Creating a Blacklist

The aim of this lab is to create a blacklist with firewalld. A blacklist can be populated with any set of IP addresses that are either downloaded from the Internet, custom-created by you, or a combination of both. When populating a blacklist of your own, you can do it by gradually adding a certain number of IP addresses over a period of time and expanding the list that way. You need to examine the log files first, see which IP addresses have been making requests, and investigate these requests. If the requests seem malicious or if, for some reason, you do not want a particular IP address to send you any requests, all you have to do is add that IP address to the blacklist. Eventually, you will notice that the number of malicious requests will decrease, though they will never completely stop.