15 lines
319 B
YAML
15 lines
319 B
YAML
name: crowdsecurity/whitelists
|
|
description: "Whitelist events from private ipv4 addresses"
|
|
whitelist:
|
|
reason: "private ipv4/ipv6 ip/ranges"
|
|
ip:
|
|
- "127.0.0.1"
|
|
- "::1"
|
|
cidr:
|
|
- "192.168.0.0/16"
|
|
- "10.0.0.0/8"
|
|
- "172.16.0.0/12"
|
|
# expression:
|
|
# - "'foo.com' in evt.Meta.source_ip.reverse"
|
|
|