Post #3718070
2026-05-29 04:44 UTC
@benjojo@benjojo.co.uk how would you drop an entire AS? nftables level, or in the webserver?
I actually whois'd a cloudflare AS once to generate a filter for nginx, but I wonder whether there's a more effective option.
Replies (1)
-
@darkcat09@gts.dc09.xyz 2026-07-09 14:43
@uvok@woof.tech @benjojo@benjojo.co.uk I wrote a simple utility to build and update nftables IP sets from ASNs: https://git.dc09.xyz/DarkCat09/nftables-asn (Yea, sorry for replying to a 1+ month old thread that i found accidentally, but just in case you still need a solution.)