rezo/updateBogons
30
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Update readme

Browse source
This commit is contained in:
Thomas Chevalier 2022-05-12 09:47:23 +02:00
parent 17e4ff1310
commit 4fc5d2aaa0
1 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
README.md
View file

@ -3,3 +3,11 @@
This script fetches a list of bogons from team cymru (see https://team-cymru.com/community-services/bogon-reference/) and updates the corresponding sets in the firewall.
The bogon list is downloaded then compared to the current list stored on the disk (got from the previous run). If the two list differ the corresponding nftables set is flushed then filled with the new list. This operation is atomic.
## Installation
This script need root privileges. The included systemd service files assume that a group "nftables" exists and has the right to execute the command `nft` without password.
The default working directory is `/var/cache/updateBogons/` and is automatically created if it does not exist.