Filter list from the public FilterLists directory. Format: CIDRs (IPv6). See the project homepage for details and inclusion criteria.
Blocklists for iptables / ipset
Classic Linux firewall setup: load the addresses into an ipset and drop matching traffic.
Adding a blocklist to iptables / ipset
ipset create blocklist hash:net -exist
curl -fsSL "https://www.team-cymru.org/Services/Bogons/fullbogons-ipv6.txt" | grep -Eo '^[0-9]{1,3}(.[0-9]{1,3}){3}(/[0-9]{1,2})?' |
while read -r net; do ipset add blocklist "$net" -exist; done
iptables -I INPUT -m set --match-set blocklist src -j DROP
iptables -I FORWARD -m set --match-set blocklist src -j DROP Persist the set and re-run the download from cron to keep it current:
ipset save blocklist -f /etc/ipset.blocklist
# /etc/cron.daily/blocklist
The address shown above is an example. Every list in the directory has its own URL, which you can copy with one click.
Recommended lists for iptables / ipset
By topic
All 135 lists for iptables / ipset
Filter list from the public FilterLists directory. Format: CIDRs (IPv6). See the project homepage for details and inclusion criteria.
The Hosts File Project IPs
Filter list covering ads, privacy. Format: IPs (IPv4). Maintained by Andy Short. See the project homepage for details and inclusion […]
Filter list covering phishing. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
Threat Sourcing IP Addresses
Filter list covering malware. Format: IPs (IPv4). Maintained by Threat Sourcing. See the project homepage for details and inclusion criteria.
Filter list from the public FilterLists directory. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
The official list of Tor exit nodes, maintained by the Tor Project.
Filter list covering proxy. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
Filter list covering proxy. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
Every Tor node, not only the exits.
Filter list covering phishing. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
Ultimate Hosts Blacklist (IPs)
Filter list covering privacy. Format: IPs (IPv4). Maintained by mitchellkrogza. See the project homepage for details and inclusion criteria.
urlhaus-filter (dnscrypt-proxy IPs)
Filter list covering malware. Format: IPs (IPv4). Maintained by Ming Di Leom. See the project homepage for details and inclusion […]
Filter list covering malware. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
Filter list covering ads, privacy, malware. Format: DNS servers. See the project homepage for details and inclusion criteria.
Address ranges of well known commercial VPN providers.
