Crowdsec blocklists IP

[gplatret]

Hello,

How to integrate a list of dynamic IPs to prohibit (List Crowdsec).
Sincerely

[alemabrahao]

I don't know if you'll be able to do this in MX, but if possible, it might be something similar to what's in the link below.

crowdsec.net/blog/integrating-crowdsec-with-firewall-appliances

[PhilipDAth]

If I was trying to do this, I think I would write a script to pull the list, and then update a group policy object, and then have a single L3 rule configured to block that.

You could also instead consider having it populate L7 firewall rules, as that blocks in both directions.

[PhilipDAth]

Going sideways - it would be so much easier to use the Meraki content filtering system - powered by Talos - and just block the dynamic threat categories.