shalla list off

emanuelgaio

@jdeloach informs that the list no longer exists. On their website it says that it went offline. I wanted an alternative that was good.

Gertjan

@emanuelgaio

I know some one who could help you : Google : alternative for shallalist

I didn't test any of them myself, and I wasn't use the lalalist neither.

emanuelgaio

@gertjan I asked for support for fear of putting up a bad list. In case anyone had used another one and could give an opinion. I'll try a test environment to see which one suits me. Thanks.

ENC

@emanuelgaio
I'm researching a good quality "blacklist" too, if you find any good alternatives, share if you can. I'm from Brazil, excuse the bad english.

JonathanLee

@emanuelgaio I would also like to know if there is a replacement list.

https://forum.netgate.com/topic/169408/shalla-urlblacklist-for-squidguard-service-has-been-stopped/2

emanuelgaio

@enc Good afternoon my friend.
I found this site in it has several lists, I tested the "blacklists_for_pfsense.tar.gz"
Full download link: http://dsi.ut-capitole.fr/blacklists/download/blacklists_for_pfsense.tar.gz
Hope this helps.

netblues

How do we add a new category feed then?

emanuelgaio

@netblues I don't know how to insert new category. This other list has some similar to shallist. I'm testing too.
http://dsi.ut-capitole.fr/blacklists/download/blacklists_for_dansguardian.tar.gz

ENC

@netblues In Squid: Services/Squidguard proxy filter/Target Categories/Add. Then choose a name and place the domains or links.

netblues

I was looking for the pfblockerng entry :)

sebden

Anyone else have the Squidguard running wild since using the capitole list?

After one update of the new list, the squidguard starts around 20-24 processes and the UI runs slow to almost unusable. I have 3 Boxes testet and 2 are unable to use the list. Happens with pf 2.5.2 and after update to 2.6.0 too.

Are there other trustfull lists out there for testing?

JonathanLee

@sebden someone just recommended this list

http://dsi.ut-capitole.fr/blacklists/download/blacklists_for_pfsense_reducted.tar.gz

Waqar.UK

@jonathanlee

Anyone tried this link?

JonathanLee

@waqar-uk Not me want to test it out first???? Please??? I do not want to reimage the firmware if it fails again.

Waqar.UK

@jonathanlee

I understand. Reinstalled ver 2.60 - to get a ZFS file system. Took about 10 minutes. Suricata and PfgBlocker next. So far so good.

Tried that link: got this message

Hmm. We’re having trouble finding that site.

We can’t connect to the server at dsi.ut-capitole.fr.

JonathanLee

@waqar-uk Dang The original version I used I had to reimage after it installed it broke my system. I got this link from someone else I have not tested it yet because its exam week

stephenw10

@jonathanlee said in shalla list off:

http://dsi.ut-capitole.fr/blacklists/download/blacklists_for_pfsense_reducted.tar.gz

The file downloads fine for me. I haven't tried it in Squid.

Waqar.UK

@stephenw10 said in shalla list off:

http://dsi.ut-capitole.fr/blacklists/download/blacklists_for_pfsense_reducted.tar.gz

Now it works for me. I wonder why before it did not?

Does it work in Suricata?

JonathanLee

@waqar-uk

This works!!!
I just tested this after the summer semester has been completed!!

(Image: Blacklist loading)

(Image: Blacklist Loaded)

(Image: SquidGuard Catagories restored

nimrod

@jonathanlee said in shalla list off:

@waqar-uk

This works!!!
I just tested this after the summer semester has been completed!!

(Image: Blacklist loading)

(Image: Blacklist Loaded)

(Image: SquidGuard Catagories restored

UT1 is not working in pfBlockerNG because its using this link:

 ftp://ftp.ut-capitole.fr/pub/reseau/cache/squidguard_contrib/blacklists.tar.gz

First i thought its the issue with pfBlockerNG, but if i try to manually download this file from my desktop machine by using wget, this is what i get:

 wget ftp://ftp.ut-capitole.fr/pub/reseau/cache/squidguard_contrib/blacklists.tar.gz
--2022-08-03 20:27:53--  ftp://ftp.ut-capitole.fr/pub/reseau/cache/squidguard_contrib/blacklists.tar.gz
           => ‘blacklists.tar.gz’
Resolving ftp.ut-capitole.fr (ftp.ut-capitole.fr)... 193.49.48.249
Connecting to ftp.ut-capitole.fr (ftp.ut-capitole.fr)|193.49.48.249|:21... connected.
Logging in as anonymous ... Logged in!
==> SYST ... done.    ==> PWD ... done.
==> TYPE I ... done.  ==> CWD (1) /pub/reseau/cache/squidguard_contrib ... done.
==> SIZE blacklists.tar.gz ... 30615325
==> PASV ...

And thats where its stuck. I edited /usr/local/pkg/pfblockerng/ut1_global_usage and changed the link to point to

https://dsi.ut-capitole.fr/blacklists/download/blacklists.tar.gz

It gets downloaded without any issues, but it fails to install. I downloaded blacklists.tar.gz manually and unpacked it with tar, and there is another tar archive inside. pfBlockerNG extracts the content of the archive and expects folders containing category lists, but instead, its just another archive and thats where it fails.

I can extract the initial archive, and upload extracted tar file somewhere else, and update the link in ut1_global_usage file, and that works. But that needs to be done very time there is a update.

Is it safe to say that both Shallalist and UT1 are dead on pfBlockerNG ?