Update Security_Containers/crowdsec/postoverflows/s01-whitelist/geoip-allow.yaml

2026-05-15 02:56:21 +00:00
parent 9500fb5b9e
commit dbea3dcf05
1 changed files with 0 additions and 0 deletions
@@ -0,0 +1,7 @@
+name: crowdsecurity/geoip-allow-us-de
+description: "Block all countries except US and Germany"
+filter: "evt.Enriched.IsoCode != 'US' && evt.Enriched.IsoCode != 'DE'"
+blackhole: 1m
+labels:
+  type: geo_block
+remediation: true