Alan Orth
9bba0d96bb
I will try using nftables directly instead of via firewalld as of Debian 11 as it is the replacement for the iptables/ipset stack in recent years and is easier to work with. This also includes a systemd service, timer, and script to update the spamhaus DROP lists as nftables sets. Still need to add fail2ban support.
13 lines
216 B
SYSTEMD
13 lines
216 B
SYSTEMD
[Unit]
|
||
Description=Update Spamhaus lists
|
||
|
||
[Timer]
|
||
# Once a day at midnight
|
||
OnCalendar=*-*-* 00:00:00
|
||
# Add a random delay of 0–3600 seconds
|
||
RandomizedDelaySec=3600
|
||
Persistent=true
|
||
|
||
[Install]
|
||
WantedBy=timers.target
|