Dynamic Block List format clarification

[MCmgt]

I need some clarification on this great head start on Dynamic Block List format:

Working with External Block List (EBL) Formats and Limitations

I note that a few lists seem ready to use without re-formatting like:

http://rules.emergingthreats.net/fwrules/emerging-Block-IPs.txt

Is it safe to assume that the comments preceded by the pound sign and the blank lines are OK?

#

# Emerging Threats fwip rules.

#

# Raw IPs for the firewall block lists. These come from:

#

# C&C servers identified by Shadowserver (www.shadowserver.org)

[...snipped for brevity...]

#

# Rev 3391

# Shadowserver C&C List

103.11.74.118

103.241.0.100

103.4.52.150

[...snipped for brevity...]

[jochristian · Accepted solution]

Hello MCmgt,

I configured our PA-3050 with this dynamic block list now.
And it works perfectly 🙂

Didn't know about this blocklist so thanks for your find.
We also use malwaredomainlist in our company (http://www.malwaredomainlist.com/hostslist/ip.txt).

/Jo Christian