# CrowdSec Whitelist for Private IP Ranges
# Prevents blocking of internal network addresses (RFC1918)
# These IPs should never be banned as they are local network devices

name: secubox/private-ip-whitelist
description: "Whitelist private/internal IP ranges to prevent self-blocking"
whitelist:
  reason: "Private IP addresses (RFC1918) - local network devices"
  ip:
    - "127.0.0.0/8"      # Localhost
    - "10.0.0.0/8"       # Class A private
    - "172.16.0.0/12"    # Class B private
    - "192.168.0.0/16"   # Class C private
    - "169.254.0.0/16"   # Link-local
    - "::1/128"          # IPv6 localhost
    - "fe80::/10"        # IPv6 link-local
    - "fc00::/7"         # IPv6 unique local