{"id":4845,"date":"2023-11-20T19:00:49","date_gmt":"2023-11-20T19:00:49","guid":{"rendered":"https:\/\/netguide.io\/linux\/synology-nas-automatisch-ip-blocklisten-importieren\/"},"modified":"2026-08-10T15:49:06","modified_gmt":"2026-08-10T15:49:06","slug":"synology-nas-automatisch-ip-blocklisten-importieren","status":"publish","type":"post","link":"https:\/\/netguide.io\/linux\/de\/synology-nas-automatisch-ip-blocklisten-importieren\/","title":{"rendered":"Synology NAS: IP-Blocklisten automatisch importieren"},"content":{"rendered":"<script type=\"text\/plain\" data-tcf=\"waiting-for-consent\" data-id=\"4797\" data-bid=\"2\" data-placement=\"4798\">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<\/script>\n<p class=\"wp-block-paragraph\">Jede Synology verf\u00fcgt \u00fcber eine interne Firewall, die IP-Adressen nach zu vielen fehlgeschlagenen Logins sperrt. Noch besser ist es, Angreifer <strong>gar nicht erst bis zum Login-Screen<\/strong> kommen zu lassen. Mit einem Script importierst du automatisch aktuelle <strong>IP-Blocklisten<\/strong> in die Synology-Firewall und blockst bekannte b\u00f6sartige Adressen pr\u00e4ventiv.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">IP-Blocklist automatisch per Script importieren<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Das Script ruft die Listen von <em>blocklist.de<\/em> ab und spielt sie automatisch in die Blockierliste des DSM ein. Es stammt aus dem Synology-Forum und ist quelloffen auf GitHub verf\u00fcgbar:<\/p>\n\n\n\n<div class=\"wp-block-buttons is-content-justification-center is-layout-flex wp-container-core-buttons-is-layout-3e41869c wp-block-buttons-is-layout-flex\"><div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/github.com\/geimist\/Update_Blocklist\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Script auf GitHub<\/a><\/div><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Kopiere das Script in einen Ordner auf dem NAS \u2013 z.&nbsp;B. einen <em>Scripte<\/em>-Ordner im Home-Share deines Admin-Accounts.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Sicherheitstipp:<\/strong> Nutze das Administrator-Konto nur f\u00fcr administrative Aufgaben. F\u00fcr den Alltag (Apps, Netzwerkfreigaben) sollte ein separates Konto mit eingeschr\u00e4nkten Rechten verwendet werden.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Geplante Aufgabe im Aufgabenplaner anlegen<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Damit die Listen aktuell bleiben, richtest du eine geplante Aufgabe ein: <strong>Systemsteuerung \u2192 Aufgabenplaner \u2192 Erstellen \u2192 Geplante Aufgabe \u2192 Benutzerdefiniertes Script<\/strong>.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" src=\"https:\/\/netguide.io\/linux\/wp-content\/uploads\/sites\/2\/2026\/08\/Screenshot-2023-11-20-183227.png\" alt=\"Synology Aufgabenplaner: benutzerdefiniertes Script anlegen\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Lege als Zeitplan <strong>alle 10 Minuten<\/strong> fest, damit stets die aktuellsten IP-Adressen blockiert werden.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" src=\"https:\/\/netguide.io\/linux\/wp-content\/uploads\/sites\/2\/2026\/08\/synology-aufgabe-zeitplan.png\" alt=\"Zeitplan der geplanten Aufgabe: alle 10 Minuten\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Trage im Skript-Feld folgende Befehle ein (Pfad an deinen Ordner anpassen):<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:block;padding:16px 0 0 16px;margin-bottom:-1px;width:100%;text-align:left;background-color:#24292e\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"54\" height=\"14\" viewBox=\"0 0 54 14\"><g fill=\"none\" fill-rule=\"evenodd\" transform=\"translate(1 1)\"><circle cx=\"6\" cy=\"6\" r=\"6\" fill=\"#FF5F56\" stroke=\"#E0443E\" stroke-width=\".5\"><\/circle><circle cx=\"26\" cy=\"6\" r=\"6\" fill=\"#FFBD2E\" stroke=\"#DEA123\" stroke-width=\".5\"><\/circle><circle cx=\"46\" cy=\"6\" r=\"6\" fill=\"#27C93F\" stroke=\"#1AAB29\" stroke-width=\".5\"><\/circle><\/g><\/svg><\/span><span role=\"button\" tabindex=\"0\" style=\"color:#e1e4e8;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>curl -sfL https:\/\/get.k3s.io | INSTALL_K3S_EXEC=\"--disable traefik --disable servicelb\" K3S_KUBECONFIG_MODE=\"644\" sh -s -\n<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki github-dark\" style=\"background-color: #24292e\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #E1E4E8\">chmod +x &quot;\/volume1\/homes\/DEIN-ADMIN\/Scripte\/update_blocklist.sh&quot;<\/span><\/span>\n<span class=\"line\"><span style=\"color: #E1E4E8\">&quot;\/volume1\/homes\/DEIN-ADMIN\/Scripte\/update_blocklist.sh&quot;<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Die erste Zeile macht das Script ausf\u00fchrbar, die zweite ruft es auf. Der erste Lauf dauert etwas l\u00e4nger, danach geht es deutlich schneller.