Talos BL feed not working after v3.1.0_8 update
-
I don't know if it's coincidence but since updating pfBlockerNG-devel to 3.1.0_8 yesterday I'm seeing this:
I can't find any feed status on the talos site. Has this feed been discontinued and should I just remove it from pfB?
-
@terryzb Have you tried just opening the link? I am on 3.1.0_7 and the link shows as: https://talosintelligence.com/documents/ip-blacklist and redirects to: https://snort-org-site.s3.amazonaws.com/production/document_files/files/000/020/101/original/ip_filter.blf?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAU7AK5ITMJQBJPARJ%2F20221217%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20221217T021537Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=fcac7922b4df54750bf0a1c80ff677932d6fd43da5fd10b79924f3fd285a81d7 . Can you get to it with either of those?
You can also go to PFBLOCKERING/LOGS and open the ERROR logs. Scroll to the bottom to see if there is anything there mentioning that it was blocked from downloading (maybe by another feed?).
-
@tzvia I updated to 3.1.0_9 several hours ago and have not seen any new download failures. I'll see if it's still good in the morning and report back.
-
@Tzvia It started failing again this morning at 5AM. Followed the link 30 minutes ago at noon and got a 500 server error https://talosintelligence.com/documents/ip-blacklist
Just tried the link again and successfully see the list, so something going on with talos/AWS. Thanks for your help.