pfSense Support Subscription

Author Topic: pfBlocker IP List  (Read 1624 times)

0 Members and 1 Guest are viewing this topic.

Offline BBcan17

  • Full Member
  • ***
  • Posts: 231
  • Karma: +0/-0
    • View Profile
Re: pfBlocker IP List
« Reply #15 on: January 03, 2014, 07:42:11 pm »
Does anyone know what the difference is between the spamhaus extensions ".txt" and ".lasso".  Which one should be used for pfBlocker?

(Spamhaus - DROP)
     http://www.spamhaus.org/drop/drop.txt
     http://www.spamhaus.org/drop/drop.lasso

(Spamhaus - EDROP)
     http://www.spamhaus.org/drop/edrop.txt   
     http://www.spamhaus.org/drop/edrop.lasso


In Emerging Threats, these two lists seem to be the same but the data is different. Which lists should be used in pfBlocker?

     http://rules.emergingthreats.net/blockrules/rbn-ips.txt
     http://doc.emergingthreats.net/pub/Main/RussianBusinessNetwork/RussianBusinessNetworkIPs.txt

          (Here are the other ET lists)
     http://rules.emergingthreats.net/fwrules/emerging-Block-IPs.txt
     http://rules.emergingthreats.net/blockrules/compromised-ips.txt
     http://rules.emergingthreats.net/blockrules/rbn-malvertisers-ips.txt
     
For anyone that is interested i came across these lists :

(Brute Force Blocker)
     http://danger.rulez.sk/projects/bruteforceblocker/blist.php   

(OpenBL)   
     http://www.us.openbl.org/lists/base_30days.txt            

Here are three others but they are not in a Txt format. Does anyone have any suggestions to get these to work with pfBlocker?

(AutoShun)
     http://www.autoshun.org/files/shunlist.csv   

(Maxmind Proxies)
     http://www.maxmind.com/en/anonymous_proxies            

(Project Honeypot)
     http://www.projecthoneypot.org/list_of_ips.php?t=d&rss=1



Online Supermule

  • Hero Member
  • *****
  • Posts: 1493
  • Karma: +1/-1
    • View Profile
Re: pfBlocker IP List
« Reply #16 on: January 03, 2014, 10:41:46 pm »
If you run Snort and use emergingthreats, the same list appears in the RBN rules.
Kind regards Brian


Offline jflsakfja

  • Full Member
  • ***
  • Posts: 165
  • Karma: +1/-0
    • View Profile
Re: pfBlocker IP List
« Reply #17 on: January 04, 2014, 11:39:21 pm »
Does anyone know what the difference is between the spamhaus extensions ".txt" and ".lasso".  Which one should be used for pfBlocker?
....
Use the txt one and make sure you select txt next to the list when setting it up.