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" src=\"https:\/\/netguide.io\/linux\/wp-content\/uploads\/sites\/2\/2026\/08\/synology-firewall-automatische-blockliste-import.png\" alt=\"Synology-Firewall mit automatisch importierter Blockliste\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">An der Anzahl der blockierten IP-Adressen erkennst du, dass der Import funktioniert hat. Das Ganze ist <strong>eine von mehreren Sicherheitsschichten<\/strong> \u2013 idealerweise erg\u00e4nzt durch eine vorgelagerte Firewall im Netzwerk.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Passend dazu<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/netguide.io\/linux\/de\/synology-einkommende-icmp-pings-in-der-firewall-erlauben\/\">Synology: ICMP-Pings in der Firewall erlauben<\/a><\/li><li><a href=\"https:\/\/netguide.io\/network\/de\/tailscale-synology-fernzugriffe-auf-synology-nas-ohne-portfreigabe\/\">Tailscale Synology: Fernzugriff ohne Portfreigabe<\/a><\/li><\/ul>\n\n<script type=\"text\/plain\" data-tcf=\"waiting-for-consent\" data-id=\"4799\" data-bid=\"2\" data-placement=\"4800\">PGRpdiBpZD0ibmV0Z3VpZGVhLTEyODAzMzMxMTIiIGNsYXNzPSJuZXRndWlkZWEtYWZ0ZXItY29udGVudCBuZXRndWlkZWEtZW50aXR5LXBsYWNlbWVudCI+PGRpdiBjbGFzcz0ibmV0Z3VpZGVhLWFkbGFiZWwiPkFkdmVydGlzZW1lbnRzPC9kaXY+PHNjcmlwdCBhc3luYyBzcmM9Ii8vcGFnZWFkMi5nb29nbGVzeW5kaWNhdGlvbi5jb20vcGFnZWFkL2pzL2Fkc2J5Z29vZ2xlLmpzP2NsaWVudD1jYS1wdWItNjI1ODU1NjI1NzI0NTk5OCIgY3Jvc3NvcmlnaW49ImFub255bW91cyI+PC9zY3JpcHQ+PGlucyBjbGFzcz0iYWRzYnlnb29nbGUiIHN0eWxlPSJkaXNwbGF5OmJsb2NrOyIgZGF0YS1hZC1jbGllbnQ9ImNhLXB1Yi02MjU4NTU2MjU3MjQ1OTk4IiAKZGF0YS1hZC1zbG90PSI0NTU5Nzg1MDAyIiAKZGF0YS1hZC1mb3JtYXQ9ImF1dG8iPjwvaW5zPgo8c2NyaXB0PiAKKGFkc2J5Z29vZ2xlID0gd2luZG93LmFkc2J5Z29vZ2xlIHx8IFtdKS5wdXNoKHt9KTsgCjwvc2NyaXB0Pgo8L2Rpdj4=<\/script>","protected":false},"excerpt":{"rendered":"<p>Sch\u00fctze deine Synology proaktiv: Mit einem Script importierst du automatisch IP-Blocklisten in die DSM-Firewall und sperrst bekannte Angreifer-IPs.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_uag_custom_page_level_css":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[9,460],"tags":[],"class_list":["post-4845","post","type-post","status-publish","format-standard","hentry","category-linux","category-synology"],"uagb_featured_image_src":{"full":false,"thumbnail":false,"medium":false,"medium_large":false,"large":false,"1536x1536":false,"2048x2048":false},"uagb_author_info":{"display_name":"Tobias Pries","author_link":"https:\/\/netguide.io\/linux\/author\/tobias-pries\/"},"uagb_comment_info":0,"uagb_excerpt":"Sch\u00fctze deine Synology proaktiv: Mit einem Script importierst du automatisch IP-Blocklisten in die DSM-Firewall und sperrst bekannte Angreifer-IPs.","brizy_media":[],"_links":{"self":[{"href":"https:\/\/netguide.io\/linux\/wp-json\/wp\/v2\/posts\/4845","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/netguide.io\/linux\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/netguide.io\/linux\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/netguide.io\/linux\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/netguide.io\/linux\/wp-json\/wp\/v2\/comments?post=4845"}],"version-history":[{"count":1,"href":"https:\/\/netguide.io\/linux\/wp-json\/wp\/v2\/posts\/4845\/revisions"}],"predecessor-version":[{"id":4850,"href":"https:\/\/netguide.io\/linux\/wp-json\/wp\/v2\/posts\/4845\/revisions\/4850"}],"wp:attachment":[{"href":"https:\/\/netguide.io\/linux\/wp-json\/wp\/v2\/media?parent=4845"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/netguide.io\/linux\/wp-json\/wp\/v2\/categories?post=4845"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/netguide.io\/linux\/wp-json\/wp\/v2\/tags?post=4845"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}