mirror/eworm-de-routeros-scripts
1
0
Fork 0
mirror of https://github.com/eworm-de/routeros-scripts.git synced 2024-05-11 05:55:19 +00:00
Code Releases Activity

fw-addr-lists: add lists from abuse.ch in config

Browse Source
This commit is contained in:
Christian Hesse
2023-06-09 16:03:36 +02:00
parent 589492621b
commit 53ad7b717d
2 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
doc/fw-addr-lists.md
View File

@ -12,7 +12,8 @@ Description
This script downloads, imports and updates firewall address-lists. Its main This script downloads, imports and updates firewall address-lists. Its main
purpose is to block attacking ip addresses, spam hosts, command-and-control purpose is to block attacking ip addresses, spam hosts, command-and-control
servers and similar malicious entities. The default configuration contains servers and similar malicious entities. The default configuration contains
a list from [dshield.org](https://dshield.org/). lists from [abuse.ch](https://abuse.ch/) and
[dshield.org](https://dshield.org/).
The address-lists are updated in place, so after initial import you will not The address-lists are updated in place, so after initial import you will not
see situation when the lists are not populated. see situation when the lists are not populated.

4
global-config.rsc
View File

@ -89,6 +89,10 @@
"block"={ "block"={
# { url="https://eworm.de/ros/fw-addr-lists/block"; # { url="https://eworm.de/ros/fw-addr-lists/block";
# cert="R3" }; # cert="R3" };
{ url="https://feodotracker.abuse.ch/downloads/ipblocklist_recommended.txt";
cert="GlobalSign Atlas R3 DV TLS CA 2022 Q3" };
{ url="https://sslbl.abuse.ch/blacklist/sslipblacklist.txt";
cert="GlobalSign Atlas R3 DV TLS CA 2022 Q3" };
{ url="https://www.dshield.org/block.txt"; cidr="/24"; { url="https://www.dshield.org/block.txt"; cidr="/24";
cert="R3" }; cert="R3" };
}; };