Create notes.md

2025-06-11 05:26:42 +01:00
parent cb88473b0e
commit 00a9e100d7
1 changed files with 12 additions and 0 deletions
--- a/notes.md
+++ b/notes.md
@@ -0,0 +1,12 @@
+## Whitelist by AS Number
+[Redit post source](https://www.reddit.com/r/CrowdSec/comments/1l7a5x6/comment/mwv6z0t/)
+```
+#/etc/crowdsec/postoverflows/s01-whitelist/asn-whitelist.yaml
+name: zz-whitelist-ASN
+description: Whitelist some ASN
+#debug: true
+whitelist:
+  reason: Whitelisted ASN
+  expression:
+    - evt.Overflow.Alert.GetScenario() == 'LePresidente/http-generic-403-bf' && Lower(evt.Overflow.Alert.Source.AsName) contains 'vodafone'
+```