Block the World: Country-Level Traffic Blocking with nftables
This post is part of a four-part series. Auto-updates close known vulnerabilities. Fail2ban blocks repeat offenders. SSH alerts and intrusion detection tell you what already happened. None of them stop the flood of connection attempts before they arrive. This post adds a layer in front of all of it: dropping