On Wed, May 09, 2018 at 04:52:27PM -0400, Alex Balashov wrote:
How would you define "foes" in a programmatic sense? :) That will dictate the answer.
A serious answer would be honeypots with the only function to populate blacklists (either for the permissions module or firewall rules). Just make sure there ins't an obvious relation between your production machines and honeypots if you use UDP traffic without challenge/reponse answers to blacklist :)