| ▲ | ctoth a day ago | ||||||||||||||||||||||||||||
nft add table inet filter nft add set inet filter meta_crawl '{ type ipv4_addr; flags interval; }' nft add element inet filter meta_crawl '{ 57.141.0.0/24 }' nft add chain inet filter input '{ type filter hook input priority 0; }' nft add rule inet filter input ip saddr @meta_crawl tcp dport {80,443} reject with tcp reset | |||||||||||||||||||||||||||||
| ▲ | xeubie a day ago | parent | next [-] | ||||||||||||||||||||||||||||
I did finally block them at the firewall level last night. They are constantly trying to connect anyway. | |||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||
| ▲ | emmelaich a day ago | parent | prev [-] | ||||||||||||||||||||||||||||
maybe just drop them rather than reject with tcp reset | |||||||||||||||||||||||||||||