1name: crowdsecurity/public-dns-allowlist
2description: "Allow events from public DNS servers"
3whitelist:
4  reason: "public DNS server"
5  ip:
6    # cloudflare
7    - 1.1.1.1
8    - 1.0.0.1
9    - "2606:4700:4700::1111"
10    - "2606:4700:4700::1001"
11    # google
12    - 8.8.8.8
13    - 8.8.4.4
14    - "2001:4860:4860::8888"
15    - "2001:4860:4860::8844"
16    #quad9
17    - 9.9.9.9
18    - 149.112.112.112
19    - "2620:fe::fe"
20    - "2620:fe::9"
21    - 9.9.9.11
22    - 149.112.112.11
23    - "2620:fe::11"
24    - "2620:fe::fe:11"
25    - 9.9.9.10
26    - 149.112.112.10
27    - "2620:fe::10"
28    - "2620:fe::fe:10"
29    # cleanbrowsing
30    - 185.228.168.168
31    - 185.228.169.168
32    - "2a0d:2a00:1::"
33    - "2a0d:2a00:2::"
34    # alternate DNS
35    - 76.76.19.19
36    - 76.223.122.150
37    - "2602:fcbc::ad"
38    - "2602:fcbc:2::ad"
39    # adguard
40    - 94.140.14.14
41    - 94.140.15.15
42    - 94.140.14.140
43    - 94.140.14.141
44    - 94.140.14.15
45    - 94.140.15.16
46    - "2a10:50c0::ad1:ff"
47    - "2a10:50c0::ad2:ff"
48    - "2a10:50c0::1:ff"
49    - "2a10:50c0::2:ff"
50    - "2a10:50c0::bad1:ff"
51    - "2a10:50c0::bad2:ff"
52    # OpenDNS
53    - 208.67.222.222
54    - 208.67.220.220
55    - 208.67.222.123
56    - 208.67.220.123
57    - 208.67.220.2
58    - 208.67.222.2
59    - "2620:119:35::35"
60    - "2620:119:53::53"
61    - "2620:119:35::123"
62    - "2620:119:53::123"
63    - "2620:0:ccd::2"
64    - "2620:0:ccc::2"
65  cidr:
66    # control D
67    - 76.76.2.0/24
68    - 76.76.10.0/24
69    - "2606:1a40::/48"
70    - "2606:1a40:1::/48"
71