isipsafe
OPNsense logo

OPNsense

Use the list as a URL Table alias and block it on WAN.

OPNsense aliases can be loaded from a URL and refreshed on a schedule, which is all you need to block the list at the edge.

Set it up

  1. Go to Firewall › Aliases and add an alias: Name isipsafe, Type URL Table (IPs), Refresh frequency 0 days 1 hour.
  2. In Content, enter: 
    https://isipsafe.com/api/v1/blocklist?key=sl_your_key_here&format=txt&confidenceMinimum=75
    Save and click Apply.
  3. Go to Firewall › Rules › WAN and add a rule at the top: Action Block, Direction in, Source isipsafe. Save and apply.

Check the alias has entries under Firewall › Diagnostics › Aliases. The list mixes IPv4 and IPv6 addresses; set the rule's TCP/IP Version to IPv4+IPv6.

Need a hand?

If something here does not work with your version of OPNsense, or you have improved it, tell us. We update these pages with what people send.

OPNsense and its logo are trademarks of their respective owners. isipsafe is not affiliated with or endorsed by them.