Block outbound traffic

[AlteredCoder]

It would be great if we can be able to configure the bouncer to also block outbound traffic

[ne20002]

By using a set-only configuration you can create your own firewall rules including filtering of outbound connections.

[j0nny55555]

I would also like to see this... it would require an additional chain for IPTables, where instead of 'src', it was 'dst', and then we could add the "CROWDSEC_OUTPUT_CHAIN" chain as a first rule for the "OUTPUT" chain
For my setup I have a total of 6 lists that get setup so I do this manually, but it would be a great (and hopefully easy) addition to the existing config but possibly have it all disabled by default?

iptables -N CROWDSEC_OUTPUT_CHAIN
iptables -A CROWDSEC_OUTPUT_CHAIN -m set --match-set crowdsec-blocklists-5 dst -j DROP
iptables -A CROWDSEC_OUTPUT_CHAIN -m set --match-set crowdsec-blocklists-4 dst -j DROP
iptables -A CROWDSEC_OUTPUT_CHAIN -m set --match-set crowdsec-blocklists-3 dst -j DROP
iptables -A CROWDSEC_OUTPUT_CHAIN -m set --match-set crowdsec-blocklists-2 dst -j DROP
iptables -A CROWDSEC_OUTPUT_CHAIN -m set --match-set crowdsec-blocklists-1 dst -j DROP
iptables -A CROWDSEC_OUTPUT_CHAIN -m set --match-set crowdsec-blocklists-0 dst -j DROP

Then...

iptables -I OUTPUT 1 -j CROWDSEC_OUTPUT_CHAIN