|
||
[Timer]
|
||
# Once a day at midnight
|
||
OnCalendar=*-*-* 00:00:00
|
||
# Add a random delay of 0–3600 seconds
|
||
RandomizedDelaySec=3600
|
||
Persistent=true
|
||
|
||
[Install]
|
||
WantedBy=timers.target
|