https://github.com/elliotwutingfeng/SyncthingRelayServerIPs/blob/main/ips.txt?raw=1 Rohliste öffnen Beschreibung
Filterliste aus den Bereichen Allowlist. Format: IPs (IPv4). Betreut von Wu Tingfeng. Einzelheiten und Aufnahmekriterien stehen auf der Projektseite.
Integration
Address list per script
Fetch the list and import it into an address list called blocklist:
/tool fetch url="https://github.com/elliotwutingfeng/SyncthingRelayServerIPs/blob/main/ips.txt?raw=1" dst-path=blocklist.rsc
/import blocklist.rsc If the list is a plain text file with one address or CIDR per line, convert it first:
/tool fetch url="https://github.com/elliotwutingfeng/SyncthingRelayServerIPs/blob/main/ips.txt?raw=1" dst-path=blocklist.txt
:foreach line in=[/file get blocklist.txt contents] do={
/ip firewall address-list add list=blocklist address=$line comment="Syncthing Relay Server IPs"
} Use the list in the firewall
/ip firewall filter add chain=forward src-address-list=blocklist action=drop comment="Syncthing Relay Server IPs"
/ip firewall filter add chain=forward dst-address-list=blocklist action=drop comment="Syncthing Relay Server IPs" Schedule the fetch with /system scheduler to keep the list current. Very large lists consume RAM, so check the available memory of your device first.
banIP (recommended)
- Install the package:
opkg update && opkg install banip luci-app-banip - Open LuCI → Services → banIP → Feeds and add a custom feed with the URL below.
- Enable the feed and click Save & Apply.
https://github.com/elliotwutingfeng/SyncthingRelayServerIPs/blob/main/ips.txt?raw=1 Manual with nftables
wget -qO /tmp/blocklist.txt "https://github.com/elliotwutingfeng/SyncthingRelayServerIPs/blob/main/ips.txt?raw=1"
nft add set inet fw4 blocklist { type ipv4_addr; flags interval; }
nft -f - <<EOF
$(awk '!/^[#;]/ && NF {print "add element inet fw4 blocklist { " $1 " }"}' /tmp/blocklist.txt)
EOF
nft add rule inet fw4 forward ip saddr @blocklist drop ipset create blocklist hash:net -exist
curl -fsSL "https://github.com/elliotwutingfeng/SyncthingRelayServerIPs/blob/main/ips.txt?raw=1" | grep -Eo '^[0-9]{1,3}(.[0-9]{1,3}){3}(/[0-9]{1,2})?' |
while read -r net; do ipset add blocklist "$net" -exist; done
iptables -I INPUT -m set --match-set blocklist src -j DROP
iptables -I FORWARD -m set --match-set blocklist src -j DROP Persist the set and re-run the download from cron to keep it current:
ipset save blocklist -f /etc/ipset.blocklist
# /etc/cron.daily/blocklist
Add the list as an ipset in /etc/firehol/firehol.conf:
ipset4 create blocklist hash:net
ipset4 addfile blocklist "https://github.com/elliotwutingfeng/SyncthingRelayServerIPs/blob/main/ips.txt?raw=1"
blacklist4 full inface any src ipset:blocklist Reload with firehol try and confirm before making it permanent.
- Go to Firewall → Aliases and click +.
- Choose type URL Table (IPs), set a refresh interval (for example 1 day) and paste the URL below.
- Save and apply, then use the alias as source in a block rule under Firewall → Rules.
https://github.com/elliotwutingfeng/SyncthingRelayServerIPs/blob/main/ips.txt?raw=1 - Go to Firewall → pfBlockerNG → IP → IPv4 and click Add.
- Paste the URL below as source, set State to ON and pick the action (Deny Both is the usual choice).
- Save, then run Update → Force Reload → IP.
https://github.com/elliotwutingfeng/SyncthingRelayServerIPs/blob/main/ips.txt?raw=1 curl -fsSL "https://github.com/elliotwutingfeng/SyncthingRelayServerIPs/blob/main/ips.txt?raw=1" -o /var/lib/suricata/data/blocklist.txt Reference the file from a rule using a dataset:
alert ip [!$HOME_NET] any -> $HOME_NET any (msg:"Syncthing Relay Server IPs match";
ip.src; dataset:isset,blocklist, type string, load blocklist.txt; sid:1000001;) Letzte Änderungen
Kürzlich hinzugefügte Einträge
- 2.59.161.128
- 5.161.29.21
- 5.175.184.198
- 23.81.34.52
- 23.82.125.190
- 23.94.216.136
- 23.137.105.248
- 23.186.104.118
- 31.56.7.161
- 31.57.56.123
- 38.43.93.33
- 45.10.39.16
- 45.39.241.246
- 45.45.217.232
- 45.81.253.72
- 45.95.169.21
- 45.133.73.191
- 46.17.44.43
- 46.29.160.3
- 46.34.3.6
- 50.71.88.154
- 51.158.147.92
- 64.44.168.91
- 64.235.43.104
- 74.208.9.209
Kürzlich entfernte Einträge
- 5.181.177.223
- 8.137.144.124
- 24.134.30.65
- 31.58.214.31
- 31.59.129.158
- 31.216.119.87
- 37.187.131.168
- 37.187.254.58
- 37.223.37.147
- 38.7.145.71
- 38.15.42.226
- 45.139.163.26
- 45.139.163.86
- 45.153.72.137
- 46.23.96.229
- 46.175.27.130
- 47.197.128.198
- 64.176.72.87
- 65.108.156.90
- 79.101.93.54
- 80.211.136.87
- 81.168.83.107
- 81.187.90.2
- 83.228.219.181
- 85.121.237.6
