cscli postoverflows install crowdsecurity/cdn-qc-whitelsit
Postoverflow whitelist for QUIC CDN
Since this postoveflow only relies on the overflown IP address this postoverflow can be installed without any dependencies`
1name: crowdsecurity/quic-cdn-whitelist2description: "Whitelist CDN provider QUIC.cloud"3whitelist:4 reason: "CDN provider QUIC.cloud"5 expression:6 - "evt.Overflow.Alert.Source.IP in File('quic_cloud_ips.txt')"78data:9 - source_url: https://www.quic.cloud/ips?ln10 dest_file: quic_cloud_ips.txt11 type: string1213