NAME¶

nbox-export-address-list - Emit a firewall/blocklist address list — the CIDRs of IPs assigned in a prefix, or the IPs *and* prefixes carrying a tag. Host IPs render as `/32` (`/128`); `--summarize` aggregates contiguous entries into the minimal covering set. Default output is a JSON array of CIDR strings; `--format plain` is newline-delimited for ipset/nftables/pf includes

SYNOPSIS¶

nbox export address-list [--prefix] [--tag] [--vrf] [--family] [--summarize] [--format] [-h|--help]

DESCRIPTION¶

Emit a firewall/blocklist address list — the CIDRs of IPs assigned in a prefix, or the IPs *and* prefixes carrying a tag. Host IPs render as `/32` (`/128`); `--summarize` aggregates contiguous entries into the minimal covering set. Default output is a JSON array of CIDR strings; `--format plain` is newline-delimited for ipset/nftables/pf includes

OPTIONS¶

--prefix <CIDR>

Source prefix in CIDR notation: its assigned IPs become host entries. Mutually exclusive with `--tag`

--tag <SLUG>

Source tag slug (or name): IPs and prefixes carrying this tag become entries. Mutually exclusive with `--prefix`

--vrf <VRF>

Disambiguate the prefix by VRF (name, slug, or RD) when the CIDR exists in more than one VRF. Ignored with `--tag`

--family <4|6>

Keep only one IP family: `4` (IPv4) or `6` (IPv6). Both by default

--summarize

Aggregate the result into the minimal set of covering networks (contiguous entries collapse, e.g. two /25s → one /24)

--format <FORMAT> [default: json]

Output format: `json` (a JSON array of CIDR strings, default) or `plain` (one CIDR per line)

Possible values:

-h, --help

Print help (see a summary with '-h')