blocklist-mirror

First-install notes

• Choose the right .netset file Each .netset file is a plain-text list of IP ranges, organized by provider, country, or continent. Choose the exact file you need because different providers and regions contain different addresses, and the wrong file can block or allow far too much traffic. source
• Load the list with ipset On Linux, use ipset (a fast tool for storing IP ranges) to load the .netset file before referencing it in iptables (the firewall rule engine). If the set name or file path is wrong, the firewall rule will not work correctly. source
• Check before you block traffic The example uses a DROP rule, which blocks all incoming traffic from addresses in the ipset, so review the list and test carefully. If you block addresses you need, connections will silently fail and can lock out services. source
• Unraid initial setup Create the config directory and file: run mkdir /mnt/user/appdata/blocklist-mirror, cd into it, then create cfg.yaml with nano. Copy in the contents of the cfg.yaml from the CrowdSec documentation page. Save, close, and start the container. source

Fetched yesterday - each note links to its source