From 610f41c6983036ca82feb1d17c3b8a9f260cf335 Mon Sep 17 00:00:00 2001 From: Georgiy Sitnikov Date: Thu, 23 Oct 2025 10:34:40 +0200 Subject: [PATCH] Update filter-ip-blacklist.conf with examples Added examples and instructions for IP blacklisting. --- config/filter.d/filter-ip-blacklist.conf | 30 ++++++++++++++++++++++++ 1 file changed, 30 insertions(+) diff --git a/config/filter.d/filter-ip-blacklist.conf b/config/filter.d/filter-ip-blacklist.conf index 506ed2d5..3c0e71db 100644 --- a/config/filter.d/filter-ip-blacklist.conf +++ b/config/filter.d/filter-ip-blacklist.conf @@ -13,3 +13,33 @@ failregex = ^(?P\d{1,3}(?:\.\d{1,3}){3}/\d{1,2})\s+ # ignoreregex = + +datepattern = ^\[?ExYear(?P<_sep>[-/.])Month(?P=_sep)Day(?:T| ?)24hour:Minute:Second + +######################################## +# +# Single IP Example: +# 10.10.10.10 +# 10.10.10.10 [2015-01-01 12:00:00] +# 10.10.10.10/32 [2015-01-01 12:00:00] +# +######################################### +# +# IP Range Options: +# 10.10.10.10/32 = 10.10.10.10 +# 10.10.10.10/24 = 10.10.10.* +# 10.10.10.10/16 = 10.10.*.* +# 10.10.10.10/8 = 10.*.*.* +# +######################################### +# +# IP Range Examples: +# 10.10.10.10/16 [2015-01-01 12:00:00] +# 10.10.10.10/24 [2015-01-01 12:00:00] +# +######################################### +# +# You can use following command to add ips: +# echo "10.10.10.10/8 [$(date +"%Y-%m-%d %H:%M:%S")]" >> /var/log/ip-blacklist.log +# +#########################################