talosintelligence This happens
-
https://talosintelligence.com/documents/ip-blacklist
ERROR 404
SORRY, THIS PAGE DOES NOT EXIST. WE WERE OUT HUNTING BAD GUYS AND MUST HAVE MISSED UPDATING THIS LINK SOMEWHERE. OR YOU MISTYPED.Anyone know the correct url?
-
@Waqar-UK I think it moved here
https://snort.org/downloads/ip-block-list/terms
I believe this is the cisco talos list, or a sample of it - you have to accept the terms and then you get shown the list.
-
@Waqar-UK You can accept the terms, download the list to a file and put in
/var/db/pfblockerngThen change the path in pfBlockerNG to
/var/db/pfblockerng/<whatever you called the file>And then run a reload.
It won't update automatically, but you will have whatever's current. -
Thanks to all, how do I put that list into my webgui?
-
@Waqar-UK Go into Firewall | pfBlockerNG| I P | IPv4, edit the list and find the Talos entry. Change the
https://talosintelligence.com/documents/ip-blacklistline to
/var/db/pfblockerng/<whatever you called the file>You can use something like WinSCP to move your downloaded file to /var/db/pfblockerng/ if using Windows.
-
@Waqar-UK I would just copy paste into custom
