1name: crowdsecurity/whitelists
2description: "Whitelist events from private ipv4 addresses"
3whitelist:
4  reason: "private ipv4/ipv6 ip/ranges"
5  ip: 
6    - "::1"
7  cidr:
8    - "127.0.0.0/8"
9    - "192.168.0.0/16"
10    - "10.0.0.0/8"
11    - "172.16.0.0/12"
12  # expression:
13  #   - "'foo.com' in evt.Meta.source_ip.reverse" 
14
15