Dynamic Block List format clarification

MCmgt — Wed, 02 Apr 2014 19:33:29 GMT

I need some clarification on this great head start on Dynamic Block List format:

I note that a few lists seem ready to use without re-formatting like:

Is it safe to assume that the comments preceded by the pound sign and the blank lines are OK?

# Emerging Threats fwip rules.

# Raw IPs for the firewall block lists. These come from:

# C&C servers identified by Shadowserver (www.shadowserver.org)

[...snipped for brevity...]

# Rev 3391

# Shadowserver C&C List

103.11.74.118

103.241.0.100

103.4.52.150

[...snipped for brevity...]

Re: Dynamic Block List format clarification

jochristian — Thu, 03 Apr 2014 11:29:37 GMT

Hello MCmgt,

I configured our PA-3050 with this dynamic block list now.
And it works perfectly 🙂

Didn't know about this blocklist so thanks for your find.
We also use malwaredomainlist in our company (http://www.malwaredomainlist.com/hostslist/ip.txt).

/Jo Christian