Comments (3)
interesting...
let's see who listed it:
# echo "192.30.253.112/31" | iprange - --compare-next /etc/firehol/ipsets/*.{ip,net}set --header | grep -v ",0$"
name1,name2,entries1,entries2,ips1,ips2,combined_ips,common_ips
stdin,/etc/firehol/ipsets/firehol_level4.netset,1,90547,2,9586204,9586204,2
stdin,/etc/firehol/ipsets/cleanmx_viruses.ipset,1,12190,2,12190,12190,2
stdin,/etc/firehol/ipsets/blueliv_crimeserver_online.ipset,1,53132,2,53132,53133,1
So, cleanmx_viruses
lists both IPs and blueliv_crimeserver_online
lists one of them.
from blocklist-ipsets.
ok, I did predict this. The description of firehol_level4 says:
An ipset made from blocklists that track attacks, but may include a large number of false positives. (includes: cleanmx_viruses blocklist_net_ua botscout_30d cruzit_web_attacks cybercrime haley_ssh iblocklist_hijacked iblocklist_spyware iblocklist_webexploit ipblacklistcloud_top iw_wormlist malwaredomainlist)
So, I advise you to use this blocklist to block only inbound connections. In your firewall, block the connection tracker state NEW
on packets coming from firehol_level4
. This will allow you to talk to them, but will prevent them from connecting to you.
If you use the blacklist helper of firehol, use blacklist them ...
not blacklist full ...
.
from blocklist-ipsets.
thanks. I actually use your blocklists in Pfsense's PfBlockerNG package :)
You're doing the Lord's work, sir
from blocklist-ipsets.
Related Issues (20)
- Adding ELLIO: IP Feed (Community version) to threat lists.
- Added a mirror @ borestad/firehol-mirror HOT 1
- [firehol_abusers_1d]: Blocking Zoom
- [firehol_level1]: RFC1918 in the list HOT 2
- [firehol_level2]: included a ovhcloud.com IP portal
- FIREHOL = ABANDON-WARE HOT 2
- [iblocklist_level2]: Erroneous Content of Class C Private IP Address
- [firehol_anonymous]: www.google.com blocked by mistake
- firehol_level3.netset there rawgithubusercontent ip over here please remove.
- [dyndns_ponmocup]: www.ispreview.co.uk (217.160.0.152) incorrectly blocked by dyndns_ponmocup and firehol_webclient
- [firehol_level2]: Blocking Twitch.tv HOT 1
- [firehol_level3]: Github HOT 4
- [urlvir]: uvnc.eu (213.186.33.4) blocks uVNC downloads
- how to download ? sorbs_noserver.netset
- dshield lists out of date
- [firehol_proxies]: request to remove IP 91.221.27.14 from black list
- 192.168.1.10 Does not belong on level 2 list HOT 1
- [Feature Request] Add IPinfo IP to Country dataset for the fireHOL location map
- Normshield crashes update, creates junk ipsets HOT 1
- [firehol_abusers_30d]: Remove cdn.shopify.com IP addresses from this list
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from blocklist-ipsets.