stamparm / ipsum

Daily feed of bad IPs (with blacklist hit scores)
The Unlicense
1.58k stars 145 forks source link

Integration with Opnsense Firewall URL Table Alias #48

Open Guruleenyc opened 9 months ago

Guruleenyc commented 9 months ago

I would like to use this list in an Opnsense firewall URL table alias for a WAN Internet ingress blocking rule. Opnsense URL table aliases support URL lists like this supposedly. Anyone doing something like this on the firewall and could share experience?

knarfd commented 6 months ago

Just integrated it on myself with Aliases on a pfsense, but opnsense is also the same.. just have a look here for opnsense (use URL(IPS) ):

https://docs.opnsense.org/manual/aliases.html

Btw. then its a good idea to change the value of fetching the feed to some value like an hour (on pfsense it was standard 5 minutes or 300 seconds, so I used 3600 seconds under System > Advanced, Firewall & NAT, in opnsense it would be something similiar)