logoalt Hacker News

ctoth • today at 10:08 PM • 1 reply • view on HN

nft add table inet filter

nft add set inet filter meta_crawl '{ type ipv4_addr; flags interval; }'

nft add element inet filter meta_crawl '{ 57.141.0.0/24 }'

nft add chain inet filter input '{ type filter hook input priority 0; }'

nft add rule inet filter input ip saddr @meta_crawl tcp dport {80,443} reject with tcp reset


Replies

xeubie • today at 10:14 PM

I did finally block them at the firewall level last night. They are constantly trying to connect anyway.

➕ show 1 reply