diff --git a/inventory/group_vars/download b/inventory/group_vars/download
index 95dcfcbec6..ff294454ca 100644
--- a/inventory/group_vars/download
+++ b/inventory/group_vars/download
@@ -110,4 +110,6 @@ ipa_host_group: download
 ipa_host_group_desc: Download servers
 nagios_Check_Services:
   swap: false
+nft_block_rules:
+  - 'add rule ip filter INPUT ip saddr 212.143.41.0/24 counter reject'
 primary_auth_source: ipa