talosintelligence This happens
-
https://talosintelligence.com/documents/ip-blacklist
ERROR 404
SORRY, THIS PAGE DOES NOT EXIST. WE WERE OUT HUNTING BAD GUYS AND MUST HAVE MISSED UPDATING THIS LINK SOMEWHERE. OR YOU MISTYPED.
Anyone know the correct url?
-
@Waqar-UK I think it moved here
https://snort.org/downloads/ip-block-list/terms
I believe this is the cisco talos list, or a sample of it - you have to accept the terms and then you get shown the list.
-
@Waqar-UK You can accept the terms, download the list to a file and put in
/var/db/pfblockerng
Then change the path in pfBlockerNG to
/var/db/pfblockerng/<whatever you called the file>
And then run a reload.
It won't update automatically, but you will have whatever's current. -
Thanks to all, how do I put that list into my webgui?
-
@Waqar-UK Go into Firewall | pfBlockerNG| I P | IPv4, edit the list and find the Talos entry. Change the
https://talosintelligence.com/documents/ip-blacklist
line to
/var/db/pfblockerng/<whatever you called the file>
You can use something like WinSCP to move your downloaded file to /var/db/pfblockerng/ if using Windows.
-
@Waqar-UK I would just copy paste into custom