readme files

2026-04-02 07:38:51 +03:00 · 2026-03-26 10:34:02 +01:00
parent 17d64070c6
commit 3922acb075
14 changed files with 1136 additions and 50 deletions
--- a/blacklists_nftables/blacklist-vk.nft
+++ b/blacklists_nftables/blacklist-vk.nft
@@ -0,0 +1,125 @@
+# Autogenerated nftables blacklist
+# Generated: 2026-03-26T09:30:12.514657Z
+# Source: /Users/oleg/DocsOS/C24Be/AS_Network_List/blacklists/blacklist-vk.txt
+# IPv4: 86, IPv6: 1
+#
+# Usage:
+#   sudo nft -f <this-file>
+#   # VK egress blocking for VPN clients via NAT/FORWARD
+#   sudo nft add chain inet filter forward '{ type filter hook forward priority 0; policy accept; }'
+#   sudo nft add rule inet filter forward iifname "<VPN_IFACE>" ip daddr @blacklist_vk_v4 counter reject
+#   sudo nft add rule inet filter forward iifname "<VPN_IFACE>" ip6 daddr @blacklist_vk_v6 counter reject
+
+table inet filter {
+
+    set blacklist_vk_v4 {
+        type ipv4_addr
+        flags interval
+        elements = {
+            5.61.16.0/21,
+            5.61.232.0/21,
+            5.101.40.0/22,
+            5.181.60.0/22,
+            5.188.140.0/22,
+            37.139.32.0/22,
+            37.139.40.0/22,
+            45.84.128.0/22,
+            45.136.20.0/22,
+            62.217.160.0/20,
+            79.137.132.0/24,
+            79.137.139.0/24,
+            79.137.157.0/24,
+            79.137.164.0/24,
+            79.137.167.0/24,
+            79.137.174.0/23,
+            79.137.180.0/24,
+            79.137.240.0/21,
+            83.166.232.0/21,
+            83.166.248.0/21,
+            83.217.216.0/22,
+            83.222.28.0/22,
+            84.23.52.0/22,
+            85.114.31.108/30,
+            85.192.32.0/22,
+            85.198.106.0/23,
+            87.239.104.0/21,
+            87.240.128.0/18,
+            87.242.112.0/22,
+            89.208.84.0/22,
+            89.208.196.0/22,
+            89.208.208.0/22,
+            89.208.216.0/21,
+            89.208.228.0/22,
+            89.221.228.0/22,
+            89.221.232.0/21,
+            90.156.148.0/22,
+            90.156.212.0/22,
+            90.156.216.0/22,
+            90.156.232.0/21,
+            91.231.132.0/22,
+            91.237.76.0/24,
+            93.153.255.84/30,
+            93.186.224.0/20,
+            94.100.176.0/20,
+            94.139.244.0/22,
+            95.142.192.0/20,
+            95.163.32.0/19,
+            95.163.180.0/22,
+            95.163.208.0/21,
+            95.163.216.0/22,
+            95.163.248.0/21,
+            95.213.0.0/17,
+            109.120.180.0/22,
+            109.120.188.0/22,
+            128.140.168.0/21,
+            130.49.224.0/19,
+            146.185.208.0/22,
+            146.185.240.0/22,
+            155.212.192.0/20,
+            176.112.168.0/21,
+            178.22.88.0/21,
+            178.237.16.0/20,
+            185.5.136.0/22,
+            185.6.244.0/22,
+            185.16.148.0/22,
+            185.16.244.0/22,
+            185.29.128.0/22,
+            185.32.248.0/22,
+            185.86.144.0/22,
+            185.100.104.0/22,
+            185.130.112.0/22,
+            185.131.68.0/22,
+            185.180.200.0/22,
+            185.187.63.0/24,
+            185.226.52.0/22,
+            185.241.192.0/22,
+            188.93.56.0/21,
+            193.203.40.0/22,
+            194.84.16.12/30,
+            195.211.20.0/22,
+            213.219.212.0/22,
+            217.16.16.0/20,
+            217.20.144.0/20,
+            217.69.128.0/20,
+            217.174.188.0/23
+        }
+    }
+
+    set blacklist_vk_v6 {
+        type ipv6_addr
+        flags interval
+        elements = {
+            2a00:bdc0::/29
+        }
+    }
+
+    chain input {
+        type filter hook input priority 0;
+        policy accept;
+
+        ct state { established, related } accept
+
+        ip saddr @blacklist_vk_v4 counter drop
+        ip6 saddr @blacklist_vk_v6 counter drop
+    }
+}