Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    talosintelligence This happens

    Scheduled Pinned Locked Moved pfBlockerNG
    6 Posts 3 Posters 986 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • W
      Waqar.UK
      last edited by

      https://talosintelligence.com/documents/ip-blacklist

      ERROR 404

                           SORRY, THIS PAGE DOES NOT EXIST.
                           WE WERE OUT HUNTING BAD GUYS AND MUST HAVE MISSED UPDATING THIS LINK SOMEWHERE.
                           OR YOU MISTYPED.
      

      Anyone know the correct url?

      johnpozJ provelsP 2 Replies Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator @Waqar.UK
        last edited by

        @Waqar-UK I think it moved here

        https://snort.org/downloads/ip-block-list/terms

        I believe this is the cisco talos list, or a sample of it - you have to accept the terms and then you get shown the list.

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 1
        • provelsP
          provels @Waqar.UK
          last edited by

          @Waqar-UK You can accept the terms, download the list to a file and put in

          /var/db/pfblockerng
          

          Then change the path in pfBlockerNG to

          /var/db/pfblockerng/<whatever you called the file>
          

          And then run a reload.
          It won't update automatically, but you will have whatever's current.

          Peder

          MAIN - pfSense+ 24.11-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD. 500 GB HDD for SyslogNG
          BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

          1 Reply Last reply Reply Quote 1
          • W
            Waqar.UK
            last edited by Waqar.UK

            Thanks to all, how do I put that list into my webgui?

            provelsP johnpozJ 2 Replies Last reply Reply Quote 0
            • provelsP
              provels @Waqar.UK
              last edited by

              @Waqar-UK Go into Firewall | pfBlockerNG| I P | IPv4, edit the list and find the Talos entry. Change the

              https://talosintelligence.com/documents/ip-blacklist 
              

              line to

              /var/db/pfblockerng/<whatever you called the file>
              

              You can use something like WinSCP to move your downloaded file to /var/db/pfblockerng/ if using Windows.

              Peder

              MAIN - pfSense+ 24.11-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD. 500 GB HDD for SyslogNG
              BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

              1 Reply Last reply Reply Quote 1
              • johnpozJ
                johnpoz LAYER 8 Global Moderator @Waqar.UK
                last edited by

                @Waqar-UK I would just copy paste into custom

                custom.jpg

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 2
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.