Configure the firewall to periodically download lists of IP addresses and CIDRs from published block lists.
juggernaut --task=lfd:ipblocklists --oper=<blocklist_add|blocklist_edit|blocklist_del> --name=<string>Option |
Value | Default | Description |
|---|---|---|---|
--oper |
<string> | The operation you want to perform. Operations: blocklist_add, blocklist_edit, blocklist_del | |
--name |
<string> | List name with all uppercase alphabetic characters with no spaces and a maximum of 25 characters - this will be used as the iptables chain name. | |
--interval |
<digit> | Refresh interval to download the list, must be a minimum of 3600 seconds (an hour), but 86400 (a day) should be more than enough. | |
--max |
<digit> | This is the maximum number of IP addresses to use from the list, a value of 0 means all IPs. | |
--source |
<string> | The source URL to download the list from. | |
--enabled |
<1|0> | Enable or disable the blocklist. | |
--restart |
<yes> | Restart the service after saving settings. |
// add a blocklist
juggernaut --task=lfd:ipblocklists --oper=blocklist_add --name=MYBLOCKLIST --interval=86400 --max=0 --source=https://www.example.com/blocklist.txt --enabled=1 --restart=yes
// edit a blocklist
juggernaut --task=lfd:ipblocklists --oper=blocklist_edit --name=MYBLOCKLIST --interval=3600 --restart=yes
// remove a blocklist
juggernaut --task=lfd:ipblocklists --oper=blocklist_del --name=MYBLOCKLIST --restart=yes
// add a blocklist of high score abuse IPs refreshed every 6 hours, limited to 10000 entries
juggernaut --task=lfd:ipblocklists --oper=blocklist_add --name=ABUSEIPDB --interval=21600 --max=10000 --source=https://www.example.com/abuse.txt --enabled=1 --restart=yes