Create EDL, first line invalid

[PerTenggren]

Hi, trying to create an dynamic IP-List (EDL) including two subnets:

10.0.1.0/24
10.0.2.0/24

The firewall downloads the list but displays the following error "Valid entries(1) lines skipped(1)" and when I display the list only 10.0.2.0/24 shows up. If I add an comment at the very top of the list it all works. Can anyone explain why?

#My list
10.0.1.0/24
10.0.2.0/24

Valid entries(2) lines skipped(1)

[TranceforLife]

; l think is required :

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/policy/formatting-guidelines-for-an-...

[PerTenggren]

Hi,

Not sure I understand where to put this ;

Just to clarify, the last example works and both subnets shows up in the list.

[TranceforLife]

Sorry, I have misread your issue. Don't really know why it does matter for the firewall

[ansharma]

 Hi PerTenggren,

I think the first character is not being liked for some reason. I think the first character can either be space, comment or an address.

Can you share the list for both cases?

Regards,

Anurag

[gwesson]

You may want to double-check the formatting of the list file. Ensure that the same carriage return/line feed character is being used for both addresses.

Try a couple troubleshooting steps:

• Add a 3rd subnet, see if it takes the bottom two or only the last one.
• Swap the order to see if the problem follows the location or the address.
• If you've got a header in the file, remove that and start only with the first address.
• Try using a range to see if that works (10.0.1.0-10.0.1.254)

[PerTenggren · Accepted solution]

Looks like Windows create a strange char in the beginning of the file. (<U+FEFF>) The order does not matter or how many entries I put in the list. As long as the IP-numbers begins at line 2 all works perfect.

vsys1/EdgeIT-IP:
Next update at : Wed Apr 5 11:33:57 2017
Source : 
Referenced : Yes
Valid : Yes
Auth-Valid : Yes

Total valid entries : 1
Total invalid entries : 1
Valid ips:
10.0.2.0/24

Invalid ips:
<U+FEFF>10.0.1.0/24

[JimMcGrady]

Palo seems fussy about non-displayed characters in the text file. Even the use of carriage return and line feed, as it differs between Windows and Unix text file variants, can mess it up.