From 5cf23c7b7dd73e037bb1335ae9af6f579c49eda4 Mon Sep 17 00:00:00 2001
From: Georgiy Sitnikov <GAS85@users.noreply.github.com>
Date: Thu, 23 Oct 2025 10:18:50 +0200
Subject: [PATCH] Add Filter IP Black list

---
 config/filter.d/filter-ip-blacklist.conf | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100644 config/filter.d/filter-ip-blacklist.conf

diff --git a/config/filter.d/filter-ip-blacklist.conf b/config/filter.d/filter-ip-blacklist.conf
new file mode 100644
index 00000000..506ed2d5
--- /dev/null
+++ b/config/filter.d/filter-ip-blacklist.conf
@@ -0,0 +1,15 @@
+[Definition]
+ 
+# Option:  failregex
+# Notes :  Detection of blocked ip addresses.
+# Values:  TEXT
+#
+ 
+failregex = ^(?P<ip4>\d{1,3}(?:\.\d{1,3}){3}/\d{1,2})\s+
+
+# Option:  ignoreregex
+# Notes :  Regex to ignore.
+# Values:  TEXT
+#
+ 
+ignoreregex =