roles/common: use FireHOL Level 1 for nftables

Instead of a bunch of different blocklists. The only problem with this list is that it includes many bogons that we use directly or indirectly (for example localhost!) so I filter those out. Ideally these would be filtered by WAN-facing routers before they reach us anyway.
ilri · Jan 7, 2025 · 891adda · 891adda
1 parent 6ee1dde
commit 891adda
Show file tree

Hide file tree

Showing 20 changed files with 117 additions and 14,868 deletions.
diff --git a/roles/common/files/abuseipdb-ipv4.nft b/roles/common/files/abuseipdb-ipv4.nft
diff --git a/roles/common/files/abuseipdb-ipv6.nft b/roles/common/files/abuseipdb-ipv6.nft
diff --git a/roles/common/files/aggregate-cidr-addresses.pl b/roles/common/files/aggregate-cidr-addresses.pl