I think that’s generally about right
I’ll note that IPS blocks do seem to pop up when streaming the logs as well. For example:
ips: run "iptables -D ips -s 192.168.5.13 -d 184.25.113.187 -j DROP"
Otherwise I’ll say that I do think it would be handy to see what’s being filtered by the new Block Lists functionality, as I don’t think there’s a way to right now.
There is also a help document going into some detail about what block lists are being offered. I kinda gathered that the Bad Actors list would be a good option to choose unless someone has a specific reason to use one of the other lists.
https://help.alta.inc/hc/en-us/articles/26752633214235-Content-Filtering
@Alta-cmb goes into some detail on the lists here as well: