https://raw.githubusercontent.com/bongochong/CombinedPrivacyBlockLists/master/combined-final.p2p Rohliste öffnen Beschreibung
Filterliste aus den Bereichen Privatsphäre. Format: IPs (Start-end-range). Betreut von Chon Bongo. Einzelheiten und Aufnahmekriterien stehen auf der Projektseite.
Integration
Address list per script
Fetch the list and import it into an address list called blocklist:
/tool fetch url="https://raw.githubusercontent.com/bongochong/CombinedPrivacyBlockLists/master/combined-final.p2p" dst-path=blocklist.rsc
/import blocklist.rscIf the list is a plain text file with one address or CIDR per line, convert it first:
/tool fetch url="https://raw.githubusercontent.com/bongochong/CombinedPrivacyBlockLists/master/combined-final.p2p" dst-path=blocklist.txt
:foreach line in=[/file get blocklist.txt contents] do={
/ip firewall address-list add list=blocklist address=$line comment="CPBL IP Filter (P2P-format, IPv4)"
}Use the list in the firewall
/ip firewall filter add chain=forward src-address-list=blocklist action=drop comment="CPBL IP Filter (P2P-format, IPv4)"
/ip firewall filter add chain=forward dst-address-list=blocklist action=drop comment="CPBL IP Filter (P2P-format, IPv4)"Schedule the fetch with /system scheduler to keep the list current. Very large lists consume RAM, so check the available memory of your device first.
banIP (recommended)
- Install the package:
opkg update && opkg install banip luci-app-banip - Open LuCI → Services → banIP → Feeds and add a custom feed with the URL below.
- Enable the feed and click Save & Apply.
https://raw.githubusercontent.com/bongochong/CombinedPrivacyBlockLists/master/combined-final.p2pManual with nftables
wget -qO /tmp/blocklist.txt "https://raw.githubusercontent.com/bongochong/CombinedPrivacyBlockLists/master/combined-final.p2p"
nft add set inet fw4 blocklist { type ipv4_addr; flags interval; }
nft -f - <<EOF
$(awk '!/^[#;]/ && NF {print "add element inet fw4 blocklist { " $1 " }"}' /tmp/blocklist.txt)
EOF
nft add rule inet fw4 forward ip saddr @blocklist dropipset create blocklist hash:net -exist
curl -fsSL "https://raw.githubusercontent.com/bongochong/CombinedPrivacyBlockLists/master/combined-final.p2p" | grep -Eo '^[0-9]{1,3}(.[0-9]{1,3}){3}(/[0-9]{1,2})?' |
while read -r net; do ipset add blocklist "$net" -exist; done
iptables -I INPUT -m set --match-set blocklist src -j DROP
iptables -I FORWARD -m set --match-set blocklist src -j DROPPersist the set and re-run the download from cron to keep it current:
ipset save blocklist -f /etc/ipset.blocklist
# /etc/cron.daily/blocklist
Add the list as an ipset in /etc/firehol/firehol.conf:
ipset4 create blocklist hash:net
ipset4 addfile blocklist "https://raw.githubusercontent.com/bongochong/CombinedPrivacyBlockLists/master/combined-final.p2p"
blacklist4 full inface any src ipset:blocklistReload with firehol try and confirm before making it permanent.
- Go to Firewall → Aliases and click +.
- Choose type URL Table (IPs), set a refresh interval (for example 1 day) and paste the URL below.
- Save and apply, then use the alias as source in a block rule under Firewall → Rules.
https://raw.githubusercontent.com/bongochong/CombinedPrivacyBlockLists/master/combined-final.p2p- Go to Firewall → pfBlockerNG → IP → IPv4 and click Add.
- Paste the URL below as source, set State to ON and pick the action (Deny Both is the usual choice).
- Save, then run Update → Force Reload → IP.
https://raw.githubusercontent.com/bongochong/CombinedPrivacyBlockLists/master/combined-final.p2pcurl -fsSL "https://raw.githubusercontent.com/bongochong/CombinedPrivacyBlockLists/master/combined-final.p2p" -o /var/lib/suricata/data/blocklist.txtReference the file from a rule using a dataset:
alert ip [!$HOME_NET] any -> $HOME_NET any (msg:"CPBL IP Filter (P2P-format, IPv4) match";
ip.src; dataset:isset,blocklist, type string, load blocklist.txt; sid:1000001;)Letzte Änderungen
Kürzlich hinzugefügte Einträge
- CPBL:1.6.29.197-1.6.29.197
- CPBL:1.7.51.205-1.7.51.205
- CPBL:1.9.164.197-1.9.164.197
- CPBL:1.10.211.174-1.10.211.174
- CPBL:1.13.253.140-1.13.253.140
- CPBL:1.15.239.31-1.15.239.31
- CPBL:1.20.88.78-1.20.88.78
- CPBL:1.20.187.52-1.20.187.52
- CPBL:1.20.230.31-1.20.230.31
- CPBL:1.24.16.4-1.24.16.4
- CPBL:1.24.16.29-1.24.16.29
- CPBL:1.24.16.46-1.24.16.46
- CPBL:1.24.16.50-1.24.16.50
- CPBL:1.24.16.52-1.24.16.52
- CPBL:1.24.16.95-1.24.16.95
- CPBL:1.24.16.98-1.24.16.98
- CPBL:1.24.16.101-1.24.16.101
- CPBL:1.24.16.109-1.24.16.109
- CPBL:1.24.16.116-1.24.16.116
- CPBL:1.24.16.121-1.24.16.121
- CPBL:1.24.16.125-1.24.16.125
- CPBL:1.24.16.128-1.24.16.128
- CPBL:1.24.16.133-1.24.16.133
- CPBL:1.24.16.149-1.24.16.149
- CPBL:1.24.16.152-1.24.16.152
Kürzlich entfernte Einträge
- CPBL:1.9.108.229-1.9.108.229
- CPBL:1.9.211.178-1.9.211.178
- CPBL:1.12.55.42-1.12.55.42
- CPBL:1.12.229.231-1.12.229.231
- CPBL:1.13.158.23-1.13.158.23
- CPBL:1.14.110.85-1.14.110.85
- CPBL:1.14.191.118-1.14.191.118
- CPBL:1.15.1.125-1.15.1.125
- CPBL:1.15.77.170-1.15.77.170
- CPBL:1.15.221.192-1.15.221.192
- CPBL:1.24.16.31-1.24.16.31
- CPBL:1.24.16.36-1.24.16.36
- CPBL:1.24.16.47-1.24.16.47
- CPBL:1.24.16.87-1.24.16.87
- CPBL:1.24.16.106-1.24.16.106
- CPBL:1.24.16.114-1.24.16.114
- CPBL:1.24.16.120-1.24.16.120
- CPBL:1.24.16.126-1.24.16.126
- CPBL:1.24.16.143-1.24.16.143
- CPBL:1.24.16.155-1.24.16.155
- CPBL:1.24.16.174-1.24.16.174
- CPBL:1.29.61.169-1.29.61.169
- CPBL:1.30.199.218-1.30.199.218
- CPBL:1.34.94.221-1.34.94.221
- CPBL:1.34.244.118-1.34.244.118