
Need help blocking malicious IPs from network
My homelab is a kubernetes cluster running on a few Dell PowerEdge servers behind a Ubiquiti EdgeRouter 6p connected to Google Fiber. Among other malicious traffic, I am specifically concerned with a large number of spam accounts being created on my Gitea instance. I have written about the steps I've taken so far to combat this in this issue. I am able to get the IP addresses of the bad actors, but I'm having trouble blocking that traffic from my network. I cannot block them from Gitea, as it is not using X-FORWARD headers to preserve client IP addresses reported by the ingress controller. I tried to write firewall rules to drop traffic from these addresses, but the traffic is still getting through. What can I do to have more control over my network traffic?