{"repo":"trick77/nftables-blacklist","free":true,"listed":false,"github":"https://github.com/trick77/nftables-blacklist","clone":"git clone https://github.com/trick77/nftables-blacklist.git","description":"A bash script to ban large numbers of IP addresses published in blacklists.","language":"Shell","stars":764,"topics":["blacklist","shell","ipset"],"license":"MIT","category":"cli-tools","readme_excerpt":"nftables-blacklist (formerly ipset-blacklist) 📢 Freshly defrosted from the GitHub Arctic Code Vault and upgraded from iptables to nftables. Yes, the nftables syntax is... an acquired taste. But I finally bow to the netfilter overlords. Early stage - expect bugs. A Bash script that automatically downloads public IP blacklists and blocks them using nftables to keep script kiddies, botnets, and other unwanted traffic off your Linux server. Supports IPv4, IPv6, and CIDR aggregation with built-in whitelisting, cron scheduling, and automatic server IP detection. Tip: Use lens.ipverse.net to look up the ASN, owner, and network ranges of an IP — useful for picking ASNs/countries to block or for figuring out who a dropped IP belongs to. Table of Contents - Features - Requirements - Quick Start (Debian/Ubuntu) - Persistence Across Reboots - Automatic Updates (Systemd Timer) - Check Dropped Packets - Configuration Options - Customizing Blacklists - Whitelist (Prevent Self-Blocking) - Manual Whitelist - External whitelist files - Auto-Detect Server IPs - Dry Run Mode - Cron Mode - Troubleshooting - Migrating from the old ipset/iptables version - Uninstall - Contributing Features - Uses nftables instead of the deprecated iptables/ipset combo - IPv4 and IPv6, including CIDR notation - Overlapping ranges are merged automatically (e.g., two /24s become one /23) - Atomic updates — the blacklist is swapped in one transaction - Handles 100k+ blocked IPs without breaking a sweat - Auto-whitelis","default_branch":null,"files":null,"tree":[],"storefront":"/r/trick77","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/trick77/nftables-blacklist/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}