nftables

[proven] Blocks DNS queries based on whitelists (or blacklists)

Drop repeat-offending IP addresses in-kernel (netfilter)

A Rust crate for Linux Netlink Nftables client for direct control on the netfilter via netlink socket.

A rust library to create and manage nftables firewalls

[WIP] Dynamic blacklisting for goats.