How poddmo/ufw-blocklist works
ufw-blocklist is a small Ubuntu firewall extension: UFW lifecycle commands manage kernel blocklist rules, while a daily job refreshes the IPsum list. The documented operational path is UFW start/reload, with the blocklist applied to inbound, outbound, and forwarded traffic; administrators can also inspect status or flush the set. The README documents the update source and scheduling, but no source excerpts were provided, so implementation-level calls and the role of after.init_run-parts are not inferred.
Main entry points: after.init UFW hook · ufw-blocklist-ipsum IPsum updater
Components 11
UFW lifecycle
- UFW hook
after.init - Run-parts hook
after.init_run-parts
Blocklist refresh
- IPsum updater
ufw-blocklist-ipsum
Packet filtering
- Kernel ipset
- UFW firewall rules
after.init - System logs
Other components
- Administrator
- UFW
- Daily scheduler
- IPsum list
- Network packets
Connections 12
- UFW → UFW hook: starts / reloads
- Administrator → UFW hook: requests status / flush
- Daily scheduler → IPsum updater: runs daily
- IPsum updater → IPsum list: downloads list
- IPsum updater → Kernel ipset: refreshes entries
- UFW hook → Kernel ipset: manages set
- UFW hook → UFW firewall rules: installs rules
- Network packets → UFW firewall rules: matches packets
- UFW firewall rules → Kernel ipset: matches addresses
- UFW firewall rules → System logs: logs selected drops
- Administrator → Kernel ipset: manually adds IPs
- UFW hook → Kernel ipset: reports status / flushes