location in SO - /opt/so/saltstack/local/pillar/global.sls

block range
    - no net <IP>/<CIDR>
block ipv6
    - no ip6
block host
    - no host <IP>
block port
    - no <PORT>

```
steno:
    - no 443 &&
    - no net 10.1.5.0/24 &&
    - no ip6
nid:
    - no net 10.1.5.0/24 &&
    - no host 20.1.8.2
zeek:
    - no net 10.1.5.0/24
```